last executing test programs: 1m32.425041045s ago: executing program 2 (id=121): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="2feebe8d881590f656d01482831f4b036a7bb40c6782cbb5dafe72ea85766575551d40e3", 0x24}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) close_range(r0, 0xffffffffffffffff, 0x0) 1m32.382840835s ago: executing program 2 (id=123): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000440)={'syz_tun\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000480), 0x12) listen(r2, 0x5) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000008050010010b"], 0xa) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000805001001"], 0xa) 1m32.168115261s ago: executing program 2 (id=126): socket$inet_sctp(0x2, 0x1, 0x84) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000138000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1800008, 0x1031, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3}) munmap(&(0x7f0000e9c000/0x14000)=nil, 0x14000) syz_open_dev$audion(0x0, 0x6, 0x48000) 1m31.245761834s ago: executing program 2 (id=133): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0x9}, {0xd, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000810) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20, 0x1000000}, 0x0) 1m21.219405728s ago: executing program 2 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000002300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 1m20.298493701s ago: executing program 2 (id=143): ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0xa8a, 0x4}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m5.16911213s ago: executing program 32 (id=143): ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0xa8a, 0x4}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.516618015s ago: executing program 0 (id=747): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000038c0)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0xb, @private0, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000001b40)=[@sndrcv={0x30, 0x84, 0x1, {0x8377, 0x2, 0x6, 0x18000, 0x5, 0x6, 0x3, 0x5}}], 0x30, 0x8015}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) 3.440771186s ago: executing program 0 (id=748): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000480)='./proc\x00', 0x58) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000b40)={[{@noblock_validity}, {}, {@journal_ioprio}, {@resuid}, {@init_itable}, {@nodelalloc}, {@grpid}, {@noinit_itable}, {@nomblk_io_submit}]}, 0x3, 0x57f, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x18c) fallocate(r2, 0x10, 0x6, 0x10001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) 3.351042059s ago: executing program 1 (id=750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73a, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f00000002c0)=';', 0x1) 3.209093482s ago: executing program 0 (id=751): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0xfffffffe, 0x1}, 0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r1) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000080)="f0f4585e74f3da9d74bb141310913299d19040d65ca4133594a1c77c83acd647784066b94b7f482c1c0def8f56fb7aa30e99c136db55669258", 0x39}, {&(0x7f0000000480)="d4a50b8cfd10badd5abc524e6fd1faa06f8320854323cfe5", 0x18}], 0x2, 0x0, 0x0, 0x8010}], 0x1, 0x800) 2.681592935s ago: executing program 0 (id=753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_pidfd_open(r0, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000040)=""/215) 2.681029655s ago: executing program 4 (id=756): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04080402c8000932132754431d0f862316648b620c252446f571c08ed83da32c0753a5864a8bcf6db8b07956d16131969ab46d1e38a3a36c1fd7c144dfb3"], 0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) write$rfkill(r0, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 2.239520795s ago: executing program 1 (id=757): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x0, &(0x7f0000000640), 0xfe, 0x259, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x101e42, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000a80)=0x400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000b00)='\f', 0x1, 0x8000c61) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) read$FUSE(r2, &(0x7f0000002c40)={0x2020}, 0x2020) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 2.130064648s ago: executing program 5 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000540)={0x0, 0x5f5e100}, &(0x7f0000000580)) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_IE={0x4}]}, 0x44}}, 0x0) 2.108385189s ago: executing program 3 (id=760): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c6) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @val=@perf_event={0x10}}, 0x18) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@noxattr}, {@cache_fscache}, {@cache_fscache}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, 'wfdno'}}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='8086 1237 FFFFFFFF FFFFFFFF 000', 0x1f) 2.100969039s ago: executing program 1 (id=761): syz_open_procfs(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0x4, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.0684345s ago: executing program 3 (id=762): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000440)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) write(r0, &(0x7f00000001c0)="ff", 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 2.04111876s ago: executing program 3 (id=763): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x24008818, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) shutdown(r1, 0x1) 1.781972147s ago: executing program 0 (id=764): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000340)='\f', 0xffffffffffffffc9, 0x4c001, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) 1.781754237s ago: executing program 4 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638477fbac141416ac141416441818034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 1.775569437s ago: executing program 3 (id=766): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={0xffffffffffffffff}, 0x4) 1.2291229s ago: executing program 1 (id=767): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 1.141062932s ago: executing program 5 (id=768): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x34, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x0) 901.421468ms ago: executing program 3 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73a, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f00000002c0)=';', 0x1) 900.813158ms ago: executing program 5 (id=779): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r2, 0xd, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r0, 0x0, r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 891.561658ms ago: executing program 4 (id=770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001900)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001c40)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001c80)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000001cc0)="05", 0x5dc, 0x4009, &(0x7f0000001d00)={0x11, 0x8100, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 463.682849ms ago: executing program 0 (id=771): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r0, &(0x7f0000000180)=""/233, 0xe9, 0x40000002, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1}, 0x3}], 0x1, 0x23, 0x0) 463.517139ms ago: executing program 5 (id=772): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000001080)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=winnt,shortname=winnt,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c000000000000009e5fcf6469722c8c48642c6e66733d6e6f730000000000000000000000aa08a079562dc580f94359b50fc381462a28bf9749c5b27437b9309cf7005b8d2c01f5924346acd0dc0a92610e9c0caab92f5db4ca6fa50d4d745895391bdb2336d1cdcc22d76134468c0e5f02a06be179d43fa21f7aabaa47bd61e9e186775d1d790e25492c1ffce004a786a1fab159984ac5205a6c6ecc34ffa55b"], 0x1, 0x274, &(0x7f00000005c0)="$eJzs3cFrk2ccB/Bf2nRJCyM5DMrGYO/YZafQduyeMjoYC2xs5KAni01RmlpooaCHtrfi/6D/gh69Ch7Eq/+ACFIFL9ZTD0IkvmlNahIbbRqxn8+lP5739+V5nrcveemhTy79uLqytLaxvL+/F/l8JrLlKMdBJooxFuOR2gkA4Gty0GjEq0Zq1GsBAM6G9z8AnD/93v+ZnaOxf89+ZQDAsHzW3/9jQ1kSADBk/1+4+Pd8pbLwX5LkI1Z3N6ub1fRnen1+Oa5GPWoxE4V4E9E4ktZ//lVZmEmanhcjv7o9lua3N6vjnfnZKESxe342SUW1mTvMT8RUK/9kKmoxF4X4rnt+rmv+m/j1l7b5S1GIx5djLeqxFM1sms9FxNZskvzxT+VYPveuDwAAAAAAAAAAAAAAAAAAAAAAhqGUHCl2nn+Tnt9TKvW6nubbzwea7Hc+UGP72Pk62fghO9q9AwAAAAAAAAAAAAAAAAAAwJdi4/qNlcV6vbber7j26M6DvVwa+Ghz/yLTmnew1G7fnsmT7eJY8e3Pz251u5SL3KD359OKiYhoH0laU97/aYiTnlbxcO/K979tTP/eqyey7SM3m1vt6OnxIGWHdcNfFiI6RyZat7ter+UHfiDbi7uHRfn1Bz2Hj1JtfXLUv7jp2+XFe1tPX5w01edDozF+2h9DAAAAAAAAAAAAAAAAAABAx/+3j3olAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA677//f9AiFx0j+Z7NmZ1RbxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHPvbQAAAP//Th2Rtg==") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x181000) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x5, 0x4800003e, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) 404.02049ms ago: executing program 4 (id=773): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x9}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xb, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="03031b003000320006006300000000442f"], 0x76) 346.032532ms ago: executing program 5 (id=774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) 245.363184ms ago: executing program 4 (id=775): r0 = fanotify_init(0x40, 0x40000) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1) r1 = fsopen(&(0x7f0000000080)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) getdents64(r3, &(0x7f00000001c0)=""/163, 0xba974ed140df4995) getdents64(r3, 0x0, 0x0) 165.036866ms ago: executing program 1 (id=776): bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x3, 0x2bc, &(0x7f0000000440)="$eJzs3U9rY1UUAPDz0uQ1QxfNwpUIvsUs3DhMZ+vCDFJB7ErJwj+ggzMDQxMGGgiMimFWfgIXLvwe7twLbvwGgguX7hykcOW9lyYxySTTjmml/H6b3p57zrv35t02hfBuP39tcHz/8fDh069/i3Y7i0Y3uvEsi0404kyaCADgWniWUvx5off3ZmNbcwIAtmvu/b/1nJTd5dDb254WALBFH3708ft3j44OPyiKdsTg21Evi/pr3X/3YTyKfjyI27Efp7PPAlKq2+++d3QYzaLUiZuD8ahXVg4++2WamkdVfxD70Vldf1DU5urHo2b1l0eWRTzqlhO5E/vxylJ92X94Z0V99PJ4oz1ZZDn+rdiPX7+Ix9GP+9VnGrPxv8mjeCd999dXn5TJZX02HvV2q7yZtHPZ9wYAAAAAAAAAAAAAAAAAAAAAgOvrVjHViZuDMlSfv9PbOa36Zwnlt9X5Oo2qv67PIvKqsXA+0DjFD2fn69wuiiJldf70fJ8bzXi1Gc2rWjcAAAAAAAAAAAAAAAAAAAD8nwyffHl8r99/cPKfNCYP+U8f67/odbpzkddjffLuucaKnUl6OdfFnIOfPx1MI+UiLjL5UauIWDfn1lLkRjmfzVf+O6WUsizi5W5T60XG2tDYW59TvsA/fb/35vG9bNNr2D67cT/Od+VxMnyycE8jWz/o6b8i6VzbL1+Tk092zAtdZ+8lf4je+r0ebBLJNqyiNRdpTRrxvO3XPtd+vrzfQQAAAAAAAAAAAAAAAAAAQG320O+KzqdrSxtbmxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXLLZ//+fNWIpstAYxx9V8eqclNJ4GsnjZHjVawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD6+ycAAP//FrZtJA==") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x3c4c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 120.678387ms ago: executing program 4 (id=777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f088a848e00500720e0000002f77fbac141516e0000001440c0510b18000890304000084508864325f003911050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 120.114297ms ago: executing program 1 (id=778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x89, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 6.97108ms ago: executing program 3 (id=780): unshare(0x2c020400) r0 = socket(0x22, 0x2, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, 0x0, &(0x7f0000000040)) sendto$packet(r1, 0x0, 0x0, 0x100400c1, &(0x7f0000000200)={0x11, 0x8137, 0x0, 0x1, 0x87, 0x6, @broadcast}, 0x14) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r3, r3}, &(0x7f0000000480)=""/66, 0x42, &(0x7f0000000340)={&(0x7f0000000280)={'sha224-generic\x00'}}) bind$bt_hci(r0, 0x0, 0x0) 0s ago: executing program 5 (id=781): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) fallocate(r0, 0x0, 0xeffb, 0xe396) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r3, 0x0, 0x0, 0xce2c, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000004680), 0x0, 0x0}, 0x40) kernel console output (not intermixed with test programs): lave_0) entered disabled state [ 31.583106][ T4329] device bridge_slave_0 entered promiscuous mode [ 31.608759][ T4335] device hsr_slave_0 entered promiscuous mode [ 31.647863][ T4335] device hsr_slave_1 entered promiscuous mode [ 31.687676][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.689050][ T4335] Cannot create hsr debugfs directory [ 31.738817][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.777921][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.827767][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.829413][ T4330] Cannot create hsr debugfs directory [ 31.833559][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.834860][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.836536][ T4329] device bridge_slave_1 entered promiscuous mode [ 31.871802][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.880424][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.904861][ T4329] team0: Port device team_slave_0 added [ 31.910386][ T4329] team0: Port device team_slave_1 added [ 31.927843][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.931672][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.936258][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.943278][ T4331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.999118][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.000528][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.005465][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.013138][ T4331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.058754][ T4331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.107672][ T4331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.218917][ T4329] device hsr_slave_0 entered promiscuous mode [ 32.257926][ T4329] device hsr_slave_1 entered promiscuous mode [ 32.297705][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.299262][ T4329] Cannot create hsr debugfs directory [ 32.311895][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.363403][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.403314][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.442176][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.487737][ T4330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.530521][ T4330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.569030][ T4330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.613492][ T4330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.637847][ T4340] Bluetooth: hci0: command 0x0409 tx timeout [ 32.637852][ T4344] Bluetooth: hci4: command 0x0409 tx timeout [ 32.639068][ T4340] Bluetooth: hci1: command 0x0409 tx timeout [ 32.640293][ T4344] Bluetooth: hci3: command 0x0409 tx timeout [ 32.641412][ T4340] Bluetooth: hci2: command 0x0409 tx timeout [ 32.682556][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.686159][ T4335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.742006][ T4335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.799555][ T4335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.870651][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.872868][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.874670][ T4335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.912017][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.916112][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.931909][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.933966][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.936000][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.937532][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.945555][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.947421][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.950472][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.952275][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.008709][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.050608][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.055636][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.109394][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.152120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.154281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.156219][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.157790][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.159455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.162961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.172615][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.175469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.178067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.180699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.182446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.184028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.188465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.190214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.196322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.198595][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.200809][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.202549][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.204217][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.205526][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.207271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.211388][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.217488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.219634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.221555][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.223030][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.224708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.226411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.232098][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.238619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.240361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.242292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.243834][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.245061][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.246552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.250145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.251781][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.252999][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.257210][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.263848][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.273007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.280852][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.282923][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.284821][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.286723][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.304447][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.307288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.309766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.312075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.313976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.324139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.325761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.328292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.330258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.332153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.342221][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.344661][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.346506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.348612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.350499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.352415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.361953][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.364136][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.366509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.368612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.370219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.371990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.373592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.375142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.385185][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.388101][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.390407][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.401090][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.402719][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.411156][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.413478][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.415403][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.417018][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.418381][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.423398][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.432868][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.434932][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.436706][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.438149][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.440995][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.443005][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.444857][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.446656][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.448788][ T1870] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.450099][ T1870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.453474][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.455309][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.457398][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.463232][ T1870] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.464761][ T1870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.468337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.470897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.473541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.475156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.476962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.490016][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.492145][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.494124][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.495930][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.500955][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.502597][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.504533][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.506258][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.510006][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.511782][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.514382][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.517091][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.531856][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.535673][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.538868][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.540832][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.542322][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.546348][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.548565][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.553027][ T4331] device veth0_vlan entered promiscuous mode [ 33.560938][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.562889][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.564963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.566908][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.569568][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.571154][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.574967][ T4331] device veth1_vlan entered promiscuous mode [ 33.579754][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.583445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.585073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.586793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.589561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.591552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.602068][ T4330] device veth0_vlan entered promiscuous mode [ 33.604491][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.606856][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.609497][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.611426][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.613119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.622109][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.623866][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.625633][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.630744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.632416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.639275][ T4331] device veth0_macvtap entered promiscuous mode [ 33.642733][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.646937][ T4330] device veth1_vlan entered promiscuous mode [ 33.651270][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.653007][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.654835][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.656449][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.664445][ T4331] device veth1_macvtap entered promiscuous mode [ 33.676011][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.677734][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.679864][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.681485][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.683430][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.685122][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.692169][ T4328] device veth0_vlan entered promiscuous mode [ 33.699710][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.702974][ T4330] device veth0_macvtap entered promiscuous mode [ 33.705647][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.707189][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.711990][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.713849][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.715585][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.719778][ T4330] device veth1_macvtap entered promiscuous mode [ 33.723870][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.727331][ T4328] device veth1_vlan entered promiscuous mode [ 33.733530][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.735273][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.737132][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.739509][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.742383][ T4331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.744155][ T4331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.745838][ T4331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.747560][ T4331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.757582][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.760308][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.762772][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.765657][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.767480][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.772151][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.773520][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.775523][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.782058][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.783713][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.797343][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.800343][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.802784][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.809313][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.811412][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.813888][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.815768][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.817483][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.821551][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.823241][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.825760][ T4330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.827383][ T4330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.829941][ T4330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.831564][ T4330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.840034][ T4329] device veth0_vlan entered promiscuous mode [ 33.845815][ T4329] device veth1_vlan entered promiscuous mode [ 33.851185][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.852967][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.854788][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.858565][ T4328] device veth0_macvtap entered promiscuous mode [ 33.861249][ T4328] device veth1_macvtap entered promiscuous mode [ 33.870183][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.871820][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.873711][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.877019][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.880665][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.882525][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.884641][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.887277][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.896211][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.898124][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.912923][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.915137][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.919635][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.921787][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.924486][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.930821][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.932812][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.940676][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.942496][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.944690][ T4427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.946764][ T4329] device veth0_macvtap entered promiscuous mode [ 33.949851][ T4427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.951379][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.951393][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.952033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.956780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.965746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.970637][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.972153][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.973872][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.975610][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.987516][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.989216][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.990855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.995584][ T4329] device veth1_macvtap entered promiscuous mode [ 33.997430][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.999176][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.003745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.005565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.010106][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.012057][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.014163][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.016192][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.018548][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.020683][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.023484][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.026344][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.029214][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.044302][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.046063][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.049537][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.051740][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.053856][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.055907][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.058907][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.060851][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.063148][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.064999][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.066934][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.070465][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.072212][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.075007][ T4335] device veth0_vlan entered promiscuous mode [ 34.079392][ T4335] device veth1_vlan entered promiscuous mode [ 34.083957][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.085723][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.087291][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.089932][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.092641][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.094287][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.095994][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.099907][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.115129][ T4335] device veth0_macvtap entered promiscuous mode [ 34.118601][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.120476][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.123189][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.135061][ T4335] device veth1_macvtap entered promiscuous mode [ 34.170050][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.172162][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.173933][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.175854][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.179527][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.181620][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.183543][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.185642][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.188604][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.193882][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.195758][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.199784][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.216613][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.217088][ T4426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.218445][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.221362][ T4426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.223287][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.225651][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.230541][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.233425][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.235217][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.237119][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.240379][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.242381][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.244361][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.246295][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.249955][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.251497][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 34.266723][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.268826][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.274571][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.276180][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.278547][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.282676][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.284088][ T4335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.284178][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.285899][ T4335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.290169][ T4335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.292229][ T4335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.295581][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.308620][ T4446] loop2: detected capacity change from 0 to 32768 [ 34.328187][ T4446] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (4446) [ 34.334797][ T4446] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 34.339794][ T4446] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 34.345944][ T4446] BTRFS info (device loop2): setting nodatacow, compression disabled [ 34.350656][ T4446] BTRFS info (device loop2): setting datasum, datacow enabled [ 34.354632][ T4446] BTRFS info (device loop2): force clearing of disk cache [ 34.357147][ T4446] BTRFS info (device loop2): enabling ssd optimizations [ 34.364068][ T4446] BTRFS info (device loop2): using spread ssd allocation scheme [ 34.384549][ T4427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.386246][ T4427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.388053][ T4446] BTRFS info (device loop2): turning on sync discard [ 34.389481][ T4446] BTRFS info (device loop2): turning on flush-on-commit [ 34.390750][ T4446] BTRFS info (device loop2): not using ssd optimizations [ 34.392092][ T4446] BTRFS info (device loop2): not using spread ssd allocation scheme [ 34.393668][ T4446] BTRFS info (device loop2): using free space tree [ 34.406893][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.408562][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.412680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.414813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.518585][ T4462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.807970][ T4339] Bluetooth: hci2: command 0x041b tx timeout [ 34.809491][ T4339] Bluetooth: hci3: command 0x041b tx timeout [ 34.811044][ T4339] Bluetooth: hci1: command 0x041b tx timeout [ 34.812497][ T4339] Bluetooth: hci4: command 0x041b tx timeout [ 34.813898][ T4339] Bluetooth: hci0: command 0x041b tx timeout [ 34.901459][ T4446] BTRFS info (device loop2): rebuilding free space tree [ 35.050571][ T4446] BTRFS info (device loop2): balance: start -d -m [ 35.057101][ T4446] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 35.087136][ T4446] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 35.124590][ T4446] BTRFS info (device loop2): found 7 extents, stage: move data extents [ 35.142717][ T4446] BTRFS info (device loop2): found 1 extents, stage: update data pointers [ 35.156383][ T4446] BTRFS info (device loop2): balance: ended with status: 0 [ 35.908400][ T4331] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 36.684858][ T4520] loop2: detected capacity change from 0 to 1024 [ 36.686873][ T4520] ======================================================= [ 36.686873][ T4520] WARNING: The mand mount option has been deprecated and [ 36.686873][ T4520] and is ignored by this kernel. Remove the mand [ 36.686873][ T4520] option from the mount to silence this warning. [ 36.686873][ T4520] ======================================================= [ 36.711227][ T4520] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.726937][ T4520] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.16: lblock 3 mapped to illegal pblock 3 (length 1) [ 36.731179][ T4520] EXT4-fs (loop2): Remounting filesystem read-only [ 36.749861][ T4524] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm iou-wrk-4520: lblock 3 mapped to illegal pblock 3 (length 1) [ 36.753559][ T4524] EXT4-fs (loop2): Remounting filesystem read-only [ 36.887686][ T4340] Bluetooth: hci0: command 0x040f tx timeout [ 36.887874][ T4339] Bluetooth: hci4: command 0x040f tx timeout [ 36.888806][ T4340] Bluetooth: hci1: command 0x040f tx timeout [ 36.889822][ T4339] Bluetooth: hci3: command 0x040f tx timeout [ 36.890925][ T4340] Bluetooth: hci2: command 0x040f tx timeout [ 37.017722][ T4523] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 37.021731][ T4523] EXT4-fs (loop2): Remounting filesystem read-only [ 38.958050][ T4340] Bluetooth: hci2: command 0x0419 tx timeout [ 38.968079][ T4344] Bluetooth: hci3: command 0x0419 tx timeout [ 38.969222][ T4344] Bluetooth: hci1: command 0x0419 tx timeout [ 38.970249][ T4344] Bluetooth: hci4: command 0x0419 tx timeout [ 38.971441][ T4344] Bluetooth: hci0: command 0x0419 tx timeout [ 46.293165][ T4486] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 46.331555][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 46.345942][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 46.387922][ T4532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 46.394117][ T4407] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.321801][ T4643] loop0: detected capacity change from 0 to 8 [ 48.339258][ T4650] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 48.345254][ T4643] SQUASHFS error: zlib decompression failed, data probably corrupt [ 48.346904][ T4643] SQUASHFS error: Failed to read block 0x9b: -5 [ 48.354472][ T4643] SQUASHFS error: Unable to read metadata cache entry [99] [ 48.355849][ T4643] SQUASHFS error: Unable to read inode 0x127 [ 48.412293][ T4653] loop1: detected capacity change from 0 to 512 [ 48.421416][ T4653] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.435970][ T4653] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.437315][ T4653] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 48.441499][ T4653] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.40: attempt to clear invalid blocks 2 len 1 [ 48.445633][ T4653] EXT4-fs (loop1): Remounting filesystem read-only [ 48.447205][ T4653] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 48.450691][ T4653] EXT4-fs (loop1): Remounting filesystem read-only [ 48.452348][ T4653] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.40: invalid indirect mapped block 1819239214 (level 0) [ 48.455689][ T4653] EXT4-fs (loop1): Remounting filesystem read-only [ 48.457289][ T4653] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.40: invalid indirect mapped block 1819239214 (level 1) [ 48.469919][ T4653] EXT4-fs (loop1): Remounting filesystem read-only [ 48.472158][ T4653] EXT4-fs (loop1): 1 truncate cleaned up [ 48.473441][ T4653] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.503373][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 48.557952][ T4659] process 'syz.1.42' launched './file0' with NULL argv: empty string added [ 48.570819][ T4661] binder: 4660:4661 tried to acquire reference to desc 0, got 1 instead [ 48.572919][ T4661] binder: 4660:4661 got transaction to invalid handle, 2 [ 48.574527][ T4661] binder: 4661:4660 cannot find target node [ 48.575740][ T4661] binder: 4660:4661 transaction async to 0:0 failed 5/29201/-22, size 0-0 line 3062 [ 48.578950][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 48.613320][ T4663] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 48.614737][ T4663] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.618742][ T4663] vhci_hcd vhci_hcd.0: Device attached [ 48.686518][ T4664] vhci_hcd: connection closed [ 48.687591][ T4426] vhci_hcd: stop threads [ 48.689951][ T4426] vhci_hcd: release socket [ 48.690885][ T4426] vhci_hcd: disconnect device [ 48.979152][ T4673] device syzkaller0 entered promiscuous mode [ 48.980554][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 49.063821][ T4677] loop2: detected capacity change from 0 to 16 [ 49.067228][ T4677] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 49.072382][ T4677] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 49.097172][ T4677] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 49.605589][ T4694] loop3: detected capacity change from 0 to 256 [ 49.618617][ T4694] exfat: Bad value for 'uid' [ 49.881486][ T4710] loop3: detected capacity change from 0 to 512 [ 49.903126][ T4712] binder: 4711:4712 tried to acquire reference to desc 0, got 1 instead [ 49.905656][ T4712] binder: 4711:4712 got transaction with out-of-order buffer fixup [ 49.912237][ T4710] EXT4-fs: Ignoring removed nobh option [ 49.931153][ T4712] binder: 4711:4712 transaction call to 4711:0 failed 10/29201/-22, size 112-24 line 3469 [ 49.938755][ T4407] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.949065][ T4717] device syzkaller0 entered promiscuous mode [ 50.087450][ T4710] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.603598][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 51.482428][ T4768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.491300][ T4768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.865068][ T4806] binfmt_misc: register: failed to install interpreter file ./file0 [ 51.877434][ T4807] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 51.928024][ T4810] netlink: 'syz.0.74': attribute type 1 has an invalid length. [ 51.995693][ T4811] netlink: 'syz.0.74': attribute type 10 has an invalid length. [ 51.997495][ T4811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.74'. [ 52.002130][ T4811] device dummy0 entered promiscuous mode [ 52.037658][ T4815] loop3: detected capacity change from 0 to 512 [ 52.085521][ T4815] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.526676][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 52.604359][ T4828] loop1: detected capacity change from 0 to 32768 [ 52.636118][ T4828] XFS (loop1): Mounting V5 Filesystem [ 52.664406][ T4828] XFS (loop1): Ending clean mount [ 52.669707][ T4828] XFS (loop1): Quotacheck needed: Please wait. [ 52.684052][ T4828] XFS (loop1): Quotacheck: Done. [ 52.746845][ T4328] XFS (loop1): Unmounting Filesystem [ 53.349457][ T4842] loop1: detected capacity change from 0 to 128 [ 53.381611][ T4842] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 53.861659][ T4857] loop3: detected capacity change from 0 to 128 [ 53.897207][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 53.902173][ T4857] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 53.923611][ T4860] loop2: detected capacity change from 0 to 164 [ 53.930555][ T4857] hpfs: filesystem error: improperly stopped [ 53.931911][ T4857] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 53.937684][ T4857] hpfs: You really don't want any checks? You are crazy... [ 53.939022][ T4857] hpfs: Code page index out of array [ 53.939991][ T4857] hpfs: code page support is disabled [ 53.941583][ T4857] hpfs: hpfs_map_4sectors(): unaligned read [ 53.943376][ T4857] hpfs: hpfs_map_4sectors(): unaligned read [ 53.944410][ T4857] hpfs: filesystem error: unable to find root dir [ 54.120109][ T4864] binder: 4863:4864 tried to acquire reference to desc 0, got 1 instead [ 54.122507][ T4864] binder: 4863:4864 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 54.125076][ T4864] binder: 4864 RLIMIT_NICE not set [ 54.126194][ T4864] binder: undelivered transaction 15, put_user failed [ 54.127398][ T4864] binder: 4863:4864 ioctl c0306201 2000c200 returned -14 [ 54.131455][ T4502] binder: undelivered TRANSACTION_COMPLETE [ 54.176378][ T4868] loop4: detected capacity change from 0 to 4096 [ 54.237257][ T4868] ntfs3: loop4: Failed to load $Extend. [ 54.516897][ T4335] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 54.519209][ T4335] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 54.986434][ T4897] lo: Caught tx_queue_len zero misconfig [ 54.987837][ T4897] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 55.003440][ T4891] loop2: detected capacity change from 0 to 32768 [ 55.013534][ T4891] XFS (loop2): Mounting V5 Filesystem [ 55.055368][ T4891] XFS (loop2): Ending clean mount [ 55.060278][ T4891] XFS (loop2): Quotacheck needed: Please wait. [ 55.077512][ T4891] XFS (loop2): Quotacheck: Done. [ 55.147501][ T4331] XFS (loop2): Unmounting Filesystem [ 55.917457][ T4917] loop2: detected capacity change from 0 to 32768 [ 55.994766][ T4915] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 55.996149][ T4915] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.997842][ T4915] vhci_hcd vhci_hcd.0: Device attached [ 56.267995][ T14] usb 6-1: new low-speed USB device number 2 using vhci_hcd [ 56.419895][ T4916] vhci_hcd: connection reset by peer [ 56.435027][ T4852] vhci_hcd: stop threads [ 56.436026][ T4852] vhci_hcd: release socket [ 56.437386][ T4852] vhci_hcd: disconnect device [ 57.161764][ T4928] binder: 4927:4928 tried to acquire reference to desc 0, got 1 instead [ 57.164304][ T4928] binder: 4927:4928 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 57.167196][ T4928] binder: 4928 RLIMIT_NICE not set [ 57.171468][ T4502] binder: undelivered TRANSACTION_COMPLETE [ 57.883490][ T4951] FAULT_INJECTION: forcing a failure. [ 57.883490][ T4951] name failslab, interval 1, probability 0, space 0, times 1 [ 57.886109][ T4951] CPU: 1 PID: 4951 Comm: syz.2.110 Not tainted syzkaller #0 [ 57.887660][ T4951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 57.889770][ T4951] Call trace: [ 57.890518][ T4951] dump_backtrace+0x1c4/0x1f0 [ 57.891572][ T4951] show_stack+0x2c/0x3c [ 57.892486][ T4951] __dump_stack+0x30/0x40 [ 57.893410][ T4951] dump_stack_lvl+0xf4/0x15c [ 57.894392][ T4951] dump_stack+0x1c/0x5c [ 57.895262][ T4951] should_fail_ex+0x3cc/0x524 [ 57.896292][ T4951] __should_failslab+0xc0/0x11c [ 57.897285][ T4951] should_failslab+0x10/0x28 [ 57.898262][ T4951] kmem_cache_alloc+0x88/0x310 [ 57.899319][ T4951] __alloc_file+0x30/0x234 [ 57.900180][ T4951] alloc_empty_file+0xa0/0x184 [ 57.901215][ T4951] alloc_file+0x64/0x564 [ 57.902166][ T4951] alloc_file_pseudo+0x16c/0x1f4 [ 57.903278][ T4951] anon_inode_getfile+0xc4/0x16c [ 57.904341][ T4951] __pidfd_prepare+0xac/0x188 [ 57.905305][ T4951] pidfd_prepare+0x64/0x8c [ 57.906256][ T4951] __arm64_sys_pidfd_open+0xf0/0x288 [ 57.907305][ T4951] invoke_syscall+0x98/0x290 [ 57.908177][ T4951] el0_svc_common+0x13c/0x258 [ 57.909101][ T4951] do_el0_svc+0x5c/0x134 [ 57.909970][ T4951] el0_svc+0x58/0x12c [ 57.910848][ T4951] el0t_64_sync_handler+0x84/0xf0 [ 57.911918][ T4951] el0t_64_sync+0x18c/0x190 [ 57.941582][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 57.945269][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 57.980590][ T4957] Zero length message leads to an empty skb [ 58.088964][ T4967] netlink: 64 bytes leftover after parsing attributes in process `syz.1.122'. [ 58.098569][ T4967] device syzkaller1 entered promiscuous mode [ 58.319991][ T4982] binder: 4979:4982 tried to acquire reference to desc 0, got 1 instead [ 58.322710][ T4982] binder: tried to use weak ref as strong ref [ 58.324001][ T4982] binder: 4979:4982 Acquire 1 refcount change on invalid ref 1 ret -22 [ 58.326738][ T4407] binder: release 4979:4982 transaction 25 out, still active [ 58.328331][ T4407] binder: undelivered TRANSACTION_COMPLETE [ 58.340168][ T4407] binder: send failed reply for transaction 25, target dead [ 58.371998][ T4990] device syzkaller0 entered promiscuous mode [ 58.997681][ T4407] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.182952][ T4407] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.184852][ T4407] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 59.186822][ T4407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.210387][ T4407] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 59.211847][ T4407] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 59.213307][ T4407] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 59.224522][ T4407] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 59.226534][ T4407] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 59.229760][ T4407] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 59.232527][ T4407] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 59.236089][ T4407] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 59.238909][ T4407] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 59.437927][ T4407] usb 1-1: USB disconnect, device number 2 [ 59.443901][ T4407] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 59.451292][ T4407] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 59.453406][ T4407] keyspan 1-1:1.0: device disconnected [ 59.985947][ T5033] FAULT_INJECTION: forcing a failure. [ 59.985947][ T5033] name failslab, interval 1, probability 0, space 0, times 0 [ 59.988582][ T5033] CPU: 0 PID: 5033 Comm: syz.0.134 Not tainted syzkaller #0 [ 59.990073][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 59.992240][ T5033] Call trace: [ 59.992884][ T5033] dump_backtrace+0x1c4/0x1f0 [ 59.993789][ T5033] show_stack+0x2c/0x3c [ 59.994709][ T5033] __dump_stack+0x30/0x40 [ 59.995687][ T5033] dump_stack_lvl+0xf4/0x15c [ 59.996711][ T5033] dump_stack+0x1c/0x5c [ 59.997630][ T5033] should_fail_ex+0x3cc/0x524 [ 59.998560][ T5033] __should_failslab+0xc0/0x11c [ 59.999559][ T5033] should_failslab+0x10/0x28 [ 60.000499][ T5033] kmem_cache_alloc+0x88/0x310 [ 60.001434][ T5033] __alloc_file+0x30/0x234 [ 60.002253][ T5033] alloc_empty_file+0xa0/0x184 [ 60.003184][ T5033] alloc_file+0x64/0x564 [ 60.004077][ T5033] alloc_file_pseudo+0x16c/0x1f4 [ 60.005151][ T5033] anon_inode_getfile+0xc4/0x16c [ 60.006234][ T5033] __pidfd_prepare+0xac/0x188 [ 60.007268][ T5033] pidfd_prepare+0x64/0x8c [ 60.008184][ T5033] __arm64_sys_pidfd_open+0xf0/0x288 [ 60.009326][ T5033] invoke_syscall+0x98/0x290 [ 60.010274][ T5033] el0_svc_common+0x13c/0x258 [ 60.011296][ T5033] do_el0_svc+0x5c/0x134 [ 60.012071][ T5033] el0_svc+0x58/0x12c [ 60.012934][ T5033] el0t_64_sync_handler+0x84/0xf0 [ 60.014011][ T5033] el0t_64_sync+0x18c/0x190 [ 61.357686][ T14] vhci_hcd: vhci_device speed not set [ 64.489170][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.492332][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.228000][ T5021] netlink: 'syz.2.133': attribute type 1 has an invalid length. [ 69.291235][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 69.294877][ T5028] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.296680][ T5028] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.298417][ T5028] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.300086][ T5028] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.304466][ T5035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 69.308525][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 69.636275][ T24] cfg80211: failed to load regulatory.db [ 69.670429][ T5055] ip_tables: iptables: counters copy to user failed while replacing table [ 70.160465][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.162579][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.572612][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.586167][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.622780][ T5070] loop3: detected capacity change from 0 to 32768 [ 70.626696][ T5070] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.145 (5070) [ 70.637129][ T5070] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 70.642078][ T5070] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 70.643704][ T5070] BTRFS info (device loop3): using free space tree [ 70.653862][ T5070] BTRFS info (device loop3): enabling ssd optimizations [ 70.710810][ T4329] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 70.815375][ T5097] loop3: detected capacity change from 0 to 2048 [ 70.845903][ T5097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.945606][ T5055] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.947429][ T5055] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.949827][ T5055] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.951457][ T5055] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.172365][ T5055] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.174033][ T5055] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.176107][ T5055] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.177995][ T5055] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.455672][ T5129] Bluetooth: MGMT ver 1.22 [ 71.912864][ T5139] FAULT_INJECTION: forcing a failure. [ 71.912864][ T5139] name failslab, interval 1, probability 0, space 0, times 0 [ 71.915683][ T5139] CPU: 1 PID: 5139 Comm: syz.1.156 Not tainted syzkaller #0 [ 71.917195][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 71.919310][ T5139] Call trace: [ 71.919996][ T5139] dump_backtrace+0x1c4/0x1f0 [ 71.921036][ T5139] show_stack+0x2c/0x3c [ 71.921942][ T5139] __dump_stack+0x30/0x40 [ 71.922863][ T5139] dump_stack_lvl+0xf4/0x15c [ 71.923776][ T5139] dump_stack+0x1c/0x5c [ 71.924625][ T5139] should_fail_ex+0x3cc/0x524 [ 71.925524][ T5139] __should_failslab+0xc0/0x11c [ 71.926471][ T5139] should_failslab+0x10/0x28 [ 71.927383][ T5139] __kmem_cache_alloc_node+0x7c/0x318 [ 71.928395][ T5139] kmalloc_trace+0x48/0x94 [ 71.929241][ T5139] x509_cert_parse+0x68/0x6e0 [ 71.930139][ T5139] x509_key_preparse+0x74/0x5c8 [ 71.931055][ T5139] asymmetric_key_preparse+0xcc/0x17c [ 71.932058][ T5139] key_create_or_update+0x394/0x868 [ 71.933191][ T5139] __arm64_sys_add_key+0x40c/0x520 [ 71.934230][ T5139] invoke_syscall+0x98/0x290 [ 71.935234][ T5139] el0_svc_common+0x13c/0x258 [ 71.936247][ T5139] do_el0_svc+0x5c/0x134 [ 71.937177][ T5139] el0_svc+0x58/0x12c [ 71.938061][ T5139] el0t_64_sync_handler+0x84/0xf0 [ 71.939198][ T5139] el0t_64_sync+0x18c/0x190 [ 72.458099][ T5101] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 72.536535][ T5154] syz.4.162 uses obsolete (PF_INET,SOCK_PACKET) [ 72.715270][ T5161] loop3: detected capacity change from 0 to 8192 [ 73.870807][ T5191] loop0: detected capacity change from 0 to 3904 [ 73.930383][ T5191] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 73.932488][ T5191] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 73.934038][ T5191] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 73.935289][ T5191] loop0: [ 74.422892][ T5202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.428007][ T5202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.440036][ T5202] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 74.446636][ T5202] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 74.485272][ T5202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 74.737879][ T5210] tipc: Failed to remove unknown binding: 66,0,0/0:4243432590/4243432592 [ 74.739891][ T5210] tipc: Failed to remove unknown binding: 66,0,0/0:4243432590/4243432591 [ 74.742380][ T5210] tipc: Failed to remove unknown binding: 66,0,0/0:4243432590/4243432591 [ 74.744210][ T5210] tipc: Failed to remove unknown binding: 66,0,0/0:4243432590/4243432592 [ 74.745872][ T5210] tipc: Failed to remove unknown binding: 66,0,0/0:4243432590/4243432591 [ 74.768130][ T5212] netlink: 'syz.0.182': attribute type 46 has an invalid length. [ 74.773354][ T5212] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 74.891187][ T5214] loop0: detected capacity change from 0 to 32768 [ 74.896896][ T5214] (syz.0.183,5214,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "obj_role=)F@#^t][\*" or missing value [ 74.900087][ T5214] (syz.0.183,5214,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 74.973144][ T5215] ubi0: attaching mtd0 [ 74.976412][ T5215] ubi0: scanning is finished [ 74.977311][ T5215] ubi0: empty MTD device detected [ 75.015876][ T5215] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 75.017532][ T5215] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 75.020059][ T5215] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 75.021480][ T5215] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 75.029578][ T5215] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 75.033330][ T5215] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 75.036118][ T5215] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2557513346 [ 75.038442][ T5215] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 75.041106][ T5216] ubi0: background thread "ubi_bgt0d" started, PID 5216 [ 75.041240][ T4340] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 75.044308][ T4340] Bluetooth: hci1: Injecting HCI hardware error event [ 75.047035][ T4344] Bluetooth: hci1: hardware error 0x00 [ 75.122114][ T5220] xt_hashlimit: size too large, truncated to 1048576 [ 75.140585][ T5222] overlayfs: statfs failed on './file0' [ 75.149239][ T5222] overlayfs: statfs failed on './file0' [ 75.210481][ T5228] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.212185][ T5228] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.213861][ T5228] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.215364][ T5228] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.250238][ T5230] loop4: detected capacity change from 0 to 512 [ 75.438464][ T5232] device syzkaller0 entered promiscuous mode [ 75.510124][ T5234] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 75.804244][ T5239] binder: 5238:5239 tried to acquire reference to desc 0, got 1 instead [ 75.806433][ T5239] binder: 5238:5239 got reply transaction with bad transaction stack, transaction 36 has target 5238:0 [ 75.809290][ T5239] binder: 5238:5239 transaction reply to 0:0 failed 43/29201/-71, size 0-0 line 2978 [ 75.811787][ T5239] binder: 5238:5239 ioctl c0306201 200002c0 returned -14 [ 75.817757][ T24] binder: release 5238:5239 transaction 36 out, still active [ 75.819213][ T24] binder: undelivered TRANSACTION_COMPLETE [ 75.820386][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.832047][ T24] binder: send failed reply for transaction 36, target dead [ 75.849893][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.852303][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.155310][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.156847][ T5244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.159072][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.160707][ T5244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.166284][ T5244] team0: Port device bridge0 added [ 76.182968][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.185830][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.369411][ T5252] binder: 5251:5252 ioctl 4018620d 0 returned -22 [ 76.838195][ T5264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.204'. [ 76.840310][ T5266] loop3: detected capacity change from 0 to 128 [ 76.876017][ T5266] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 76.940430][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 77.091067][ T5287] FAULT_INJECTION: forcing a failure. [ 77.091067][ T5287] name failslab, interval 1, probability 0, space 0, times 0 [ 77.093976][ T5287] CPU: 1 PID: 5287 Comm: syz.4.208 Not tainted syzkaller #0 [ 77.095357][ T5287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 77.097298][ T5287] Call trace: [ 77.097956][ T5287] dump_backtrace+0x1c4/0x1f0 [ 77.098956][ T5287] show_stack+0x2c/0x3c [ 77.099868][ T5287] __dump_stack+0x30/0x40 [ 77.100827][ T5287] dump_stack_lvl+0xf4/0x15c [ 77.101741][ T5287] dump_stack+0x1c/0x5c [ 77.102574][ T5287] should_fail_ex+0x3cc/0x524 [ 77.103416][ T5287] __should_failslab+0xc0/0x11c [ 77.104304][ T5287] should_failslab+0x10/0x28 [ 77.105291][ T5287] __kmem_cache_alloc_node+0x7c/0x318 [ 77.106433][ T5287] __kmalloc_node_track_caller+0xb8/0x174 [ 77.107666][ T5287] krealloc+0xa0/0x150 [ 77.108484][ T5287] netlink_realloc_groups+0xf8/0x22c [ 77.109591][ T5287] netlink_bind+0x1b4/0xab8 [ 77.110540][ T5287] __sys_bind+0x1f8/0x2a4 [ 77.111427][ T5287] __arm64_sys_bind+0x7c/0x94 [ 77.112355][ T5287] invoke_syscall+0x98/0x290 [ 77.113215][ T5287] el0_svc_common+0x13c/0x258 [ 77.114062][ T5287] do_el0_svc+0x5c/0x134 [ 77.114828][ T5287] el0_svc+0x58/0x12c [ 77.115642][ T5287] el0t_64_sync_handler+0x84/0xf0 [ 77.116656][ T5287] el0t_64_sync+0x18c/0x190 [ 77.278047][ T4344] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 77.360171][ T5315] loop3: detected capacity change from 0 to 512 [ 78.021441][ T5315] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 78.026591][ T5315] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 78.031135][ T5315] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.214: Failed to acquire dquot type 1 [ 78.036064][ T5315] EXT4-fs (loop3): 1 truncate cleaned up [ 78.037998][ T5315] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 78.055249][ T5315] EXT4-fs (loop3): unmounting filesystem. [ 78.568302][ T5336] batman_adv: batadv0: Adding interface: veth0 [ 78.569647][ T5336] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.574052][ T5336] batman_adv: batadv0: Interface activated: veth0 [ 78.582335][ T5336] batman_adv: batadv0: Interface deactivated: veth0 [ 78.583571][ T5336] batman_adv: batadv0: Removing interface: veth0 [ 78.585537][ T5336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.587040][ T5336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.589521][ T5336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.591264][ T5336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.986247][ T5344] xt_hashlimit: size too large, truncated to 1048576 [ 80.157668][ C0] net_ratelimit: 39 callbacks suppressed [ 80.366907][ C0] vcan0: j1939_tp_rxtimer: 0x00000000800d442f: rx timeout, send abort [ 80.385269][ T5362] bpf setsockopt: ignoring program buffer with optlen=30428 (max_optlen=4096) [ 80.869309][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b50f9c85: rx timeout, send abort [ 80.878720][ C0] vcan0: j1939_tp_rxtimer: 0x00000000800d442f: abort rx timeout. Force session deactivation [ 81.284342][ T5371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.303157][ T5371] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.305028][ T5371] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.306903][ T5371] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.316493][ T5371] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.320667][ T5371] bond1: (slave geneve2): making interface the new active one [ 81.323776][ T5371] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 81.325545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 81.350833][ T5378] loop0: detected capacity change from 0 to 128 [ 81.371072][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b50f9c85: abort rx timeout. Force session deactivation [ 81.392238][ T5378] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 81.820711][ T5391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.240'. [ 82.192747][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 82.427231][ T5426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.430522][ T5426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.435150][ T5426] netlink: 'syz.1.256': attribute type 1 has an invalid length. [ 82.448359][ T5426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.375789][ T5426] bond1: (slave gretap1): making interface the new active one [ 83.390048][ T5426] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 83.391770][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 83.485841][ T5442] loop0: detected capacity change from 0 to 2048 [ 83.493888][ T5445] binder: 5443:5445 tried to acquire reference to desc 0, got 1 instead [ 83.509774][ T5426] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 83.517568][ T5445] binder: 5443:5445 BC_FREE_BUFFER u0000000000000000 no match [ 83.531436][ T4440] binder: release 5443:5445 transaction 48 out, still active [ 83.532789][ T4440] binder: undelivered TRANSACTION_COMPLETE [ 83.552324][ T5442] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 83.560588][ T5451] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 83.563753][ T5451] batman_adv: batadv0: Adding interface: gretap1 [ 83.565084][ T5451] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.571028][ T5451] batman_adv: batadv0: Interface activated: gretap1 [ 83.581067][ T5426] netlink: 'syz.1.256': attribute type 10 has an invalid length. [ 83.582496][ T5426] netlink: 40 bytes leftover after parsing attributes in process `syz.1.256'. [ 83.584203][ T5426] device dummy0 entered promiscuous mode [ 83.586201][ T4440] binder: send failed reply for transaction 48, target dead [ 83.618203][ T5426] bond1: (slave dummy0): Releasing active interface [ 83.619571][ T5426] device gretap1 entered promiscuous mode [ 83.782247][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 84.191270][ T5504] loop1: detected capacity change from 0 to 512 [ 84.204286][ T5504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.269109][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 84.312594][ T5509] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 84.499257][ T5511] loop1: detected capacity change from 0 to 512 [ 85.086860][ T5518] netlink: 'syz.4.279': attribute type 1 has an invalid length. [ 85.096152][ T5518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.120824][ T5518] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 85.122879][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 85.356976][ T4340] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.363815][ T4340] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.367214][ T4340] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.370240][ T4340] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.372694][ T4340] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.374869][ T4340] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.447670][ C0] net_ratelimit: 41 callbacks suppressed [ 85.471809][ T5528] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.569809][ T5540] binder: 5539:5540 tried to acquire reference to desc 0, got 1 instead [ 85.571939][ T5540] binder: 5539:5540 ioctl c0306201 20001680 returned -14 [ 85.585794][ T14] binder: undelivered transaction 53, process died. [ 86.242312][ T5561] loop0: detected capacity change from 0 to 256 [ 86.248166][ T5561] exfat: Deprecated parameter 'utf8' [ 86.251493][ T5561] exfat: Deprecated parameter 'utf8' [ 86.264409][ T5561] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 86.411481][ T4920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.490825][ T4344] Bluetooth: hci5: command 0x0409 tx timeout [ 87.532426][ T4920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.546140][ T5528] chnl_net:caif_netlink_parms(): no params data found [ 87.563103][ T5570] netlink: 'syz.1.293': attribute type 1 has an invalid length. [ 87.593263][ T5570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.663794][ T5574] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 87.666371][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 87.700599][ T4920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.809232][ T4920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.831055][ T5528] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.833356][ T5528] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.835257][ T5528] device bridge_slave_0 entered promiscuous mode [ 87.839641][ T5528] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.851326][ T5528] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.866018][ T5528] device bridge_slave_1 entered promiscuous mode [ 87.910259][ T5606] netlink: 'syz.4.305': attribute type 4 has an invalid length. [ 87.923041][ T5528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.934114][ T5528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.936624][ T5606] netlink: 'syz.4.305': attribute type 4 has an invalid length. [ 87.963373][ T5528] team0: Port device team_slave_0 added [ 88.029166][ T5528] team0: Port device team_slave_1 added [ 88.090392][ T5528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.092065][ T5528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.097421][ T5528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.108133][ T5616] device syzkaller0 entered promiscuous mode [ 88.120891][ T5616] tipc: Started in network mode [ 88.121943][ T5616] tipc: Node identity c686e93c024c, cluster identity 4711 [ 88.123862][ T5616] tipc: Enabled bearer , priority 0 [ 88.129301][ T5528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.130609][ T5528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.158263][ T5528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.388939][ T5630] netlink: 'syz.0.311': attribute type 1 has an invalid length. [ 88.400459][ T5630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.412147][ T5638] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 88.435177][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 88.480597][ T5528] device hsr_slave_0 entered promiscuous mode [ 88.498592][ T5528] device hsr_slave_1 entered promiscuous mode [ 88.500177][ T5645] loop0: detected capacity change from 0 to 128 [ 88.525045][ T5645] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 88.531370][ T5528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.532861][ T5528] Cannot create hsr debugfs directory [ 88.570664][ T5649] FAULT_INJECTION: forcing a failure. [ 88.570664][ T5649] name failslab, interval 1, probability 0, space 0, times 0 [ 88.580546][ T5649] CPU: 1 PID: 5649 Comm: syz.4.314 Not tainted syzkaller #0 [ 88.581917][ T5649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 88.583648][ T5649] Call trace: [ 88.584357][ T5649] dump_backtrace+0x1c4/0x1f0 [ 88.585350][ T5649] show_stack+0x2c/0x3c [ 88.586194][ T5649] __dump_stack+0x30/0x40 [ 88.587078][ T5649] dump_stack_lvl+0xf4/0x15c [ 88.587983][ T5649] dump_stack+0x1c/0x5c [ 88.588801][ T5649] should_fail_ex+0x3cc/0x524 [ 88.589753][ T5649] __should_failslab+0xc0/0x11c [ 88.590686][ T5649] should_failslab+0x10/0x28 [ 88.591512][ T5649] __kmem_cache_alloc_node+0x7c/0x318 [ 88.592568][ T5649] kmalloc_trace+0x48/0x94 [ 88.593531][ T5649] sctp_stream_init_ext+0x60/0x160 [ 88.594564][ T5649] sctp_sendmsg_to_asoc+0x684/0x1384 [ 88.595670][ T5649] sctp_sendmsg+0x13bc/0x20f4 [ 88.596641][ T5649] inet_sendmsg+0x154/0x27c [ 88.597635][ T5649] sock_write_iter+0x268/0x368 [ 88.598579][ T5649] vfs_write+0x3c8/0x7c8 [ 88.599405][ T5649] ksys_write+0x12c/0x228 [ 88.600314][ T5649] __arm64_sys_write+0x7c/0x90 [ 88.601315][ T5649] invoke_syscall+0x98/0x290 [ 88.602303][ T5649] el0_svc_common+0x13c/0x258 [ 88.603306][ T5649] do_el0_svc+0x5c/0x134 [ 88.604267][ T5649] el0_svc+0x58/0x12c [ 88.605133][ T5649] el0t_64_sync_handler+0x84/0xf0 [ 88.606157][ T5649] el0t_64_sync+0x18c/0x190 [ 88.782010][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 89.045306][ T5680] loop4: detected capacity change from 0 to 2048 [ 89.084746][ T5528] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.110959][ T5680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.211668][ T4412] tipc: Node number set to 3301632316 [ 89.214291][ T5528] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.260540][ T5528] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.381068][ T5528] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.424114][ T5694] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 89.518607][ T4344] Bluetooth: hci5: command 0x041b tx timeout [ 89.720780][ T5700] mmap: syz.4.322 (5700) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.840254][ T5528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.863628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.865690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.874051][ T5528] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.882740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.884799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.888577][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.890012][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.900956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.196365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.198394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.200090][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.201540][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.207268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.226966][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.286387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.289032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.290833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.292733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.338277][ T5720] netlink: 'syz.3.323': attribute type 1 has an invalid length. [ 90.348337][ T5720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.351896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.363809][ T5528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.365763][ T5528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.401884][ T5725] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 90.423920][ T5735] binder: 5734:5735 tried to acquire reference to desc 0, got 1 instead [ 90.425965][ T5735] binder: release 5734:5735 transaction 58 out, still active [ 90.427513][ T5735] binder: undelivered TRANSACTION_COMPLETE [ 90.430646][ T5735] binder: 5734:5735 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 90.433155][ T5735] binder: 5735 RLIMIT_NICE not set [ 90.434121][ T5735] binder: 5735 RLIMIT_NICE not set [ 90.435023][ T5735] binder: send failed reply for transaction 58, target dead [ 90.436383][ T5735] binder: 5734:5735 ioctl c0306201 20000680 returned -14 [ 90.557670][ C0] net_ratelimit: 25 callbacks suppressed [ 90.682602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.684709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.687064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.689321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.691646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 90.693529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.925279][ T4920] device hsr_slave_0 left promiscuous mode [ 90.960846][ T4920] device hsr_slave_1 left promiscuous mode [ 91.037754][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.039394][ T4920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.041687][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.043226][ T4920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.046604][ T4920] device bridge_slave_1 left promiscuous mode [ 91.049269][ T4920] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.101867][ T4920] device bridge_slave_0 left promiscuous mode [ 91.103306][ T4920] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.158338][ T4440] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.228152][ T4920] device veth1_macvtap left promiscuous mode [ 91.229790][ T4920] device veth0_macvtap left promiscuous mode [ 91.231971][ T4920] device veth1_vlan left promiscuous mode [ 91.233348][ T4920] device veth0_vlan left promiscuous mode [ 91.347707][ T4440] usb 1-1: Using ep0 maxpacket: 16 [ 91.354006][ T4440] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 91.355988][ T4440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.358086][ T4440] usb 1-1: Product: syz [ 91.358963][ T4440] usb 1-1: Manufacturer: syz [ 91.359857][ T4440] usb 1-1: SerialNumber: syz [ 91.597723][ T4340] Bluetooth: hci5: command 0x040f tx timeout [ 91.701748][ T4440] usb 1-1: selecting invalid altsetting 1 [ 91.728847][ T4440] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 91.731472][ T4440] usb 1-1: USB disconnect, device number 3 [ 91.939544][ T5048] udevd[5048]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.277183][ T5795] binder: 5794:5795 tried to acquire reference to desc 0, got 1 instead [ 92.287794][ T5795] binder: 5794:5795 ioctl c0306201 20000ac0 returned -14 [ 92.290239][ T5795] binder_alloc: 5794: pid 5794 spamming oneway? 1 buffers allocated for a total size of 6144 [ 92.293010][ T5795] binder: 5794:5795 ioctl c0306201 20000c80 returned -14 [ 92.294679][ T113] binder: release 5794:5795 transaction 63 out, still active [ 92.296355][ T113] binder: undelivered TRANSACTION_COMPLETE [ 92.305240][ T4411] binder: send failed reply for transaction 63, target dead [ 92.306747][ T4411] binder: undelivered transaction 64, process died. [ 93.233859][ T5804] loop0: detected capacity change from 0 to 512 [ 93.252628][ T5804] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.341: iget: bad i_size value: 38620345925642 [ 93.255418][ T5804] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.341: couldn't read orphan inode 15 (err -117) [ 93.260655][ T5804] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.330147][ T4920] team0 (unregistering): Port device team_slave_1 removed [ 93.522059][ T4920] team0 (unregistering): Port device team_slave_0 removed [ 93.677791][ T4344] Bluetooth: hci5: command 0x0419 tx timeout [ 93.691214][ T4920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.888316][ T4920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.419570][ T4920] bond0 (unregistering): Released all slaves [ 95.673288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.674973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.677828][ T5528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.753118][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 95.828008][ T1870] device gretap1 left promiscuous mode [ 95.838069][ C1] net_ratelimit: 29 callbacks suppressed [ 95.888784][ T5831] netlink: 52 bytes leftover after parsing attributes in process `syz.3.346'. [ 95.923043][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.925289][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.937521][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.940266][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.942801][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.944340][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.948068][ T5831] netlink: 76 bytes leftover after parsing attributes in process `syz.3.346'. [ 95.950912][ T5831] netlink: 52 bytes leftover after parsing attributes in process `syz.3.346'. [ 95.970615][ T5528] device veth0_vlan entered promiscuous mode [ 95.974656][ T5528] device veth1_vlan entered promiscuous mode [ 95.990109][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.992144][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.993921][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.001063][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.010510][ T5528] device veth0_macvtap entered promiscuous mode [ 96.013920][ T5528] device veth1_macvtap entered promiscuous mode [ 96.033774][ T5528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.035469][ T5845] tipc: Failed to remove unknown binding: 66,0,0/0:447029878/447029880 [ 96.036260][ T5528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.040986][ T5845] tipc: Failed to remove unknown binding: 66,0,0/0:447029878/447029879 [ 96.042301][ T5528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.044771][ T5528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.048783][ T5845] tipc: Failed to remove unknown binding: 66,0,0/0:447029878/447029880 [ 96.050846][ T5528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.052622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.054110][ T5845] tipc: Failed to remove unknown binding: 66,0,0/0:447029878/447029879 [ 96.056251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.061176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.064978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.075949][ T5528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.085473][ T5528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.087473][ T5528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.094944][ T5528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.101546][ T5528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.103478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.105496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.110744][ T5528] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.112438][ T5528] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.114361][ T5528] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.116290][ T5528] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.205993][ T1870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.207484][ T1870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.209987][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.530306][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.535456][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.543695][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.513930][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 97.562231][ T5859] delete_channel: no stack [ 99.035434][ T5944] loop0: detected capacity change from 0 to 3904 [ 99.134123][ T5944] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 99.136814][ T5944] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 99.148319][ T5944] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 99.149702][ T5944] loop0: [ 99.452661][ T5955] loop5: detected capacity change from 0 to 256 [ 99.469128][ T27] audit: type=1326 audit(99.460:2): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.5.370" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaf78be8 code=0x0 [ 99.587367][ T5963] Bluetooth: (null): Invalid header checksum [ 99.636270][ T5971] device bridge0 entered promiscuous mode [ 99.637980][ T5971] device macsec1 entered promiscuous mode [ 99.861575][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'. [ 101.037722][ C1] net_ratelimit: 311 callbacks suppressed [ 101.057619][ C1] sched: RT throttling activated [ 103.085274][ T6036] loop4: detected capacity change from 0 to 32768 [ 103.588428][ T6034] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 103.590004][ T6034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.591748][ T6034] vhci_hcd vhci_hcd.0: Device attached [ 103.781226][ T6035] vhci_hcd: connection closed [ 103.783177][ T4471] vhci_hcd: stop threads [ 103.784048][ T4471] vhci_hcd: release socket [ 103.785141][ T4471] vhci_hcd: disconnect device [ 103.857959][ T4503] vhci_hcd: vhci_device speed not set [ 104.282006][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.563053][ T6047] loop5: detected capacity change from 0 to 32768 [ 104.569545][ T6047] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.392 (6047) [ 104.635831][ T6047] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 104.641878][ T6047] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 104.646508][ T6047] BTRFS info (device loop5): using free space tree [ 104.994271][ T6047] BTRFS info (device loop5): enabling ssd optimizations [ 105.171308][ T6096] loop1: detected capacity change from 0 to 1024 [ 105.200207][ T6096] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.238125][ T6096] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 105.244598][ T5528] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 105.421651][ T6107] capability: warning: `syz.0.405' uses deprecated v2 capabilities in a way that may be insecure [ 105.480561][ T6110] loop5: detected capacity change from 0 to 256 [ 105.554134][ T6110] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 105.668848][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 106.067940][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.403'. [ 106.073529][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.403'. [ 106.075546][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.403'. [ 106.079465][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.403'. [ 106.082587][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.403'. [ 106.222445][ T6127] loop0: detected capacity change from 0 to 16 [ 106.237895][ T6127] erofs: (device loop0): mounted with root inode @ nid 36. [ 106.253755][ T6127] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 106.256136][ T6127] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 106.259352][ T6127] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 106.261502][ T6127] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 106.263314][ T6127] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 106.268441][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 106.271284][ T6127] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 106.278369][ T6127] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 106.397591][ C1] net_ratelimit: 43 callbacks suppressed [ 106.608896][ T6137] bridge0: port 3(syz_tun) entered blocking state [ 106.610531][ T6137] bridge0: port 3(syz_tun) entered disabled state [ 106.655168][ T6137] device syz_tun entered promiscuous mode [ 106.678373][ T6137] bridge0: port 3(syz_tun) entered blocking state [ 106.679602][ T6137] bridge0: port 3(syz_tun) entered forwarding state [ 106.925333][ T6137] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 107.005184][ T6137] bridge0: port 3(syz_tun) entered disabled state [ 107.023831][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.032938][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.034914][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.037438][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.041697][ T6145] loop4: detected capacity change from 0 to 128 [ 107.055696][ T6145] FAT-fs (loop4): bogus number of FAT structure [ 107.057285][ T6145] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 107.060204][ T6145] FAT-fs (loop4): Can't find a valid FAT filesystem [ 108.414561][ T6168] device syzkaller0 entered promiscuous mode [ 108.638313][ T6174] loop4: detected capacity change from 0 to 32768 [ 108.650726][ T6174] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.429 (6174) [ 108.671587][ T6174] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.673922][ T6174] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 108.676236][ T6174] BTRFS info (device loop4): disabling tree log [ 108.678206][ T6174] BTRFS info (device loop4): using free space tree [ 109.019841][ T6174] BTRFS info (device loop4): enabling ssd optimizations [ 109.089873][ T4427] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 109.093311][ T6174] BTRFS info (device loop4): balance: start -d -m [ 109.100047][ T6174] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 109.131543][ T6174] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 109.200392][ T6174] BTRFS info (device loop4): found 10 extents, stage: move data extents [ 109.214507][ T6174] BTRFS info (device loop4): found 1 extents, stage: update data pointers [ 109.224542][ T6174] BTRFS info (device loop4): balance: ended with status: 0 [ 109.255442][ T4335] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.431764][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.436'. [ 109.489812][ T6222] netlink: 'syz.4.436': attribute type 5 has an invalid length. [ 109.491344][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'. [ 109.536947][ T6233] : renamed from vlan0 [ 110.911168][ T6295] loop5: detected capacity change from 0 to 128 [ 110.988953][ T6295] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 110.991001][ T6295] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.051395][ T6306] FAULT_INJECTION: forcing a failure. [ 111.051395][ T6306] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.059078][ T6306] CPU: 0 PID: 6306 Comm: syz.4.453 Not tainted syzkaller #0 [ 111.060626][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 111.062666][ T6306] Call trace: [ 111.063254][ T6306] dump_backtrace+0x1c4/0x1f0 [ 111.064179][ T6306] show_stack+0x2c/0x3c [ 111.064986][ T6306] __dump_stack+0x30/0x40 [ 111.065898][ T6306] dump_stack_lvl+0xf4/0x15c [ 111.066859][ T6306] dump_stack+0x1c/0x5c [ 111.067756][ T6306] should_fail_ex+0x3cc/0x524 [ 111.068794][ T6306] should_fail+0x14/0x24 [ 111.069681][ T6306] should_fail_usercopy+0x20/0x30 [ 111.070797][ T6306] signalfd_read+0x2e4/0x4d4 [ 111.071782][ T6306] vfs_read+0x2a4/0x7b8 [ 111.072664][ T6306] ksys_read+0x12c/0x228 [ 111.073564][ T6306] __arm64_sys_read+0x7c/0x90 [ 111.074561][ T6306] invoke_syscall+0x98/0x290 [ 111.075550][ T6306] el0_svc_common+0x13c/0x258 [ 111.076472][ T6306] do_el0_svc+0x5c/0x134 [ 111.077316][ T6306] el0_svc+0x58/0x12c [ 111.078181][ T6306] el0t_64_sync_handler+0x84/0xf0 [ 111.079179][ T6306] el0t_64_sync+0x18c/0x190 [ 111.083794][ T6315] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 111.219886][ T6333] netlink: 'syz.1.455': attribute type 10 has an invalid length. [ 111.240165][ T6333] bridge0: port 3(syz_tun) entered disabled state [ 111.242806][ T6333] bridge0: port 3(syz_tun) entered disabled state [ 111.272918][ T6333] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 111.277480][ T4427] bond0: (slave bond_slave_0): interface is now down [ 111.279044][ T4427] bond0: (slave bond_slave_1): interface is now down [ 111.298616][ T4427] bond0: (slave bond_slave_0): interface is now down [ 111.300092][ T4427] bond0: (slave bond_slave_1): interface is now down [ 111.301594][ T4427] bond0: (slave syz_tun): interface is now down [ 111.308275][ T4427] bond0: now running without any active interface! [ 111.539905][ T5528] EXT4-fs (loop5): unmounting filesystem. [ 111.677309][ C1] net_ratelimit: 39 callbacks suppressed [ 112.572593][ T6413] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 112.851893][ T6423] netlink: 'syz.5.473': attribute type 10 has an invalid length. [ 112.854304][ T6423] device syz_tun entered promiscuous mode [ 112.872855][ T6423] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 112.891074][ T4427] bond0: (slave bond_slave_0): interface is now down [ 112.892638][ T4427] bond0: (slave bond_slave_1): interface is now down [ 112.893881][ T4427] bond0: (slave syz_tun): interface is now down [ 112.911079][ T4427] bond0: (slave bond_slave_0): interface is now down [ 112.912509][ T4427] bond0: (slave bond_slave_1): interface is now down [ 112.913853][ T4427] bond0: (slave syz_tun): interface is now down [ 112.918507][ T4427] bond0: now running without any active interface! [ 113.931887][ T6467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.482'. [ 114.292704][ T6470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.483'. [ 114.426860][ T6481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.487'. [ 115.672006][ T4340] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 115.677895][ T4340] Bluetooth: hci5: Injecting HCI hardware error event [ 115.682253][ T4344] Bluetooth: hci5: hardware error 0x00 [ 116.272047][ T6511] gadgetfs: bound to dummy_udc driver [ 116.537180][ T6104] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 116.539928][ C1] gadgetfs: connected [ 116.541474][ T6104] gadgetfs: disconnected [ 116.621393][ T6518] loop0: detected capacity change from 0 to 512 [ 116.623366][ T6518] EXT4-fs: Ignoring removed i_version option [ 116.651581][ T6518] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.499: iget: bad i_size value: 38620345925642 [ 116.654456][ T6518] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.499: couldn't read orphan inode 15 (err -117) [ 116.664337][ T6518] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 116.673283][ T6521] cifs: Unknown parameter 'timeo' [ 116.754746][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 116.796923][ C1] net_ratelimit: 39 callbacks suppressed [ 116.853831][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.504'. [ 117.790857][ T6539] loop1: detected capacity change from 0 to 16 [ 117.809537][ T6539] erofs: (device loop1): mounted with root inode @ nid 36. [ 117.822677][ T6539] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 117.840136][ T6539] syz.1.506: attempt to access beyond end of device [ 117.840136][ T6539] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 117.867671][ T6539] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 117.870288][ T6539] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 117.873670][ T6539] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 117.877512][ T6550] loop5: detected capacity change from 0 to 2048 [ 117.878294][ T6539] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 117.956481][ T6550] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 117.960312][ T6550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.981677][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.983250][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.237529][ T4344] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 119.025435][ T6564] loop5: detected capacity change from 0 to 32768 [ 119.047107][ T6564] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.514 (6564) [ 119.059632][ T6564] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 119.061777][ T6564] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 119.063517][ T6564] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 119.065548][ T6564] BTRFS info (device loop5): use zstd compression, level 3 [ 119.066984][ T6564] BTRFS info (device loop5): force clearing of disk cache [ 119.068337][ T6564] BTRFS info (device loop5): enabling disk space caching [ 119.069609][ T6564] BTRFS info (device loop5): disk space caching is enabled [ 119.109295][ T6569] device syzkaller0 entered promiscuous mode [ 119.124613][ T6576] netlink: 'syz.3.516': attribute type 4 has an invalid length. [ 119.186094][ T6569] tipc: Started in network mode [ 119.187227][ T6569] tipc: Node identity de7a16136a6c, cluster identity 4711 [ 119.190367][ T6569] tipc: Enabled bearer , priority 0 [ 119.192874][ T6586] netlink: 'syz.3.516': attribute type 4 has an invalid length. [ 119.210938][ T6565] tipc: Resetting bearer [ 119.267195][ T6564] BTRFS info (device loop5): enabling ssd optimizations [ 119.269501][ T6564] BTRFS info (device loop5): rebuilding free space tree [ 119.285245][ T6564] BTRFS info (device loop5): disabling free space tree [ 119.286759][ T6564] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.288853][ T6564] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.356386][ T6565] tipc: Disabling bearer [ 119.872675][ T5528] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 120.142779][ T6628] CIFS: Attempting to mount \\127.0.0.1\share [ 120.164970][ T6632] loop0: detected capacity change from 0 to 128 [ 120.270539][ T4551] kworker/u4:8: attempt to access beyond end of device [ 120.270539][ T4551] loop0: rw=1, sector=145, nr_sectors = 6 limit=128 [ 120.955542][ T6628] CIFS: VFS: Error connecting to socket. Aborting operation. [ 120.957387][ T6628] CIFS: VFS: cifs_mount failed w/return code = -4 [ 121.916583][ C1] net_ratelimit: 31 callbacks suppressed [ 121.975478][ T6666] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 121.993604][ T6668] loop4: detected capacity change from 0 to 2048 [ 122.008510][ T6668] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.120217][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.960934][ T6692] tipc: Enabling of bearer rejected, failed to enable media [ 122.998726][ T6700] device syzkaller0 entered promiscuous mode [ 123.121574][ T6723] bridge0: port 3(dummy0) entered blocking state [ 123.122921][ T6723] bridge0: port 3(dummy0) entered disabled state [ 123.143763][ T6717] loop5: detected capacity change from 0 to 32768 [ 123.161969][ T6717] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.552 (6717) [ 123.183134][ T6717] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.187425][ T6717] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 123.195735][ T6717] BTRFS info (device loop5): setting nodatacow, compression disabled [ 123.203804][ T6717] BTRFS info (device loop5): force clearing of disk cache [ 123.210717][ T6717] BTRFS info (device loop5): turning off barriers [ 123.214358][ T6717] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 123.218413][ T6717] BTRFS info (device loop5): use lzo compression, level 0 [ 123.222121][ T6717] BTRFS info (device loop5): disabling free space tree [ 123.225573][ T6717] BTRFS info (device loop5): enabling ssd optimizations [ 123.237747][ T6717] BTRFS info (device loop5): using spread ssd allocation scheme [ 123.241458][ T6717] BTRFS info (device loop5): not using ssd optimizations [ 123.246201][ T6717] BTRFS info (device loop5): not using spread ssd allocation scheme [ 123.287096][ T6717] BTRFS info (device loop5): rebuilding free space tree [ 123.300940][ T6736] Injecting memory failure for pfn 0x1151c0 at process virtual address 0x20001000 [ 123.306413][ T6736] Memory failure: 0x1151c0: recovery action for clean unevictable LRU page: Recovered [ 123.309778][ T6717] BTRFS info (device loop5): disabling free space tree [ 123.315700][ T6717] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.320782][ T6717] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.323847][ T6736] Injecting memory failure for pfn 0x114b2b at process virtual address 0x20002000 [ 123.326283][ T6717] BTRFS info (device loop5): checking UUID tree [ 123.326944][ T6736] Memory failure: 0x114b2b: recovery action for clean unevictable LRU page: Recovered [ 123.329537][ T6736] Injecting memory failure for pfn 0x10b3ce at process virtual address 0x20003000 [ 123.331346][ T6736] Memory failure: 0x10b3ce: recovery action for clean unevictable LRU page: Recovered [ 123.403542][ T5528] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.502382][ T5048] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop5 scanned by udevd (5048) [ 124.132980][ T6780] MPTCP: kernel_bind error, err=-98 [ 125.396776][ T6803] FAULT_INJECTION: forcing a failure. [ 125.396776][ T6803] name failslab, interval 1, probability 0, space 0, times 0 [ 125.399416][ T6803] CPU: 0 PID: 6803 Comm: syz.1.576 Not tainted syzkaller #0 [ 125.400922][ T6803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 125.403053][ T6803] Call trace: [ 125.403735][ T6803] dump_backtrace+0x1c4/0x1f0 [ 125.404692][ T6803] show_stack+0x2c/0x3c [ 125.405574][ T6803] __dump_stack+0x30/0x40 [ 125.406462][ T6803] dump_stack_lvl+0xf4/0x15c [ 125.407397][ T6803] dump_stack+0x1c/0x5c [ 125.408294][ T6803] should_fail_ex+0x3cc/0x524 [ 125.409337][ T6803] __should_failslab+0xc0/0x11c [ 125.410375][ T6803] should_failslab+0x10/0x28 [ 125.411383][ T6803] __kmem_cache_alloc_node+0x7c/0x318 [ 125.412571][ T6803] __kmalloc+0xc4/0x180 [ 125.413471][ T6803] memcg_list_lru_alloc+0x280/0x8bc [ 125.414522][ T6803] slab_pre_alloc_hook+0x2cc/0x31c [ 125.415635][ T6803] kmem_cache_alloc_lru+0x60/0x284 [ 125.416634][ T6803] bdev_alloc_inode+0x2c/0x68 [ 125.417607][ T6803] new_inode_pseudo+0x68/0x1cc [ 125.418538][ T6803] new_inode+0x38/0x174 [ 125.419469][ T6803] bdev_alloc+0x30/0x240 [ 125.420413][ T6803] __alloc_disk_node+0x104/0x438 [ 125.421494][ T6803] __blk_alloc_disk+0x40/0xb8 [ 125.422509][ T6803] dm_create+0x514/0xf48 [ 125.423427][ T6803] dev_create+0xf4/0x25c [ 125.424235][ T6803] dm_ctl_ioctl+0xaac/0xf1c [ 125.425186][ T6803] __arm64_sys_ioctl+0x14c/0x1c8 [ 125.426275][ T6803] invoke_syscall+0x98/0x290 [ 125.427296][ T6803] el0_svc_common+0x13c/0x258 [ 125.428364][ T6803] do_el0_svc+0x5c/0x134 [ 125.429300][ T6803] el0_svc+0x58/0x12c [ 125.430179][ T6803] el0t_64_sync_handler+0x84/0xf0 [ 125.431185][ T6803] el0t_64_sync+0x18c/0x190 [ 125.833190][ T6821] loop1: detected capacity change from 0 to 32768 [ 125.930187][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.931836][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.943713][ T6826] loop5: detected capacity change from 0 to 1024 [ 125.945809][ T6826] EXT4-fs: Ignoring removed bh option [ 125.982666][ T6826] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 126.196938][ T5528] EXT4-fs (loop5): unmounting filesystem. [ 126.859251][ T6835] loop0: detected capacity change from 0 to 40427 [ 126.873726][ T6835] F2FS-fs (loop0): Unrecognized mount option "./bus" or missing value [ 126.938976][ T6835] loop0: detected capacity change from 40427 to 1 [ 126.956311][ C0] net_ratelimit: 33 callbacks suppressed [ 126.975095][ T6853] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 127.410930][ T6870] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 127.412896][ T6868] loop5: detected capacity change from 0 to 256 [ 127.421913][ T6868] exfat: Bad value for 'uid' [ 127.440819][ T5048] udevd[5048]: symlink '../../loop5' '/dev/disk/by-diskseq/155.tmp-b7:5' failed: Read-only file system [ 127.445590][ T5048] udevd[5048]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 127.466395][ T5048] udevd[5048]: symlink '../../loop5' '/dev/disk/by-diskseq/155.tmp-b7:5' failed: Read-only file system [ 127.479406][ T5048] udevd[5048]: symlink '../../loop5' '/dev/disk/by-diskseq/155.tmp-b7:5' failed: Read-only file system [ 127.615598][ T6880] rxe_eth0 speed is unknown, defaulting to 1000 [ 127.690269][ T6876] loop5: detected capacity change from 0 to 32768 [ 127.695345][ T6876] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 127.702286][ T6876] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 127.704113][ T6876] BTRFS info (device loop5): setting nodatacow, compression disabled [ 127.705764][ T6876] BTRFS info (device loop5): setting datasum, datacow enabled [ 127.705881][ T6876] BTRFS info (device loop5): force clearing of disk cache [ 127.705891][ T6876] BTRFS info (device loop5): enabling ssd optimizations [ 127.712420][ T6876] BTRFS info (device loop5): using spread ssd allocation scheme [ 127.715152][ T6876] BTRFS info (device loop5): turning on sync discard [ 127.721750][ T6876] BTRFS info (device loop5): turning on flush-on-commit [ 127.724516][ T6876] BTRFS info (device loop5): not using ssd optimizations [ 127.730759][ T6876] BTRFS info (device loop5): not using spread ssd allocation scheme [ 127.733485][ T6876] BTRFS info (device loop5): using free space tree [ 127.839724][ T5048] udevd[5048]: symlink '../../loop5' '/dev/disk/by-diskseq/157.tmp-b7:5' failed: Read-only file system [ 127.842469][ T5048] udevd[5048]: symlink '../../loop5' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:5' failed: Read-only file system [ 127.882627][ T6876] BTRFS info (device loop5): rebuilding free space tree [ 127.928806][ T6902] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 127.930218][ T6902] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 127.932581][ T6902] vhci_hcd vhci_hcd.0: Device attached [ 127.961755][ T6911] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 128.033365][ T5048] udevd[5048]: symlink '../../loop5' '/dev/disk/by-diskseq/157.tmp-b7:5' failed: Read-only file system [ 128.054072][ T5048] udevd[5048]: symlink '../../loop5' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:5' failed: Read-only file system [ 128.086988][ T6915] overlayfs: failed to clone upperpath [ 128.114336][ T6905] vhci_hcd: connection closed [ 128.115746][ T9] vhci_hcd: stop threads [ 128.120775][ T9] vhci_hcd: release socket [ 128.121654][ T9] vhci_hcd: disconnect device [ 128.142469][ T6876] BTRFS info (device loop5): balance: start -d -m [ 128.145734][ T6876] BTRFS info (device loop5): relocating block group 6881280 flags data|metadata [ 128.146466][ T4334] vhci_hcd: vhci_device speed not set [ 128.155544][ T6876] BTRFS info (device loop5): relocating block group 5242880 flags data|metadata [ 128.280347][ T6876] BTRFS info (device loop5): found 7 extents, stage: move data extents [ 128.314553][ T6876] BTRFS info (device loop5): found 1 extents, stage: update data pointers [ 128.340834][ T6876] BTRFS info (device loop5): balance: ended with status: 0 [ 128.543363][ T6928] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 128.704527][ T6933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.788185][ T6933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.832655][ T6945] loop1: detected capacity change from 0 to 256 [ 128.842834][ T6933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.846883][ T6945] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.723632][ T5048] udevd[5048]: symlink '../../loop1' '/dev/disk/by-diskseq/158.tmp-b7:1' failed: Read-only file system [ 129.892008][ T5528] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.972453][ T5048] udevd[5048]: symlink '../../loop1' '/dev/disk/by-diskseq/158.tmp-b7:1' failed: Read-only file system [ 130.126208][ T6956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.619'. [ 130.401613][ T6953] netlink: 'syz.1.620': attribute type 10 has an invalid length. [ 130.511685][ T6953] team0: Port device netdevsim0 added [ 132.595021][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 132.731822][ T6997] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.733651][ T6997] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.735569][ T6997] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.767778][ T7005] loop1: detected capacity change from 0 to 2048 [ 132.783646][ T6997] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.795887][ C1] net_ratelimit: 31 callbacks suppressed [ 132.800756][ T5048] udevd[5048]: symlink '../../loop1' '/dev/disk/by-diskseq/161.tmp-b7:1' failed: Read-only file system [ 132.803547][ T5048] udevd[5048]: symlink '../../loop1' '/dev/disk/by-label/LinuxUDF.tmp-b7:1' failed: Read-only file system [ 132.815591][ T6997] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 132.828075][ T7005] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.837754][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.633'. [ 132.858551][ T5048] udevd[5048]: symlink '../../loop1' '/dev/disk/by-uuid/1234567812345678.tmp-b7:1' failed: Read-only file system [ 132.872870][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 132.890817][ T7009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.901675][ T7002] loop5: detected capacity change from 0 to 8192 [ 132.921271][ T7005] Bluetooth: hci0: Opcode 0x0c03 failed: -38 [ 132.989750][ T7016] netlink: 64 bytes leftover after parsing attributes in process `syz.3.649'. [ 133.074914][ T5048] udevd[5048]: symlink '../../loop5' '/dev/disk/by-diskseq/162.tmp-b7:5' failed: Read-only file system [ 133.103268][ T5048] udevd[5048]: symlink '../../loop5' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:5' failed: Read-only file system [ 133.270697][ T5048] udevd[5048]: symlink '../../loop5' '/dev/disk/by-diskseq/162.tmp-b7:5' failed: Read-only file system [ 133.284034][ T5048] udevd[5048]: symlink '../../loop5' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:5' failed: Read-only file system [ 133.351970][ T5048] udevd[5048]: symlink '../../loop5' '/dev/disk/by-diskseq/162.tmp-b7:5' failed: Read-only file system [ 133.694106][ T5048] udevd[5048]: symlink '../../loop5' '/dev/disk/by-diskseq/162.tmp-b7:5' failed: Read-only file system [ 133.783235][ T5048] udevd[5048]: symlink '../../loop1' '/dev/disk/by-diskseq/161.tmp-b7:1' failed: Read-only file system [ 134.145255][ T7048] netlink: 'syz.1.643': attribute type 46 has an invalid length. [ 134.742329][ T7064] loop1: detected capacity change from 0 to 32768 [ 134.763446][ T7064] (syz.1.646,7064,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "obj_role=)F@#^t][\*" or missing value [ 134.775570][ T7064] (syz.1.646,7064,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 134.955655][ T7078] ubi: mtd0 is already attached to ubi0 [ 135.096265][ T7083] FAULT_INJECTION: forcing a failure. [ 135.096265][ T7083] name failslab, interval 1, probability 0, space 0, times 0 [ 135.099021][ T7083] CPU: 1 PID: 7083 Comm: syz.0.648 Not tainted syzkaller #0 [ 135.100367][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 135.102140][ T7083] Call trace: [ 135.102793][ T7083] dump_backtrace+0x1c4/0x1f0 [ 135.103673][ T7083] show_stack+0x2c/0x3c [ 135.104473][ T7083] __dump_stack+0x30/0x40 [ 135.105351][ T7083] dump_stack_lvl+0xf4/0x15c [ 135.106310][ T7083] dump_stack+0x1c/0x5c [ 135.106341][ T7083] should_fail_ex+0x3cc/0x524 [ 135.108262][ T7083] __should_failslab+0xc0/0x11c [ 135.109344][ T7083] should_failslab+0x10/0x28 [ 135.110367][ T7083] __kmem_cache_alloc_node+0x7c/0x318 [ 135.111526][ T7083] kmalloc_trace+0x48/0x94 [ 135.111544][ T7083] x509_cert_parse+0xa4/0x6e0 [ 135.113391][ T7083] x509_key_preparse+0x74/0x5c8 [ 135.114408][ T7083] asymmetric_key_preparse+0xcc/0x17c [ 135.115557][ T7083] key_create_or_update+0x394/0x868 [ 135.116690][ T7083] __arm64_sys_add_key+0x40c/0x520 [ 135.117835][ T7083] invoke_syscall+0x98/0x290 [ 135.118856][ T7083] el0_svc_common+0x13c/0x258 [ 135.119902][ T7083] do_el0_svc+0x5c/0x134 [ 135.120847][ T7083] el0_svc+0x58/0x12c [ 135.121740][ T7083] el0t_64_sync_handler+0x84/0xf0 [ 135.122829][ T7083] el0t_64_sync+0x18c/0x190 [ 135.746522][ T7103] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 135.977993][ T7124] team0: Port device bridge0 added [ 136.012705][ T7124] device syzkaller0 left promiscuous mode [ 136.016452][ T7124] tipc: Resetting bearer [ 136.017651][ T7124] tipc: Resetting bearer [ 136.389515][ T7161] loop5: detected capacity change from 0 to 128 [ 136.459531][ T7161] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 136.461494][ T7161] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.517871][ T5528] EXT4-fs (loop5): unmounting filesystem. [ 136.686437][ T7180] batman_adv: batadv0: Adding interface: veth0 [ 136.687708][ T7180] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.714656][ T7180] batman_adv: batadv0: Interface activated: veth0 [ 136.735711][ T7180] batman_adv: batadv0: Interface deactivated: veth0 [ 136.737012][ T7180] batman_adv: batadv0: Removing interface: veth0 [ 136.756548][ T7180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.757973][ T7180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.764759][ T7180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.767424][ T7180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.954441][ T7196] loop1: detected capacity change from 0 to 512 [ 136.955865][ T4344] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 136.956988][ T4344] Bluetooth: hci0: Injecting HCI hardware error event [ 137.003550][ T7196] Quota error (device loop1): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 137.011934][ T7196] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 137.013950][ T7196] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.668: Failed to acquire dquot type 1 [ 137.034857][ T7196] EXT4-fs (loop1): 1 truncate cleaned up [ 137.046406][ T7196] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 137.048470][ T7196] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.135858][ T6104] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.217154][ T7196] EXT4-fs (loop1): unmounting filesystem. [ 137.318631][ T6104] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 137.320507][ T6104] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 137.322091][ T6104] usb 1-1: Product: syz [ 137.327831][ T6104] usb 1-1: config 0 descriptor?? [ 137.338603][ T6104] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 137.341239][ T6104] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 137.746759][ T6104] usb 1-1: USB disconnect, device number 5 [ 137.748808][ T6104] ftdi_sio 1-1:0.0: device disconnected [ 138.075551][ C1] net_ratelimit: 35 callbacks suppressed [ 138.434292][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.684'. [ 138.532870][ T7270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.688'. [ 140.636782][ T7305] bond0: (slave syz_tun): Releasing backup interface [ 140.827506][ T7315] netlink: 'syz.3.705': attribute type 1 has an invalid length. [ 140.845103][ T7315] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.864167][ T7312] loop0: detected capacity change from 0 to 32768 [ 140.871576][ T7312] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.703 (7312) [ 140.883189][ T7312] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 141.733422][ T7312] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 141.735520][ T7312] BTRFS info (device loop0): using free space tree [ 141.756286][ T7315] bond2: (slave gretap3): making interface the new active one [ 141.778996][ T7315] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 141.780797][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 141.831617][ T7315] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 141.860524][ T7315] netlink: 'syz.3.705': attribute type 10 has an invalid length. [ 141.862193][ T7315] netlink: 40 bytes leftover after parsing attributes in process `syz.3.705'. [ 141.864119][ T7315] device dummy0 entered promiscuous mode [ 141.871621][ T7315] bond2: (slave dummy0): Releasing active interface [ 142.010291][ T7312] BTRFS info (device loop0): enabling ssd optimizations [ 142.058516][ T4330] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 142.651861][ T7359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.710'. [ 142.846126][ T7361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.848230][ T7361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.195214][ C0] net_ratelimit: 28 callbacks suppressed [ 143.692397][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.724'. [ 144.346263][ T7416] using random self ethernet address [ 144.348095][ T7416] using random host ethernet address [ 144.356837][ T7416] using random self ethernet address [ 144.359145][ T7416] using random host ethernet address [ 145.557207][ T7427] netlink: 'syz.5.733': attribute type 4 has an invalid length. [ 145.613012][ T7427] netlink: 'syz.5.733': attribute type 4 has an invalid length. [ 146.877395][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 146.900683][ T7473] loop0: detected capacity change from 0 to 256 [ 146.909822][ T7473] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.042695][ T7478] loop0: detected capacity change from 0 to 1024 [ 147.044781][ T7478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.084775][ T7478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 147.546997][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 147.812014][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 147.880318][ T7502] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.882210][ T7502] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.884165][ T7502] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.886177][ T7502] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 147.890281][ T7502] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 148.278665][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 148.281981][ T7502] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.314888][ C1] net_ratelimit: 31 callbacks suppressed [ 148.440193][ T7517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.452371][ T7527] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 148.476212][ T4414] wlan1: authenticate with 08:02:11:00:00:00 [ 148.480385][ T4414] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 148.502211][ T7517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.504171][ T39] wlan1: authenticated [ 148.506990][ T4414] mac80211_hwsim hwsim13 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 148.516210][ T4692] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 148.562276][ T7517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.564396][ T39] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 148.566578][ T39] wlan1: associated [ 149.016936][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 149.484979][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.493812][ T4692] wlan1: AP 08:02:11:00:00:00 tries to chanswitch to same channel, ignore [ 149.864933][ T4344] Bluetooth: hci2: command 0x0406 tx timeout [ 150.018994][ T7558] loop5: detected capacity change from 0 to 256 [ 150.026497][ T7558] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.202698][ T7569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.286440][ T7569] device bond_slave_0 entered promiscuous mode [ 150.288172][ T7569] device bond_slave_1 entered promiscuous mode [ 150.291953][ T7569] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 150.301181][ T7569] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 151.688649][ T4344] ------------[ cut here ]------------ [ 151.689995][ T4344] WARNING: CPU: 1 PID: 4344 at net/bluetooth/hci_conn.c:683 hci_conn_timeout+0x204/0x41c [ 151.691933][ T4344] Modules linked in: [ 151.692698][ T4344] CPU: 1 PID: 4344 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 151.694151][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 151.696321][ T4344] Workqueue: hci2 hci_conn_timeout [ 151.697349][ T4344] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 151.699050][ T4344] pc : hci_conn_timeout+0x204/0x41c [ 151.700109][ T4344] lr : hci_conn_timeout+0x204/0x41c [ 151.701248][ T4344] sp : ffff800022327b60 [ 151.702171][ T4344] x29: ffff800022327b60 x28: 0000000000000001 x27: ffff0000da04c330 [ 151.703968][ T4344] x26: 0000000000000002 x25: ffff0000d18ff000 x24: ffff0000c4bbe000 [ 151.705585][ T4344] x23: ffff0000da04c036 x22: dfff800000000000 x21: 00000000ffffffff [ 151.707286][ T4344] x20: ffff0000da04c000 x19: ffff0000da04c330 x18: 1fffe00033c1877e [ 151.708919][ T4344] x17: 0000000000000000 x16: ffff8000082dd38c x15: 0000000000000000 [ 151.710585][ T4344] x14: 0000000000000001 x13: 1ffff00004464e94 x12: 0000000000000000 [ 151.712343][ T4344] x11: ff00800010da0214 x10: 0000000000000000 x9 : ffff800010da0214 [ 151.714153][ T4344] x8 : ffff0000dfbc9c00 x7 : 000000000068f6b8 x6 : 000000000068f668 [ 151.715919][ T4344] x5 : ffff8000223274b8 x4 : ffff8000164ed1c8 x3 : ffff80000831ef98 [ 151.717518][ T4344] x2 : 0000000000000001 x1 : 00000000ffffffff x0 : 0000000000000000 [ 151.719289][ T4344] Call trace: [ 151.719994][ T4344] hci_conn_timeout+0x204/0x41c [ 151.721008][ T4344] process_one_work+0x7e4/0x13bc [ 151.722061][ T4344] worker_thread+0x8cc/0xfe8 [ 151.723066][ T4344] kthread+0x254/0x2e0 [ 151.723911][ T4344] ret_from_fork+0x10/0x20 [ 151.724841][ T4344] irq event stamp: 9050 [ 151.725729][ T4344] hardirqs last enabled at (9049): [] __up_console_sem+0xb4/0xfc [ 151.727804][ T4344] hardirqs last disabled at (9050): [] el1_dbg+0x24/0x80 [ 151.729582][ T4344] softirqs last enabled at (8678): [] handle_softirqs+0xb1c/0xc90 [ 151.731551][ T4344] softirqs last disabled at (8483): [] __do_softirq+0x14/0x20 [ 151.733422][ T4344] ---[ end trace 0000000000000000 ]--- [ 151.784416][ T7589] loop5: detected capacity change from 0 to 2048 [ 151.789183][ T7582] delete_channel: no stack [ 151.812860][ T7589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 151.817238][ T7589] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.867052][ T5528] EXT4-fs (loop5): unmounting filesystem. [ 153.754767][ T4344] Bluetooth: hci4: command 0x0406 tx timeout [ 153.914517][ C1] net_ratelimit: 25 callbacks suppressed [ 159.114181][ C1] net_ratelimit: 35 callbacks suppressed