last executing test programs: 1.343662659s ago: executing program 2 (id=2067): syz_usb_connect(0x4, 0x24, &(0x7f0000000280)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) 792.128431ms ago: executing program 2 (id=2091): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, 0x0, 0x0) 791.894462ms ago: executing program 4 (id=2092): socket$key(0xf, 0x3, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="e2000000000000000008001c31117eb51980c6d05f61576690178001c97fc40c5dc1b513315163a9b5", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x84400, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r2 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44) 791.846511ms ago: executing program 2 (id=2093): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum={0x7}]}, {0x0, [0x0, 0x61, 0x5f, 0x0, 0x2e, 0x2e, 0x5f]}}, &(0x7f00000010c0)=""/167, 0x2d, 0xa7, 0x1, 0x5}, 0x28) 791.773862ms ago: executing program 0 (id=2094): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000006c0)={r0, 0x0, 0x0, 0x4}, 0x20) 700.187784ms ago: executing program 4 (id=2097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040)=0x6f, 0xfffffffffffffefa) 700.039504ms ago: executing program 2 (id=2098): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x4}, 0x6) write(r0, &(0x7f0000000340)='#\x00\x00\x00', 0x4) 699.968964ms ago: executing program 0 (id=2099): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 699.892964ms ago: executing program 1 (id=2100): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) r0 = syz_io_uring_setup(0xf02, &(0x7f0000000000)={0x0, 0x8dac, 0x80000, 0xf7fffffd, 0x40058}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 699.788094ms ago: executing program 4 (id=2101): gettid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@ldst={0x3, 0x1, 0x6, 0xb, 0x9, 0xffffffffffffffa4, 0xffffffffffffffff}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0}, 0x94) 686.128584ms ago: executing program 1 (id=2102): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0xff, 0x20b, 0x1, 0x1b, "6e6f7c300635b35e"}) 637.992405ms ago: executing program 4 (id=2104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') write(0xffffffffffffffff, &(0x7f00000001c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x1000) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt/del2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000240)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f", 0x30) openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/del3\x00', 0x42, 0x1ff) 637.789595ms ago: executing program 2 (id=2105): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f0000000480)=ANY=[@ANYRES32=r1]) 637.536665ms ago: executing program 0 (id=2106): syz_open_dev$usbmon(0x0, 0x0, 0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 584.217937ms ago: executing program 1 (id=2107): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) write$dsp(0xffffffffffffffff, &(0x7f0000002200)="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", 0xb01) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045518, &(0x7f0000002a40)) 583.717217ms ago: executing program 4 (id=2109): socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/raw\x00') preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0x15f, 0x0) syz_usb_connect(0x0, 0x3b, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, 0xffffffffffffffff, 0x2000) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) 583.606497ms ago: executing program 0 (id=2110): bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) 572.300397ms ago: executing program 1 (id=2111): sched_setscheduler(0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_pid(r0, &(0x7f0000000180), 0x12) 504.290049ms ago: executing program 0 (id=2113): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=@srh={0x3a, 0x0, 0x4, 0x0, 0x4, 0x64, 0xa}, 0x8) write(r0, 0x0, 0x0) 504.121919ms ago: executing program 1 (id=2114): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)={0x10, 0x12, 0x1, 0x70bd26, 0x25dfdbfe}, 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) rt_sigqueueinfo(0x0, 0xb, &(0x7f0000000080)={0x36, 0x208, 0xfffffff3}) 503.987629ms ago: executing program 3 (id=2115): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) r2 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x6, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed79, 0x80, 0x10000004, 0x142, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf912, 0x2000, 0x1, 0x1b1, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8256, 0x2, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r6, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f}) 503.797359ms ago: executing program 0 (id=2116): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000700)=@ethtool_channels={0x1, 0x6, 0xe, 0x3, 0x1, 0xb5b8, 0x7f, 0x0, 0x5}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0xf2b, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000140)) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x801, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x5, 0x0, {r3}, {}, 0xe1e, 0x7ff}) 503.637849ms ago: executing program 1 (id=2117): syz_open_dev$media(&(0x7f0000000380), 0x13, 0x0) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x0, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r5, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$alg(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000400)="b201c499a3656ddff9b4139ef5d8c5aaf765af3a6761c81ae57a5eb8e4196ce19f7a717a3b202a528c4a", 0x2a}, {&(0x7f0000000500)="82455c91411c28bfd1d895d01dc10e31e4c768a9f1b862cd7039088220b8209d07b3461aac13bae869e4f2e25762c3d3a633433b4e3a75ae8b567f4e7f", 0x3d}, {&(0x7f00000005c0)="77c8938050ed9266f60ecbea36a529f74c2bd3ec232d76809a91ddabafb596761aa843a99c74820374fc8884083e3f0f6aecc50bb37b40c16b06eeb7094f1db114480f5e48351b8a7520c5944ca4f954c549d3d334e946683b83eb51dbb0061e6831f91ca16fa4cdeb710f225e95d1671a39956fa84afdc647c1c76b4a467c6f15ecb5e1bad2067f768c0eb58ef885785a48cea77ae501ce8c7161d1", 0x9c}, {&(0x7f0000000680)}, {&(0x7f00000007c0)="f7f12a07870ee28edcebec8ec209a1e2055aad8968069b5b73", 0x19}, {0x0}, {&(0x7f0000000ac0)="dd6598e1e7326f8196f5ea8db0e91ef27f4fae0ea22c54789499cc85d1161d9413764555c03d0ad2266d72c277d6672e26a19e8a6c6580230455", 0x3a}, {&(0x7f0000000b00)="e0597ea7839856625a8b9f490da114369d0e80cc939234cee509c1ef5a823387971fda14d5ed027db76a46", 0x2b}], 0x8, &(0x7f0000000c00)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xb0, 0x117, 0x2, 0x96, "525e0e5112ea9f66e061d7297706a5af2163d1f9fad296bf1775a7c7c108d5006dff86d1ce31327adae15da796674dd1940890ffd4014148b89b56f2ec24200719372a667751ffa7de2d506e2fa8ba25868419528857a6ebba04fb2fdfa5e78afe13366ae7f66678e5336f1ab856d182f7a55fd878d955e6159be325e11a4a881a9cf8252980cc00f55f013d4ef220de34245249030d"}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x58, 0x117, 0x2, 0x41, "82c87ad71e6188c0351168c5aae8685ad12f207d81f85e893aa02e14ae260ebd7dcf656e5682b1ff529ec4a7aea2ebd43e2368e03b5d1de5206e3bfd1dd95b697e"}], 0x180, 0x400c084}, 0x800) 455.711539ms ago: executing program 3 (id=2118): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000a41000/0x1000)=nil, 0x1000}}) 354.520312ms ago: executing program 3 (id=2119): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000007b, 0x4004) 232.185875ms ago: executing program 3 (id=2120): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) 231.960385ms ago: executing program 3 (id=2121): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 136.347977ms ago: executing program 3 (id=2122): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5c50fae9d6d8d3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be", 0x9}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000017010fff03000000010000000000000000000000000000001701000002000000000000"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 45.29512ms ago: executing program 2 (id=2123): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x18) 0s ago: executing program 4 (id=2124): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00'}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x8000000004, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x4000003, 0x8, 0x8}) kernel console output (not intermixed with test programs): [ 30.897161][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.904245][ T4338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.906543][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.907753][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.912186][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.961487][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.010452][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.066508][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.067792][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.072501][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.075376][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.111314][ T4336] device hsr_slave_0 entered promiscuous mode [ 31.152558][ T4336] device hsr_slave_1 entered promiscuous mode [ 31.190233][ T4336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.191601][ T4336] Cannot create hsr debugfs directory [ 31.195642][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.261244][ T4338] device hsr_slave_0 entered promiscuous mode [ 31.300869][ T4338] device hsr_slave_1 entered promiscuous mode [ 31.340243][ T4338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.341764][ T4338] Cannot create hsr debugfs directory [ 31.352045][ T4335] team0: Port device team_slave_0 added [ 31.359551][ T4335] team0: Port device team_slave_1 added [ 31.365251][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.366407][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.371288][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.379973][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.381468][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.385769][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.441390][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.480387][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.520164][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.521475][ T4329] Cannot create hsr debugfs directory [ 31.591233][ T4335] device hsr_slave_0 entered promiscuous mode [ 31.631138][ T4335] device hsr_slave_1 entered promiscuous mode [ 31.670298][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.671593][ T4335] Cannot create hsr debugfs directory [ 31.715005][ T4328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.771343][ T4328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.828752][ T4328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.871376][ T4328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.925331][ T4338] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.962899][ T4338] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.011218][ T4338] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.054566][ T4338] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.100997][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.135569][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.191384][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.236154][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.282467][ T4336] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.325148][ T4336] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.361308][ T4336] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.407379][ T4336] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.413174][ T4332] Bluetooth: hci0: command 0x0409 tx timeout [ 32.469500][ T4335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.490427][ T4332] Bluetooth: hci4: command 0x0409 tx timeout [ 32.491611][ T4332] Bluetooth: hci1: command 0x0409 tx timeout [ 32.492714][ T4332] Bluetooth: hci3: command 0x0409 tx timeout [ 32.493734][ T4332] Bluetooth: hci2: command 0x0409 tx timeout [ 32.496411][ T4335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.531637][ T4335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.573751][ T4335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.623129][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.633528][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.635521][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.637692][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.641899][ T4338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.658311][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.660623][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.662497][ T634] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.663684][ T634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.665452][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.675789][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.677439][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.682614][ T4338] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.685785][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.687534][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.689072][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.690392][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.696363][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.698186][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.700500][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.704170][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.705391][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.706862][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.713784][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.724511][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.727786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.733608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.735297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.736792][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.738019][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.739433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.744540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.746212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.756939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.758671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.762964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.764571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.766614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.768441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.769990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.773655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.775188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.776630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.778182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.781114][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.787694][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.791601][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.793377][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.799106][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.805286][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.807151][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.808844][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.812409][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.814705][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.816373][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.828293][ T4338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.831028][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.833490][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.835033][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.836648][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.838205][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.839931][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.842741][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.844037][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.845921][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.847652][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.849209][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.850436][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.852679][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.854422][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.856298][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.858031][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.859592][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.861606][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.863166][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.864334][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.865876][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.867434][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.868970][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.876594][ T4336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.878355][ T4336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.884376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.886140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.888144][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.889453][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.891762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.894112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.895837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.898459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.904299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.906100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.907792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.909428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.913728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.917740][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.932552][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.935515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.937455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.939138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.941427][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.942727][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.944537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.945800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.947192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.956485][ T4329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.958216][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.965767][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.967532][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.969238][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.972567][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.975116][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.976827][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.978533][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.983849][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.985662][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.987649][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.989242][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.993111][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.994710][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.000760][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.002433][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.003941][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.005103][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.006483][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.008134][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.009622][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.025477][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.029110][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.030776][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.032191][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.033537][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.034826][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.039757][ T4328] device veth0_vlan entered promiscuous mode [ 33.049648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.052842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.056815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.058420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.060715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.066824][ T4328] device veth1_vlan entered promiscuous mode [ 33.075835][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.077493][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.079096][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.082757][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.084489][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.096223][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.101690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.103392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.104813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.106137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.107812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.112124][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.127874][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.129467][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.131338][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.138267][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.139960][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.142375][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.143919][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.151211][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.153658][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.155233][ T4338] device veth0_vlan entered promiscuous mode [ 33.163499][ T4328] device veth0_macvtap entered promiscuous mode [ 33.165995][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.167714][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.169429][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.177194][ T4338] device veth1_vlan entered promiscuous mode [ 33.183696][ T4328] device veth1_macvtap entered promiscuous mode [ 33.187094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.188858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.191616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.193381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.204015][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.205608][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.207165][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.208781][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.211141][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.212582][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.214239][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.218150][ T4336] device veth0_vlan entered promiscuous mode [ 33.221584][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.226661][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.228462][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.233985][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.236675][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.239509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.241827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.246368][ T4336] device veth1_vlan entered promiscuous mode [ 33.251286][ T4329] device veth0_vlan entered promiscuous mode [ 33.254278][ T4329] device veth1_vlan entered promiscuous mode [ 33.257067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.258580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.261234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.262995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.266751][ T4338] device veth0_macvtap entered promiscuous mode [ 33.268995][ T4338] device veth1_macvtap entered promiscuous mode [ 33.275859][ T4328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.277413][ T4328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.278812][ T4328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.281296][ T4328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.284593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.286241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.287734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.289275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.293796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.295503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.296909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.308458][ T4336] device veth0_macvtap entered promiscuous mode [ 33.314373][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.316007][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.317823][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.319541][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.331875][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.333789][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.336365][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.339813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.341803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.344870][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.346586][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.348584][ T4336] device veth1_macvtap entered promiscuous mode [ 33.357334][ T4329] device veth0_macvtap entered promiscuous mode [ 33.369015][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.372003][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.374388][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.384220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.385825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.387402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.389078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.393401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.395112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.397156][ T4329] device veth1_macvtap entered promiscuous mode [ 33.399439][ T4338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.402138][ T4338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.403735][ T4338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.405210][ T4338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.413365][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.415285][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.417062][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.418809][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.421801][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.425542][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.427372][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.429124][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.432560][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.435078][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.437179][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.438914][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.442007][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.443677][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.445275][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.460609][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.462032][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.463004][ T4335] device veth0_vlan entered promiscuous mode [ 33.469238][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.472160][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.473862][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.475664][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.477393][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.479128][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.482364][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.484166][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.485732][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.487377][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.489079][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.492439][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.494030][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.495550][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.498028][ T4336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.499566][ T4336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.501835][ T4336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.503301][ T4336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.514059][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.515881][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.517510][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.519148][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.522505][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.524369][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.527107][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.534956][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.536597][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.538600][ T4335] device veth1_vlan entered promiscuous mode [ 33.541686][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.543094][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.544703][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.546384][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.547993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.557169][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.558726][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.561748][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.563141][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.599049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.601046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.617488][ T4335] device veth0_macvtap entered promiscuous mode [ 33.634817][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.636216][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.637565][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.639342][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.650916][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.652377][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.659708][ T4383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.661471][ T4383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.667721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.669314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.683014][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.684465][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.685934][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.699578][ T4335] device veth1_macvtap entered promiscuous mode [ 33.705192][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.706397][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.708134][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.718169][ T4409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.719867][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.721485][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.722240][ T4409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.724263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.738143][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.739905][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.742375][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.744222][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.745815][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.748064][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.749590][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.752980][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.755639][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.757973][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.763216][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.773984][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.777962][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.779791][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.782526][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.787037][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.788620][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.791510][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.792955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.794867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.796436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.798010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.827144][ T4416] binder: 4415:4416 got transaction to invalid handle, 1 [ 33.828599][ T4416] binder: 4416:4415 cannot find target node [ 33.829700][ T4416] binder: 4415:4416 transaction call to 0:0 failed 4/29201/-22, size 0-0 line 3062 [ 33.831688][ T4335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.833283][ T4335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.836586][ T4416] binder: 4415:4416 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 33.840619][ T4335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.842187][ T4335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.847412][ T4416] binder: 4416 RLIMIT_NICE not set [ 33.877422][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.878859][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.881721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.887875][ T4420] binder: 4415:4420 got reply transaction with no transaction stack [ 33.889354][ T4420] binder: 4415:4420 transaction reply to 0:0 failed 5/29201/-71, size 0-0 line 2963 [ 33.894443][ T4420] binder: 4415:4420 BC_FREE_BUFFER u0000000020ffd000 no match [ 33.895772][ T4420] binder: 4415:4420 Acquire 1 refcount change on invalid ref 3 ret -22 [ 33.897208][ T4420] binder: 4415:4420 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 33.898559][ T4420] binder: 4415:4420 BC_INCREFS_DONE u0000000000000001 no match [ 33.908132][ T4420] binder: 4415:4420 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 33.909731][ T4420] binder: 4415:4420 got transaction to context manager from process owning it [ 33.911808][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.913238][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.913523][ T4420] binder: 4415:4420 transaction async to 4415:0 failed 6/29201/-22, size 88-24 line 3051 [ 33.915476][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.050629][ T4344] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.159441][ T22] libceph: connect (1)[c::]:6789 error -101 [ 34.161039][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 34.211357][ T4435] ceph: No mds server is up or the cluster is laggy [ 34.230625][ T4344] usb 1-1: Using ep0 maxpacket: 8 [ 34.233754][ T4344] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 34.235498][ T4344] usb 1-1: config 179 has no interface number 0 [ 34.237015][ T4344] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 34.239514][ T4344] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 34.246759][ T4344] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 34.252355][ T4344] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 34.256638][ T4344] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 34.264583][ T4344] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 34.268512][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.295132][ T4414] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 34.495438][ T4339] Bluetooth: hci0: command 0x041b tx timeout [ 34.609079][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 34.610372][ T4332] Bluetooth: hci3: command 0x041b tx timeout [ 34.611484][ T4332] Bluetooth: hci1: command 0x041b tx timeout [ 34.612581][ T4332] Bluetooth: hci4: command 0x041b tx timeout [ 35.005472][ T4344] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input2 [ 35.020040][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.022287][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.217226][ T4439] usb 1-1: USB disconnect, device number 2 [ 35.218419][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 35.219926][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 35.222370][ T4439] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 35.256541][ T4458] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 35.781517][ T4464] binder: 4463:4464 ioctl c0306201 0 returned -14 [ 35.784411][ T4464] binder: 4464:4463 cannot find target node [ 35.785510][ T4464] binder: 4463:4464 transaction call to 0:0 failed 7/29201/-22, size 0-0 line 3062 [ 35.788493][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.838697][ T4339] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 35.841039][ T4332] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 35.843973][ T4332] CPU: 1 PID: 4332 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 35.845124][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.846640][ T4332] Workqueue: hci3 hci_rx_work [ 35.847344][ T4332] Call trace: [ 35.847824][ T4332] dump_backtrace+0x1c4/0x1f0 [ 35.848562][ T4332] show_stack+0x2c/0x3c [ 35.849191][ T4332] __dump_stack+0x30/0x40 [ 35.849857][ T4332] dump_stack_lvl+0xf4/0x15c [ 35.850639][ T4332] dump_stack+0x1c/0x5c [ 35.851370][ T4332] sysfs_create_dir_ns+0x244/0x264 [ 35.852254][ T4332] kobject_add_internal+0x5a8/0xb18 [ 35.853084][ T4332] kobject_add+0x144/0x20c [ 35.853846][ T4332] device_add+0x3dc/0xe4c [ 35.854613][ T4332] hci_conn_add_sysfs+0xb8/0x1bc [ 35.855477][ T4332] hci_conn_complete_evt+0x7b8/0x10b4 [ 35.856400][ T4332] hci_event_packet+0x698/0xe60 [ 35.857262][ T4332] hci_rx_work+0x320/0xa94 [ 35.858025][ T4332] process_one_work+0x7e4/0x13bc [ 35.858894][ T4332] worker_thread+0x8cc/0xfe8 [ 35.859724][ T4332] kthread+0x254/0x2e0 [ 35.860424][ T4332] ret_from_fork+0x10/0x20 [ 35.866223][ T4332] kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 35.868637][ T4332] Bluetooth: hci3: failed to register connection device [ 35.895623][ T4470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.900339][ T4470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.254500][ T4480] sctp: [Deprecated]: syz.4.26 (pid 4480) Use of int in max_burst socket option deprecated. [ 36.254500][ T4480] Use struct sctp_assoc_value instead [ 36.571161][ T4332] Bluetooth: hci0: command 0x040f tx timeout [ 36.650465][ T4332] Bluetooth: hci4: command 0x040f tx timeout [ 36.651609][ T4332] Bluetooth: hci1: command 0x040f tx timeout [ 36.652633][ T4332] Bluetooth: hci3: command 0x040f tx timeout [ 36.653680][ T4332] Bluetooth: hci2: command 0x040f tx timeout [ 36.843322][ T4490] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 37.345286][ T4492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.346905][ T4492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.412425][ T4332] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 37.413253][ T4339] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 37.416236][ T4339] CPU: 1 PID: 4339 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 37.417455][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 37.419197][ T4339] Workqueue: hci2 hci_rx_work [ 37.419997][ T4339] Call trace: [ 37.420545][ T4339] dump_backtrace+0x1c4/0x1f0 [ 37.421387][ T4339] show_stack+0x2c/0x3c [ 37.422059][ T4339] __dump_stack+0x30/0x40 [ 37.422788][ T4339] dump_stack_lvl+0xf4/0x15c [ 37.423628][ T4339] dump_stack+0x1c/0x5c [ 37.424379][ T4339] sysfs_create_dir_ns+0x244/0x264 [ 37.425301][ T4339] kobject_add_internal+0x5a8/0xb18 [ 37.426228][ T4339] kobject_add+0x144/0x20c [ 37.427006][ T4339] device_add+0x3dc/0xe4c [ 37.427747][ T4339] hci_conn_add_sysfs+0xb8/0x1bc [ 37.428594][ T4339] hci_conn_complete_evt+0x7b8/0x10b4 [ 37.429576][ T4339] hci_event_packet+0x698/0xe60 [ 37.430477][ T4339] hci_rx_work+0x320/0xa94 [ 37.431248][ T4339] process_one_work+0x7e4/0x13bc [ 37.432072][ T4339] worker_thread+0x8cc/0xfe8 [ 37.432886][ T4339] kthread+0x254/0x2e0 [ 37.433591][ T4339] ret_from_fork+0x10/0x20 [ 37.439324][ T4339] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 37.441817][ T4339] Bluetooth: hci2: failed to register connection device [ 37.896404][ T4378] libceph: connect (1)[c::]:6789 error -101 [ 37.897800][ T4378] libceph: mon0 (1)[c::]:6789 connect error [ 37.952415][ T4508] ceph: No mds server is up or the cluster is laggy [ 38.099853][ T4513] process 'syz.4.37' launched '/dev/fd/4' with NULL argv: empty string added [ 38.328595][ T4450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 38.424515][ T4522] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 38.428729][ T4522] 8021q: VLANs not supported on ip6gre0 [ 38.640332][ T7] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 38.653065][ T4339] Bluetooth: hci0: command 0x0419 tx timeout [ 38.699208][ T4532] sctp: [Deprecated]: syz.3.42 (pid 4532) Use of int in max_burst socket option deprecated. [ 38.699208][ T4532] Use struct sctp_assoc_value instead [ 38.753921][ T4339] Bluetooth: hci3: command 0x0419 tx timeout [ 38.755357][ T4339] Bluetooth: hci1: command 0x0419 tx timeout [ 38.756911][ T4339] Bluetooth: hci2: command 0x0419 tx timeout [ 38.758278][ T4339] Bluetooth: hci4: command 0x0419 tx timeout [ 39.013151][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.016919][ T7] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 39.042768][ T7] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 39.073208][ T7] usb 1-1: Manufacturer: syz [ 39.117067][ T7] usb 1-1: SerialNumber: syz [ 39.554933][ T7] usb 1-1: config 0 descriptor?? [ 39.900418][ T4539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.902124][ T4539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.238147][ T4543] device syzkaller0 entered promiscuous mode [ 40.810848][ T4332] Bluetooth: hci2: command 0x0409 tx timeout [ 40.810968][ T4339] Bluetooth: hci3: command 0x0409 tx timeout [ 40.863340][ T4554] device syzkaller0 entered promiscuous mode [ 41.020060][ T4556] loop2: detected capacity change from 0 to 512 [ 41.030047][ T4558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.041459][ T4556] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.044394][ T4558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.125406][ T4334] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 41.126307][ T4339] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 41.129795][ T4339] CPU: 0 PID: 4339 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 41.131299][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.133216][ T4339] Workqueue: hci1 hci_rx_work [ 41.134087][ T4339] Call trace: [ 41.134704][ T4339] dump_backtrace+0x1c4/0x1f0 [ 41.135579][ T4339] show_stack+0x2c/0x3c [ 41.136326][ T4339] __dump_stack+0x30/0x40 [ 41.137087][ T4339] dump_stack_lvl+0xf4/0x15c [ 41.137907][ T4339] dump_stack+0x1c/0x5c [ 41.138673][ T4339] sysfs_create_dir_ns+0x244/0x264 [ 41.139529][ T4339] kobject_add_internal+0x5a8/0xb18 [ 41.140416][ T4339] kobject_add+0x144/0x20c [ 41.141141][ T4339] device_add+0x3dc/0xe4c [ 41.141886][ T4339] hci_conn_add_sysfs+0xb8/0x1bc [ 41.142743][ T4339] hci_conn_complete_evt+0x7b8/0x10b4 [ 41.143671][ T4339] hci_event_packet+0x698/0xe60 [ 41.144499][ T4339] hci_rx_work+0x320/0xa94 [ 41.145266][ T4339] process_one_work+0x7e4/0x13bc [ 41.146127][ T4339] worker_thread+0x8cc/0xfe8 [ 41.146941][ T4339] kthread+0x254/0x2e0 [ 41.147675][ T4339] ret_from_fork+0x10/0x20 [ 41.153533][ T4339] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 41.156049][ T4339] Bluetooth: hci1: failed to register connection device [ 41.201355][ T4556] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.46: couldn't read orphan inode 26 (err -116) [ 41.204587][ T4556] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 41.395662][ T4375] usb 1-1: USB disconnect, device number 3 [ 41.488757][ T4568] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.46: iget: bad i_size value: 360287970189639690 [ 41.952218][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 42.071760][ T4578] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 42.076497][ T4578] CIFS mount error: No usable UNC path provided in device string! [ 42.076497][ T4578] [ 42.078306][ T4578] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 42.354472][ T4567] loop3: detected capacity change from 0 to 32768 [ 42.364313][ T4567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.49 (4567) [ 42.446058][ T4567] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 42.448531][ T4567] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 42.452356][ T4567] BTRFS info (device loop3): setting nodatasum [ 42.454572][ T4567] BTRFS info (device loop3): force zlib compression, level 3 [ 42.457238][ T4567] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 42.459028][ T4567] BTRFS info (device loop3): use lzo compression, level 0 [ 42.464024][ T4567] BTRFS info (device loop3): turning on flush-on-commit [ 42.465192][ T4567] BTRFS info (device loop3): enabling auto defrag [ 42.466492][ T4567] BTRFS info (device loop3): use no compression [ 42.467677][ T4567] BTRFS info (device loop3): using free space tree [ 42.900293][ T4339] Bluetooth: hci3: command 0x041b tx timeout [ 42.905953][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 42.932128][ T4567] BTRFS info (device loop3): enabling ssd optimizations [ 43.020914][ T4609] sctp: [Deprecated]: syz.0.54 (pid 4609) Use of int in max_burst socket option deprecated. [ 43.020914][ T4609] Use struct sctp_assoc_value instead [ 43.066907][ T4608] device syzkaller0 entered promiscuous mode [ 43.140217][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 43.213411][ T4565] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 43.550018][ T4617] ceph: No mds server is up or the cluster is laggy [ 43.551648][ T4344] libceph: connect (1)[c::]:6789 error -101 [ 43.552792][ T4344] libceph: mon0 (1)[c::]:6789 connect error [ 43.914571][ T1518] libceph: connect (1)[c::]:6789 error -101 [ 43.915616][ T1518] libceph: mon0 (1)[c::]:6789 connect error [ 44.416344][ T4334] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 44.813864][ T4638] device syzkaller0 entered promiscuous mode [ 44.949350][ T4641] loop1: detected capacity change from 0 to 2048 [ 44.970734][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 44.970744][ T4339] Bluetooth: hci3: command 0x040f tx timeout [ 45.011305][ T4642] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 45.058575][ T4644] netlink: 'syz.2.62': attribute type 10 has an invalid length. [ 45.156011][ T4644] team0 (unregistering): Port device team_slave_0 removed [ 45.165820][ T4644] team0 (unregistering): Port device team_slave_1 removed [ 45.210240][ T4334] Bluetooth: hci1: command 0x041b tx timeout [ 45.408654][ T4657] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 46.015053][ T4669] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 46.437312][ T4687] binder_user_error: 1 callbacks suppressed [ 46.437321][ T4687] binder: 4684:4687 got transaction to invalid handle, 1 [ 46.439848][ T4687] binder: 4687:4684 cannot find target node [ 46.444082][ T4687] binder: 4684:4687 transaction call to 0:0 failed 11/29201/-22, size 0-0 line 3062 [ 46.447691][ T4687] binder: 4684:4687 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 46.450730][ T4686] loop4: detected capacity change from 0 to 2048 [ 46.474029][ T4687] binder: 4687 RLIMIT_NICE not set [ 46.490389][ T4332] Bluetooth: hci4: command 0x0409 tx timeout [ 46.494218][ T4693] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 46.498882][ T4694] binder: 4684:4694 got reply transaction with no transaction stack [ 46.501754][ T4694] binder: 4684:4694 transaction reply to 0:0 failed 12/29201/-71, size 0-0 line 2963 [ 46.503982][ T4694] binder: 4684:4694 BC_FREE_BUFFER u0000000020ffd000 no match [ 46.505337][ T4694] binder: 4684:4694 Acquire 1 refcount change on invalid ref 3 ret -22 [ 46.518306][ T4694] binder: 4684:4694 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 46.519842][ T4694] binder: 4684:4694 BC_INCREFS_DONE u0000000000000001 no match [ 46.527333][ T4694] binder: 4684:4694 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 46.537470][ T4694] binder: 4684:4694 got transaction to context manager from process owning it [ 46.538958][ T4694] binder: 4684:4694 transaction async to 4684:0 failed 13/29201/-22, size 88-24 line 3051 [ 46.753104][ T4334] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 46.806090][ T4720] sctp: [Deprecated]: syz.4.81 (pid 4720) Use of int in max_burst socket option deprecated. [ 46.806090][ T4720] Use struct sctp_assoc_value instead [ 47.135584][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 47.259985][ T4718] loop0: detected capacity change from 0 to 32768 [ 47.274393][ T4718] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.85 (4718) [ 47.289416][ T4718] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 47.290151][ T4332] Bluetooth: hci1: command 0x040f tx timeout [ 47.291431][ T4718] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 47.298515][ T4718] BTRFS info (device loop0): setting nodatasum [ 47.299781][ T4718] BTRFS info (device loop0): force zlib compression, level 3 [ 47.317480][ T4718] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 47.339363][ T4718] BTRFS info (device loop0): use lzo compression, level 0 [ 47.351944][ T4718] BTRFS info (device loop0): turning on flush-on-commit [ 47.368537][ T4718] BTRFS info (device loop0): enabling auto defrag [ 47.380384][ T4718] BTRFS info (device loop0): use no compression [ 47.393572][ T4718] BTRFS info (device loop0): using free space tree [ 47.502834][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 47.504539][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 47.536199][ T4718] BTRFS info (device loop0): enabling ssd optimizations [ 47.654779][ T4749] capability: warning: `syz.3.89' uses 32-bit capabilities (legacy support in use) [ 48.084624][ T4718] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 48.261223][ T4759] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 48.437727][ T4334] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 48.482963][ T4776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 49.067131][ T4797] netlink: 'syz.1.107': attribute type 1 has an invalid length. [ 49.172829][ T4798] sctp: [Deprecated]: syz.2.104 (pid 4798) Use of int in max_burst socket option deprecated. [ 49.172829][ T4798] Use struct sctp_assoc_value instead [ 49.210341][ T4334] Bluetooth: hci3: command 0x0409 tx timeout [ 50.223848][ T4334] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 50.337669][ T4809] sctp: [Deprecated]: syz.1.111 (pid 4809) Use of int in max_burst socket option deprecated. [ 50.337669][ T4809] Use struct sctp_assoc_value instead [ 51.198086][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 51.305486][ T4818] device syzkaller0 entered promiscuous mode [ 51.545398][ T4828] netlink: 'syz.3.120': attribute type 1 has an invalid length. [ 51.626755][ T4835] binder: 4834:4835 got transaction to invalid handle, 1 [ 51.630032][ T4835] binder: 4835:4834 cannot find target node [ 51.632363][ T4835] binder: 4834:4835 transaction call to 0:0 failed 17/29201/-22, size 0-0 line 3062 [ 51.635997][ T4835] binder: 4834:4835 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 51.638506][ T4835] binder: 4835 RLIMIT_NICE not set [ 51.687183][ T4840] binder: 4834:4840 got reply transaction with no transaction stack [ 51.688704][ T4840] binder: 4834:4840 transaction reply to 0:0 failed 18/29201/-71, size 0-0 line 2963 [ 51.691217][ T4840] binder: 4834:4840 BC_FREE_BUFFER u0000000020ffd000 no match [ 51.692410][ T4840] binder: 4834:4840 Acquire 1 refcount change on invalid ref 3 ret -22 [ 51.693815][ T4840] binder: 4834:4840 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 51.695280][ T4840] binder: 4834:4840 BC_INCREFS_DONE u0000000000000001 no match [ 51.696572][ T4840] binder: 4834:4840 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 51.697880][ T4840] binder: 4834:4840 got transaction to context manager from process owning it [ 51.699332][ T4840] binder: 4834:4840 transaction async to 4834:0 failed 19/29201/-22, size 88-24 line 3051 [ 51.829618][ T4850] netlink: 'syz.0.129': attribute type 1 has an invalid length. [ 51.841893][ T4850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.938267][ T4854] sctp: [Deprecated]: syz.3.128 (pid 4854) Use of int in max_burst socket option deprecated. [ 51.938267][ T4854] Use struct sctp_assoc_value instead [ 52.960093][ C0] sched: RT throttling activated [ 52.985595][ T4439] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.986835][ T4439] binder: undelivered TRANSACTION_ERROR: 29201 [ 53.218518][ T4872] sctp: [Deprecated]: syz.0.136 (pid 4872) Use of int in max_burst socket option deprecated. [ 53.218518][ T4872] Use struct sctp_assoc_value instead [ 53.339411][ T4876] sctp: [Deprecated]: syz.4.137 (pid 4876) Use of int in max_burst socket option deprecated. [ 53.339411][ T4876] Use struct sctp_assoc_value instead [ 53.362733][ T4875] device syzkaller0 entered promiscuous mode [ 53.785921][ T4884] loop2: detected capacity change from 0 to 2048 [ 53.808924][ T4334] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 53.814869][ T4334] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 53.817700][ T4887] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.370160][ T4915] sctp: [Deprecated]: syz.0.149 (pid 4915) Use of int in max_burst socket option deprecated. [ 54.370160][ T4915] Use struct sctp_assoc_value instead [ 55.512013][ T4925] netlink: 'syz.2.154': attribute type 1 has an invalid length. [ 55.553583][ T4925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.765005][ T4933] sctp: [Deprecated]: syz.1.156 (pid 4933) Use of int in max_burst socket option deprecated. [ 55.765005][ T4933] Use struct sctp_assoc_value instead [ 55.780855][ T4936] binder: 4936:4935 cannot find target node [ 55.782067][ T4936] binder: 4935:4936 transaction call to 0:0 failed 23/29201/-22, size 0-0 line 3062 [ 55.836907][ T4937] binder: 4935:4937 transaction reply to 0:0 failed 24/29201/-71, size 0-0 line 2963 [ 55.838797][ T4937] binder: 4935:4937 transaction async to 4935:0 failed 25/29201/-22, size 88-24 line 3051 [ 55.850369][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 56.727588][ T4334] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 56.747500][ T4332] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 57.019983][ T4977] sctp: [Deprecated]: syz.4.172 (pid 4977) Use of int in max_burst socket option deprecated. [ 57.019983][ T4977] Use struct sctp_assoc_value instead [ 57.039375][ T4979] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 57.056942][ T4332] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 57.096333][ T4985] Zero length message leads to an empty skb [ 57.166241][ T4986] sctp: [Deprecated]: syz.0.174 (pid 4986) Use of int in max_burst socket option deprecated. [ 57.166241][ T4986] Use struct sctp_assoc_value instead [ 57.269103][ T4332] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 57.274062][ T4334] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 58.740783][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 58.908864][ T5037] sctp: [Deprecated]: syz.1.192 (pid 5037) Use of int in max_burst socket option deprecated. [ 58.908864][ T5037] Use struct sctp_assoc_value instead [ 58.916362][ T5041] loop2: detected capacity change from 0 to 2048 [ 59.102067][ T5043] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.206572][ T5056] binder: 5054:5056 ioctl c0306201 0 returned -14 [ 59.225473][ T5056] binder_user_error: 10 callbacks suppressed [ 59.225481][ T5056] binder: 5054:5056 got transaction to invalid handle, 1 [ 59.227850][ T5056] binder_debug: 2 callbacks suppressed [ 59.227861][ T5056] binder: 5056:5054 cannot find target node [ 59.233087][ T5056] binder: 5054:5056 transaction call to 0:0 failed 29/29201/-22, size 0-0 line 3062 [ 59.242836][ T5056] binder: 5054:5056 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 59.244129][ T4332] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 59.249690][ T5056] binder: 5056 RLIMIT_NICE not set [ 59.256367][ T4334] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 59.300857][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 59.307468][ T5062] binder: 5054:5062 got reply transaction with no transaction stack [ 59.310496][ T5062] binder: 5054:5062 transaction reply to 0:0 failed 30/29201/-71, size 0-0 line 2963 [ 59.335149][ T5062] binder: 5054:5062 BC_FREE_BUFFER u0000000020ffd000 no match [ 59.351348][ T5062] binder: 5054:5062 Acquire 1 refcount change on invalid ref 3 ret -22 [ 59.366605][ T5062] binder: 5054:5062 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 59.370606][ T5062] binder: 5054:5062 BC_INCREFS_DONE u0000000000000001 no match [ 59.377534][ T5062] binder: 5054:5062 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 59.380415][ T5062] binder: 5054:5062 got transaction to context manager from process owning it [ 59.393276][ T5062] binder: 5054:5062 transaction async to 5054:0 failed 31/29201/-22, size 88-24 line 3051 [ 59.705303][ T4332] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 59.705982][ T4334] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 60.154998][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.156438][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 60.189584][ T5086] loop2: detected capacity change from 0 to 2048 [ 60.205719][ T5087] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.317700][ T5093] device syzkaller0 entered promiscuous mode [ 60.941066][ T4332] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 60.944807][ T4334] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 60.948372][ T4334] CPU: 0 PID: 4334 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 60.949789][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 60.951742][ T4334] Workqueue: hci4 hci_rx_work [ 60.952688][ T4334] Call trace: [ 60.953259][ T4334] dump_backtrace+0x1c4/0x1f0 [ 60.954069][ T4334] show_stack+0x2c/0x3c [ 60.954832][ T4334] __dump_stack+0x30/0x40 [ 60.955596][ T4334] dump_stack_lvl+0xf4/0x15c [ 60.956423][ T4334] dump_stack+0x1c/0x5c [ 60.957156][ T4334] sysfs_create_dir_ns+0x244/0x264 [ 60.958112][ T4334] kobject_add_internal+0x5a8/0xb18 [ 60.959001][ T4334] kobject_add+0x144/0x20c [ 60.959811][ T4334] device_add+0x3dc/0xe4c [ 60.960576][ T4334] hci_conn_add_sysfs+0xb8/0x1bc [ 60.961433][ T4334] hci_conn_complete_evt+0x7b8/0x10b4 [ 60.962400][ T4334] hci_event_packet+0x698/0xe60 [ 60.963239][ T4334] hci_rx_work+0x320/0xa94 [ 60.964003][ T4334] process_one_work+0x7e4/0x13bc [ 60.964841][ T4334] worker_thread+0x8cc/0xfe8 [ 60.965655][ T4334] kthread+0x254/0x2e0 [ 60.966367][ T4334] ret_from_fork+0x10/0x20 [ 60.968486][ T4334] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 60.970880][ T4334] Bluetooth: hci4: failed to register connection device [ 61.301933][ T4332] Bluetooth: hci3: command 0x0409 tx timeout [ 61.827720][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 62.122858][ T4332] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10 [ 62.123775][ T4332] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 62.958048][ T5182] fuse: Bad value for 'fd' [ 62.964138][ T5182] ======================================================= [ 62.964138][ T5182] WARNING: The mand mount option has been deprecated and [ 62.964138][ T5182] and is ignored by this kernel. Remove the mand [ 62.964138][ T5182] option from the mount to silence this warning. [ 62.964138][ T5182] ======================================================= [ 62.980310][ T4332] Bluetooth: hci4: command 0x0409 tx timeout [ 62.989003][ T5184] loop2: detected capacity change from 0 to 128 [ 62.991438][ T5182] capability: warning: `syz.1.242' uses deprecated v2 capabilities in a way that may be insecure [ 63.021043][ T5184] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.100620][ T5192] UBIFS error (pid: 5192): cannot open "./file1", error -22 [ 63.113549][ T5192] fuse: Bad value for 'user_id' [ 63.688819][ T5209] loop2: detected capacity change from 0 to 32768 [ 63.714446][ T5209] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.251 (5209) [ 63.733217][ T5209] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 63.735233][ T5209] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 63.736717][ T5209] BTRFS info (device loop2): setting nodatasum [ 63.737881][ T5209] BTRFS info (device loop2): force zlib compression, level 3 [ 63.739138][ T5209] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 63.753331][ T5209] BTRFS info (device loop2): use lzo compression, level 0 [ 63.759127][ T5209] BTRFS info (device loop2): turning on flush-on-commit [ 64.096812][ T5209] BTRFS info (device loop2): enabling auto defrag [ 64.108684][ T5209] BTRFS info (device loop2): use no compression [ 64.116194][ T5209] BTRFS info (device loop2): using free space tree [ 64.181348][ T4332] Bluetooth: hci2: command 0x0409 tx timeout [ 64.187916][ T5209] BTRFS info (device loop2): enabling ssd optimizations [ 64.631143][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.632640][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.775212][ T5261] UBIFS error (pid: 5261): cannot open "./file1", error -22 [ 64.778501][ T5261] fuse: Bad value for 'user_id' [ 64.846613][ T5209] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 65.060193][ T4334] Bluetooth: hci4: command 0x041b tx timeout [ 65.562560][ T5286] overlayfs: failed to clone upperpath [ 65.871829][ T5304] overlayfs: failed to clone upperpath [ 65.878750][ T5305] UBIFS error (pid: 5305): cannot open "./file1", error -22 [ 66.409279][ T5332] netlink: 'syz.4.286': attribute type 13 has an invalid length. [ 66.506966][ T5343] UBIFS error (pid: 5343): cannot open "./file1", error -22 [ 66.917710][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 66.923434][ T5360] device veth0_macvtap left promiscuous mode [ 67.074146][ T5372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.300'. [ 67.129755][ T4332] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 67.130315][ T4332] Bluetooth: hci4: command 0x040f tx timeout [ 67.132869][ T4334] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 67.135171][ T4334] CPU: 1 PID: 4334 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 67.136392][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 67.138152][ T4334] Workqueue: hci0 hci_rx_work [ 67.138953][ T4334] Call trace: [ 67.139493][ T4334] dump_backtrace+0x1c4/0x1f0 [ 67.140291][ T4334] show_stack+0x2c/0x3c [ 67.141017][ T4334] __dump_stack+0x30/0x40 [ 67.141756][ T4334] dump_stack_lvl+0xf4/0x15c [ 67.142523][ T4334] dump_stack+0x1c/0x5c [ 67.143208][ T4334] sysfs_create_dir_ns+0x244/0x264 [ 67.144083][ T4334] kobject_add_internal+0x5a8/0xb18 [ 67.144988][ T4334] kobject_add+0x144/0x20c [ 67.145751][ T4334] device_add+0x3dc/0xe4c [ 67.146534][ T4334] hci_conn_add_sysfs+0xb8/0x1bc [ 67.147386][ T4334] hci_conn_complete_evt+0x7b8/0x10b4 [ 67.148318][ T4334] hci_event_packet+0x698/0xe60 [ 67.149116][ T4334] hci_rx_work+0x320/0xa94 [ 67.149878][ T4334] process_one_work+0x7e4/0x13bc [ 67.150725][ T4334] worker_thread+0x8cc/0xfe8 [ 67.151520][ T4334] kthread+0x254/0x2e0 [ 67.152246][ T4334] ret_from_fork+0x10/0x20 [ 67.154273][ T4334] kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 67.156517][ T4334] Bluetooth: hci0: failed to register connection device [ 67.191429][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 67.217928][ T4334] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 67.218438][ T4332] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 67.669297][ T5395] device vlan2 entered promiscuous mode [ 67.672721][ T5395] device bridge0 entered promiscuous mode [ 67.969027][ T4332] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 67.969193][ T5426] syz.4.319 (5426): attempted to duplicate a private mapping with mremap. This is not supported. [ 67.974438][ T4334] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 68.676290][ T5448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.326'. [ 68.694970][ T27] audit: type=1326 audit(68.678:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.3.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97579228 code=0x7ffc0000 [ 68.701124][ T27] audit: type=1326 audit(68.678:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.3.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff97579228 code=0x7ffc0000 [ 68.705313][ T27] audit: type=1326 audit(68.678:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.3.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97579228 code=0x7ffc0000 [ 68.709282][ T27] audit: type=1326 audit(68.678:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.3.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff97579228 code=0x7ffc0000 [ 68.714208][ T27] audit: type=1326 audit(68.678:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.3.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97579228 code=0x7ffc0000 [ 68.718572][ T27] audit: type=1326 audit(68.688:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz.3.323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97579228 code=0x7ffc0000 [ 68.748261][ T5453] fuse: Bad value for 'user_id' [ 68.952584][ T5477] overlayfs: failed to clone upperpath [ 68.972367][ T5479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.337'. [ 69.048119][ T5483] syz.4.339 uses obsolete (PF_INET,SOCK_PACKET) [ 69.130746][ T4334] Bluetooth: hci0: command 0x0409 tx timeout [ 69.172578][ T5494] netlink: 'syz.2.344': attribute type 10 has an invalid length. [ 69.332516][ T5511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.351'. [ 69.339257][ T5510] fuse: Bad value for 'fd' [ 69.438843][ T5517] netlink: 84 bytes leftover after parsing attributes in process `syz.3.354'. [ 69.622120][ T14] cfg80211: failed to load regulatory.db [ 69.701440][ T5539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.363'. [ 70.223215][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 70.456790][ T5582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.661282][ T5589] MTD: Couldn't look up './dev/mtdblock0': -2 [ 70.665017][ T5589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.382'. [ 70.970801][ T4332] Bluetooth: hci4: command 0x0409 tx timeout [ 71.210181][ T4334] Bluetooth: hci0: command 0x041b tx timeout [ 71.223571][ T5620] tmpfs: Bad value for 'mpol' [ 71.255938][ T5623] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 71.511773][ T5635] fuse: Bad value for 'fd' [ 71.586367][ T5643] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 71.588236][ T5644] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 71.596033][ T5627] gfs2: gfs2 mount does not exist [ 71.673393][ T5652] UBIFS error (pid: 5652): cannot open "./file1", error -22 [ 72.199702][ T5694] overlayfs: failed to clone upperpath [ 72.225237][ T5696] __nla_validate_parse: 4 callbacks suppressed [ 72.225249][ T5696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'. [ 72.271890][ T5698] UBIFS error (pid: 5698): cannot open "./file1", error -22 [ 72.378679][ T5712] overlayfs: failed to clone upperpath [ 72.500846][ T5721] fuse: Bad value for 'fd' [ 72.930349][ T4332] Bluetooth: hci3: unexpected event 0x0b length: 12 > 11 [ 73.010797][ T5734] UBIFS error (pid: 5734): cannot open "./file1", error -22 [ 73.290177][ T4332] Bluetooth: hci0: command 0x040f tx timeout [ 73.304783][ T5738] overlayfs: failed to clone upperpath [ 73.372721][ T5736] gfs2: gfs2 mount does not exist [ 73.693724][ T5766] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 74.397835][ T5779] gfs2: gfs2 mount does not exist [ 74.401441][ T4332] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 74.458816][ T5793] netlink: 'syz.4.458': attribute type 1 has an invalid length. [ 74.845413][ T5822] nfs: Unknown parameter 'mountĘport' [ 75.064650][ T27] audit: type=1326 audit(75.048:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.468" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4379228 code=0x7ffc0000 [ 75.068806][ T27] audit: type=1326 audit(75.048:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.468" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb4379228 code=0x7ffc0000 [ 75.108716][ T27] audit: type=1326 audit(75.048:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.468" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4379228 code=0x7ffc0000 [ 75.207575][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'. [ 75.371005][ T4332] Bluetooth: hci0: command 0x0409 tx timeout [ 75.533887][ T5841] fuse: Unknown parameter '' [ 75.586873][ T27] audit: type=1326 audit(75.568:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.476" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a779228 code=0x7ffc0000 [ 75.595088][ T27] audit: type=1326 audit(75.568:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.476" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9a75c0ec code=0x7ffc0000 [ 75.608463][ T27] audit: type=1326 audit(75.568:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.476" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9a75c0ec code=0x7ffc0000 [ 75.627866][ T27] audit: type=1326 audit(75.568:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.476" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9a75c0ec code=0x7ffc0000 [ 75.635594][ T5851] TCP: tcp_parse_options: Illegal window scaling value 155 > 14 received [ 75.642644][ T27] audit: type=1326 audit(75.568:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.1.476" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9a779228 code=0x7ffc0000 [ 76.156682][ T4332] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 76.157264][ T4334] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 76.207738][ T5870] fuse: Bad value for 'fd' [ 76.440873][ T5884] netlink: 'syz.2.492': attribute type 1 has an invalid length. [ 76.458003][ T5884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.529774][ T4334] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 76.599964][ T4332] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 77.317299][ T5930] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 77.335088][ T5930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.480962][ T4334] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 77.482847][ T4332] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 77.487114][ T5937] netlink: 'syz.3.518': attribute type 1 has an invalid length. [ 77.520048][ T5937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.559389][ T5937] bond1: (slave geneve2): making interface the new active one [ 77.567406][ T5937] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 77.568953][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 77.726095][ T5944] nfs: Unknown parameter 'mountĘport' [ 78.170173][ T4332] Bluetooth: hci3: command 0x0409 tx timeout [ 78.235118][ T5964] sctp: [Deprecated]: syz.3.515 (pid 5964) Use of int in max_burst socket option deprecated. [ 78.235118][ T5964] Use struct sctp_assoc_value instead [ 78.570235][ T4334] Bluetooth: hci4: command 0x0409 tx timeout [ 79.257665][ T4917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.530186][ T4334] Bluetooth: hci0: command 0x0409 tx timeout [ 79.804929][ T6004] nfs: Unknown parameter 'mountĘport' [ 79.934792][ T6013] overlayfs: failed to clone upperpath [ 79.964776][ T6015] netlink: 300 bytes leftover after parsing attributes in process `syz.3.534'. [ 80.178060][ T6021] sctp: [Deprecated]: syz.3.536 (pid 6021) Use of int in max_burst socket option deprecated. [ 80.178060][ T6021] Use struct sctp_assoc_value instead [ 81.180243][ T6041] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 81.211051][ T6044] overlayfs: failed to clone upperpath [ 81.214412][ T6041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 81.426598][ T6066] UBIFS error (pid: 6066): cannot open "(null)", error -22 [ 81.683517][ T6069] nfs: Unknown parameter 'mountĘport' [ 82.023622][ T6078] sctp: [Deprecated]: syz.4.557 (pid 6078) Use of int in max_burst socket option deprecated. [ 82.023622][ T6078] Use struct sctp_assoc_value instead [ 83.274025][ T6083] ip_tables: iptables: counters copy to user failed while replacing table [ 84.079534][ T6111] UBIFS error (pid: 6111): cannot open "(null)", error -22 [ 84.168321][ T6113] netlink: 'syz.4.570': attribute type 5 has an invalid length. [ 84.247256][ T6121] wlan0 speed is unknown, defaulting to 1000 [ 84.248526][ T6121] wlan0 speed is unknown, defaulting to 1000 [ 84.250433][ T6121] wlan0 speed is unknown, defaulting to 1000 [ 84.253376][ T6121] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.256841][ T6121] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 84.300059][ T6121] wlan0 speed is unknown, defaulting to 1000 [ 84.301966][ T6121] wlan0 speed is unknown, defaulting to 1000 [ 84.303288][ T6121] wlan0 speed is unknown, defaulting to 1000 [ 84.304964][ T6121] wlan0 speed is unknown, defaulting to 1000 [ 84.306279][ T6121] wlan0 speed is unknown, defaulting to 1000 [ 84.317508][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 84.679534][ T6130] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 84.704727][ T6130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.718648][ T6130] bond1: (slave geneve2): making interface the new active one [ 84.781341][ T6133] sctp: [Deprecated]: syz.3.574 (pid 6133) Use of int in max_burst socket option deprecated. [ 84.781341][ T6133] Use struct sctp_assoc_value instead [ 85.192215][ T6130] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 85.194492][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 85.892468][ T6135] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 85.895208][ T6135] fuse: Bad value for 'fd' [ 86.151764][ T6155] netlink: 104 bytes leftover after parsing attributes in process `syz.1.586'. [ 86.339536][ T6157] "syz.3.583" (6157) uses obsolete ecb(arc4) skcipher [ 86.580740][ T6166] wlan0 speed is unknown, defaulting to 1000 [ 86.582023][ T6166] wlan0 speed is unknown, defaulting to 1000 [ 86.583253][ T6166] wlan0 speed is unknown, defaulting to 1000 [ 86.586247][ T6166] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 86.592239][ T6166] wlan0 speed is unknown, defaulting to 1000 [ 86.593798][ T6166] wlan0 speed is unknown, defaulting to 1000 [ 86.595213][ T6166] wlan0 speed is unknown, defaulting to 1000 [ 86.597482][ T6166] wlan0 speed is unknown, defaulting to 1000 [ 86.599215][ T6166] wlan0 speed is unknown, defaulting to 1000 [ 86.611995][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 87.208405][ T6179] sctp: [Deprecated]: syz.0.590 (pid 6179) Use of int in max_burst socket option deprecated. [ 87.208405][ T6179] Use struct sctp_assoc_value instead [ 88.437640][ T6194] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 88.462220][ T6194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.773234][ T6214] siw: device registration error -23 [ 88.775139][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 88.880234][ T6215] sctp: [Deprecated]: syz.2.607 (pid 6215) Use of int in max_burst socket option deprecated. [ 88.880234][ T6215] Use struct sctp_assoc_value instead [ 90.637426][ T6227] netlink: 'syz.2.613': attribute type 1 has an invalid length. [ 90.673191][ T6227] 8021q: adding VLAN 0 to HW filter on device bond3 [ 90.714458][ T6238] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 90.723710][ T6205] wlan0 speed is unknown, defaulting to 1000 [ 90.847006][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 90.922041][ T6257] fuse: Invalid user_id [ 91.106947][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 91.108934][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.625'. [ 91.112966][ T6269] netlink: 'syz.3.627': attribute type 1 has an invalid length. [ 91.121262][ T6269] 8021q: adding VLAN 0 to HW filter on device bond3 [ 91.196169][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 91.284301][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 91.723506][ T6308] ipt_rpfilter: unknown options [ 91.893481][ T6329] netlink: 36 bytes leftover after parsing attributes in process `syz.4.650'. [ 92.537323][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.659'. [ 92.633624][ T6363] 9pnet_fd: Insufficient options for proto=fd [ 92.714962][ T6365] netlink: 36 bytes leftover after parsing attributes in process `syz.3.662'. [ 92.989014][ T6381] device veth1 entered promiscuous mode [ 92.992362][ T6381] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 93.089836][ T6398] overlayfs: failed to clone upperpath [ 93.258805][ T6420] overlayfs: failed to clone lowerpath [ 93.994732][ T6447] netlink: 'syz.2.688': attribute type 1 has an invalid length. [ 94.001984][ T6447] 8021q: adding VLAN 0 to HW filter on device bond5 [ 94.565400][ T6473] netlink: 'syz.0.700': attribute type 1 has an invalid length. [ 94.576947][ T6473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.227928][ T4334] Bluetooth: hci1: command 0x2016 tx timeout [ 95.979255][ T6509] overlayfs: failed to clone lowerpath [ 96.298548][ T6523] sctp: [Deprecated]: syz.0.712 (pid 6523) Use of int in max_burst socket option deprecated. [ 96.298548][ T6523] Use struct sctp_assoc_value instead [ 96.301623][ T6522] fuse: Bad value for 'fd' [ 96.723954][ T6534] overlayfs: failed to clone upperpath [ 96.727730][ T6534] overlayfs: failed to clone upperpath [ 96.839426][ T6541] tipc: Started in network mode [ 96.848382][ T6541] tipc: Node identity ac1414aa, cluster identity 4711 [ 96.852507][ T6541] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 96.860386][ T6541] tipc: Enabled bearer , priority 10 [ 96.991260][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 97.130901][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 97.257570][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.729'. [ 97.270242][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 97.317984][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 97.410208][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 97.550198][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 97.557456][ T6585] netlink: 64 bytes leftover after parsing attributes in process `syz.4.737'. [ 97.700791][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 97.840479][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 97.981946][ T5270] tipc: Node number set to 2886997162 [ 98.086682][ T6599] overlayfs: failed to clone upperpath [ 98.120273][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 98.154210][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 98.175313][ T6606] netlink: 'syz.4.745': attribute type 5 has an invalid length. [ 98.212742][ T6612] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 98.214406][ T6612] overlayfs: missing 'lowerdir' [ 98.267194][ T6614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.390229][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 98.920174][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 99.151821][ T6654] fuse: Bad value for 'fd' [ 99.159480][ T6654] netlink: 64 bytes leftover after parsing attributes in process `syz.0.763'. [ 99.176937][ T6656] netlink: 'syz.2.764': attribute type 1 has an invalid length. [ 99.265185][ T6656] 8021q: adding VLAN 0 to HW filter on device bond6 [ 99.272586][ T6661] netlink: 44 bytes leftover after parsing attributes in process `syz.2.764'. [ 99.940175][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 99.989998][ T6696] sctp: [Deprecated]: syz.3.769 (pid 6696) Use of int in max_burst socket option deprecated. [ 99.989998][ T6696] Use struct sctp_assoc_value instead [ 100.048549][ T6701] netlink: 'syz.1.777': attribute type 1 has an invalid length. [ 100.074450][ T6701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.076412][ T6682] netlink: 36 bytes leftover after parsing attributes in process `syz.2.774'. [ 100.089546][ T6701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.777'. [ 100.198123][ T6711] wlan0 speed is unknown, defaulting to 1000 [ 100.340053][ T6732] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 100.358022][ T6732] netlink: 'syz.0.789': attribute type 2 has an invalid length. [ 100.483517][ T6736] overlayfs: failed to clone upperpath [ 100.889502][ T6743] overlayfs: missing 'lowerdir' [ 100.970319][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 102.017050][ T6781] ip_tables: iptables: counters copy to user failed while replacing table [ 102.120820][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 102.319836][ T6798] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 102.326711][ T6798] netlink: 'syz.1.811': attribute type 2 has an invalid length. [ 102.703894][ T6825] overlayfs: failed to clone upperpath [ 102.987608][ T6841] overlayfs: missing 'lowerdir' [ 103.152657][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 103.575204][ T6843] netlink: 100 bytes leftover after parsing attributes in process `syz.2.819'. [ 104.170196][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 104.298340][ T6862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.825'. [ 104.385770][ T6872] rdma_rxe: rxe creation allowed on top of a real device only [ 104.664380][ T6892] 9pnet_fd: Insufficient options for proto=fd [ 104.972919][ T6895] device geneve1 entered promiscuous mode [ 105.212042][ T6903] overlayfs: missing 'lowerdir' [ 105.234350][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 106.250188][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 107.290182][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 108.330195][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 109.370182][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 110.420177][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 111.450180][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 112.500213][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 113.530179][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 114.570191][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 115.610193][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 116.660186][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 117.690183][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 118.730185][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 119.780173][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 120.810194][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 121.850212][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 122.900174][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 123.940167][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 124.980175][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.930586][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.931634][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.010175][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 127.050196][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 128.100948][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 129.130189][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 130.170231][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 131.220176][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.250185][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.434815][ T6953] tipc: Enabling of bearer rejected, failed to enable media [ 132.447145][ T6959] team0: Device ipvlan3 failed to register rx_handler [ 132.772800][ T6961] netlink: 'syz.0.846': attribute type 1 has an invalid length. [ 132.777907][ T6961] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.875825][ T6972] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 132.916311][ T6972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.929861][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 133.300211][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 133.361106][ T6968] overlayfs: failed to clone upperpath [ 133.734695][ T7001] overlayfs: missing 'lowerdir' [ 134.337295][ T7008] sctp: [Deprecated]: syz.0.861 (pid 7008) Use of int in max_burst socket option deprecated. [ 134.337295][ T7008] Use struct sctp_assoc_value instead [ 134.371570][ T7010] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 134.393334][ T7010] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.522236][ T7014] netlink: 'syz.3.862': attribute type 1 has an invalid length. [ 134.542320][ T7014] 8021q: adding VLAN 0 to HW filter on device bond5 [ 134.552768][ T7014] netlink: 44 bytes leftover after parsing attributes in process `syz.3.862'. [ 134.763967][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 134.797677][ T7024] netlink: 'syz.3.865': attribute type 1 has an invalid length. [ 134.816398][ T7024] 8021q: adding VLAN 0 to HW filter on device bond6 [ 134.840755][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 135.662284][ T7047] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 135.669502][ T7047] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.699262][ T7031] overlayfs: failed to clone upperpath [ 135.707171][ T7052] netlink: 'syz.1.876': attribute type 1 has an invalid length. [ 135.716350][ T7052] 8021q: adding VLAN 0 to HW filter on device bond5 [ 135.734640][ T7052] netlink: 44 bytes leftover after parsing attributes in process `syz.1.876'. [ 135.770233][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 135.782118][ T7058] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 135.822453][ T7058] 8021q: adding VLAN 0 to HW filter on device bond6 [ 135.839899][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 135.894653][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 136.858585][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 137.930262][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 138.534093][ T7092] overlayfs: failed to clone upperpath [ 138.970214][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.480497][ T7153] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.794343][ T7171] sctp: [Deprecated]: syz.0.914 (pid 7171) Use of int in max_burst socket option deprecated. [ 139.794343][ T7171] Use struct sctp_assoc_value instead [ 140.010229][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 141.050273][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 141.802892][ T7222] sctp: [Deprecated]: syz.3.935 (pid 7222) Use of int in max_burst socket option deprecated. [ 141.802892][ T7222] Use struct sctp_assoc_value instead [ 142.090190][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 142.818235][ T7231] bridge0: port 3(syz_tun) entered blocking state [ 142.819838][ T7231] bridge0: port 3(syz_tun) entered disabled state [ 143.130187][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 143.565383][ T7259] team0: No ports can be present during mode change [ 143.941441][ T7277] 9pnet_virtio: no channels available for device syz [ 144.180205][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 146.937354][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.4.975'. [ 147.282744][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 148.330280][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 149.019525][ T7383] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.038473][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.994'. [ 149.044213][ T7386] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 149.225183][ T7408] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 149.380189][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 150.850757][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 151.368611][ T7437] overlayfs: failed to clone upperpath [ 151.401477][ T7439] overlayfs: failed to clone upperpath [ 151.940336][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 152.573989][ T7471] netlink: 'syz.0.1026': attribute type 10 has an invalid length. [ 152.578126][ T7471] device syz_tun entered promiscuous mode [ 152.772060][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1027'. [ 152.906329][ T7481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1028'. [ 152.980271][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 153.019456][ T4334] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 153.190580][ T7498] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1034'. [ 153.194258][ T7503] netlink: 'syz.3.1037': attribute type 1 has an invalid length. [ 153.207724][ T7503] 8021q: adding VLAN 0 to HW filter on device bond7 [ 153.317108][ T7510] netlink: 'syz.3.1039': attribute type 16 has an invalid length. [ 153.318525][ T7510] netlink: 'syz.3.1039': attribute type 17 has an invalid length. [ 153.682923][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 153.684023][ T4334] Bluetooth: hci0: command 0x0406 tx timeout [ 153.685242][ T4334] Bluetooth: hci3: command 0x0406 tx timeout [ 153.686463][ T4334] Bluetooth: hci1: command 0x0406 tx timeout [ 153.687620][ T4334] Bluetooth: hci4: command 0x0406 tx timeout [ 153.873600][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 153.878727][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 153.892848][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 153.895635][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 153.898397][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 153.915505][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 153.920757][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 153.924770][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 153.927635][ T7510] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 153.997656][ T7521] netlink: 'syz.1.1042': attribute type 10 has an invalid length. [ 154.010226][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 154.014272][ T7521] device syz_tun entered promiscuous mode [ 154.296764][ T7530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1045'. [ 154.493930][ T7533] lo speed is unknown, defaulting to 1000 [ 154.495041][ T7533] lo speed is unknown, defaulting to 1000 [ 154.496204][ T7533] lo speed is unknown, defaulting to 1000 [ 154.522581][ T7533] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 154.539957][ T7533] lo speed is unknown, defaulting to 1000 [ 154.551762][ T7533] lo speed is unknown, defaulting to 1000 [ 154.553162][ T7533] lo speed is unknown, defaulting to 1000 [ 154.562535][ T7533] lo speed is unknown, defaulting to 1000 [ 154.582109][ T7533] lo speed is unknown, defaulting to 1000 [ 154.957615][ T7555] IPVS: sed: FWM 3 0x00000003 - no destination available [ 154.963727][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 155.050263][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 155.595949][ T7572] netlink: 'syz.2.1058': attribute type 19 has an invalid length. [ 155.987393][ T7580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1059'. [ 156.090348][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 156.098952][ T7588] netlink: 'syz.2.1061': attribute type 10 has an invalid length. [ 156.107748][ T7588] device syz_tun entered promiscuous mode [ 156.117558][ T7588] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 156.533693][ T7599] netlink: 'syz.3.1064': attribute type 2 has an invalid length. [ 156.544655][ T7597] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1062'. [ 156.877165][ T7618] fuse: Bad value for 'fd' [ 157.052122][ T7661] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1086'. [ 157.085915][ T7658] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1085'. [ 157.086257][ T7666] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1080'. [ 157.090489][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.095028][ T7658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.140222][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 157.700987][ T7716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1104'. [ 158.170162][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 158.461957][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 158.463509][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'. [ 158.812105][ T7757] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1705156586/1705156588 [ 158.815320][ T7755] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3614149282/3614149283 [ 158.818234][ T7755] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3614149282/3614149283 [ 158.972605][ T7766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1125'. [ 159.137846][ T7786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1128'. [ 159.165875][ T7789] netlink: 'syz.1.1132': attribute type 2 has an invalid length. [ 159.210204][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.023113][ T7834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1145'. [ 160.250293][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.578748][ T7873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1158'. [ 160.629267][ T7874] sctp: [Deprecated]: syz.2.1159 (pid 7874) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.629267][ T7874] Use struct sctp_sack_info instead [ 160.644394][ T7874] tc_dump_action: action bad kind [ 160.993409][ T7910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1170'. [ 161.519781][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 161.920797][ T7970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1185'. [ 162.002288][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1191'. [ 162.503729][ T7993] tipc: Failed to remove unknown binding: 66,0,0/0:1198161141/1198161142 [ 162.505269][ T7993] tipc: Failed to remove unknown binding: 66,0,0/0:1198161141/1198161142 [ 162.512106][ T8000] tipc: Failed to remove unknown binding: 66,0,0/0:2609472912/2609472914 [ 162.570182][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 162.666519][ T8020] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1202'. [ 162.932893][ T8034] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.330981][ T8084] netlink: 'syz.4.1230': attribute type 11 has an invalid length. [ 163.379538][ T8090] jffs2: notice: (8090) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 163.610207][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 164.660168][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 164.814217][ T8139] __nla_validate_parse: 2 callbacks suppressed [ 164.814227][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 164.877343][ T8142] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 165.003959][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 165.075298][ T8152] overlayfs: unrecognized mount option "fsmagic=0x000000000000007f" or missing value [ 165.176032][ T8162] overlayfs: failed to clone upperpath [ 165.439967][ T8159] overlayfs: failed to clone upperpath [ 165.458994][ T8164] overlayfs: failed to clone upperpath [ 165.700193][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 166.729938][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 166.731826][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 166.734319][ T8215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1275'. [ 166.735658][ T8217] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1276'. [ 166.741281][ T8215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1275'. [ 167.334773][ T8248] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 167.451951][ T8261] netlink: 'syz.0.1290': attribute type 3 has an invalid length. [ 167.453833][ T8261] netlink: 'syz.0.1290': attribute type 6 has an invalid length. [ 167.455365][ T8261] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1290'. [ 167.463587][ T8262] netlink: 'syz.0.1290': attribute type 3 has an invalid length. [ 167.465233][ T8262] netlink: 'syz.0.1290': attribute type 6 has an invalid length. [ 167.469944][ T8262] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1290'. [ 167.609677][ T8272] netlink: 'syz.0.1295': attribute type 7 has an invalid length. [ 167.710809][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 167.780177][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 167.936834][ T8284] overlayfs: failed to clone lowerpath [ 167.943686][ T8284] CIFS mount error: No usable UNC path provided in device string! [ 167.943686][ T8284] [ 167.945465][ T8284] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 168.195003][ T8285] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 168.417538][ T8325] overlayfs: failed to clone upperpath [ 168.740722][ T8328] scsi_nl_rcv_msg: discarding partial message [ 168.811140][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.874517][ T4332] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 169.040431][ T8372] afs: Unknown parameter 'dynƒO.×' [ 169.354806][ T8415] overlayfs: failed to resolve './sys': -2 [ 169.507051][ T8424] overlayfs: failed to clone upperpath [ 169.860235][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 169.905531][ T8439] xt_TCPMSS: Only works on TCP SYN packets [ 170.611418][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1361'. [ 170.633366][ T8490] tipc: MTU too low for tipc bearer [ 170.890158][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 171.324357][ T8529] fuse: Bad value for 'fd' [ 171.328280][ T5271] kernel write not supported for file /newroot/296/file0 (pid: 5271 comm: kworker/1:12) [ 171.535119][ T8548] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1380'. [ 171.930222][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 171.958021][ T8564] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1386'. [ 171.959912][ T8564] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1386'. [ 171.964191][ T8564] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1386'. [ 172.255813][ T8581] fuse: Bad value for 'fd' [ 172.257253][ T8581] fuse: Bad value for 'fd' [ 172.414163][ T8597] syz_tun: Device is already in use. [ 172.629679][ T27] audit: type=1326 audit(172.608:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.1406" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4379228 code=0x7ffc0000 [ 172.634409][ T27] audit: type=1326 audit(172.608:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.1406" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4379228 code=0x7ffc0000 [ 172.638138][ T27] audit: type=1326 audit(172.608:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.1406" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb4379228 code=0x7ffc0000 [ 172.642132][ T27] audit: type=1326 audit(172.608:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.1406" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4379228 code=0x7ffc0000 [ 172.645992][ T27] audit: type=1326 audit(172.608:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.2.1406" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4379228 code=0x7ffc0000 [ 172.968153][ T8632] fuse: Bad value for 'fd' [ 172.970217][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.914548][ T8640] 9pnet_fd: Insufficient options for proto=fd [ 174.010231][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 174.134217][ T8699] fuse: Bad value for 'fd' [ 174.286812][ T8707] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4329] was attempted by ""[8707] [ 174.566741][ T8719] x_tables: duplicate underflow at hook 2 [ 175.050257][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 175.429602][ T8771] overlayfs: failed to clone upperpath [ 175.619173][ T8790] overlayfs: failed to clone upperpath [ 175.647658][ T8790] fuse: Bad value for 'fd' [ 175.658389][ T8791] fuse: Bad value for 'fd' [ 175.813963][ T8800] syz_tun: Device is already in use. [ 175.868304][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1470'. [ 175.994531][ T8809] sctp: [Deprecated]: syz.2.1473 (pid 8809) Use of int in max_burst socket option. [ 175.994531][ T8809] Use struct sctp_assoc_value instead [ 176.100744][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 176.164087][ T27] audit: type=1326 audit(176.148:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.2.1477" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4379228 code=0x7ffc0000 [ 176.172884][ T27] audit: type=1326 audit(176.158:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.2.1477" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4379228 code=0x7ffc0000 [ 176.178119][ T27] audit: type=1326 audit(176.158:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.2.1477" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb4379228 code=0x7ffc0000 [ 176.203078][ T27] audit: type=1326 audit(176.158:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.2.1477" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4379228 code=0x7ffc0000 [ 176.206851][ T27] audit: type=1326 audit(176.158:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.2.1477" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4379228 code=0x7ffc0000 [ 176.319558][ T8826] fuse: Bad value for 'fd' [ 176.377986][ T8828] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4338] was attempted by ""[8828] [ 176.763084][ T8834] overlayfs: failed to clone upperpath [ 176.767761][ T8834] overlayfs: failed to clone upperpath [ 177.055566][ T8840] netlink: 'syz.4.1487': attribute type 10 has an invalid length. [ 177.065593][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.068177][ T8840] device bridge_slave_1 left promiscuous mode [ 177.069334][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.131503][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 177.314713][ T8859] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1492'. [ 177.356091][ T8865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1497'. [ 177.407779][ T8881] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1502'. [ 177.574719][ T8899] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1510'. [ 177.578854][ T8894] SET target dimension over the limit! [ 177.638749][ T8910] overlayfs: failed to clone upperpath [ 177.730516][ T8921] overlayfs: missing 'workdir' [ 178.170216][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.474980][ T8957] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1524'. [ 178.920651][ T8972] overlayfs: failed to clone upperpath [ 179.220178][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 179.489410][ T9012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1553'. [ 179.641088][ T9038] netlink: 'syz.0.1563': attribute type 1 has an invalid length. [ 179.647183][ T9038] netlink: 758 bytes leftover after parsing attributes in process `syz.0.1563'. [ 179.651312][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'. [ 179.783399][ T9040] overlayfs: failed to clone upperpath [ 180.260211][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.477912][ T9077] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.300179][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 181.752685][ T9108] netlink: 'syz.3.1588': attribute type 10 has an invalid length. [ 181.754758][ T9108] device veth0_macvtap left promiscuous mode [ 182.058230][ T9108] batman_adv: batadv0: Adding interface: macvtap0 [ 182.066789][ T9108] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.086316][ T9108] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 182.218837][ T9131] "syz.4.1593" (9131) uses obsolete ecb(arc4) skcipher [ 182.330280][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.932795][ T9165] libceph: secret too big 31 [ 183.010586][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1611'. [ 183.405548][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 183.512786][ T9195] netlink: 'syz.0.1619': attribute type 10 has an invalid length. [ 183.514945][ T9195] device veth0_macvtap left promiscuous mode [ 183.542184][ T9195] batman_adv: batadv0: Adding interface: macvtap0 [ 183.543266][ T9195] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.547443][ T9195] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 183.697528][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1622'. [ 184.042962][ T9242] UBIFS error (pid: 9242): cannot open "./file1", error -22 [ 184.410214][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 184.675590][ T9280] netlink: 'syz.4.1651': attribute type 10 has an invalid length. [ 184.775935][ T9290] xt_limit: Overflow, try lower: 2/2147483648 [ 184.808969][ T9293] gfs2: gfs2 mount does not exist [ 185.065133][ T9304] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1663'. [ 185.090580][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1664'. [ 185.450189][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 186.453938][ T9354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.500170][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 186.984961][ T9372] netlink: 572 bytes leftover after parsing attributes in process `syz.0.1687'. [ 186.986611][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1687'. [ 187.051329][ T9373] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1687'. [ 187.371046][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.372739][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.540173][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 188.133601][ T9396] wlan0 speed is unknown, defaulting to 1000 [ 188.135047][ T9396] lo speed is unknown, defaulting to 1000 [ 188.570188][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 188.908154][ T9418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.998394][ T9423] fuse: Bad value for 'fd' [ 189.054629][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1706'. [ 189.226379][ T9434] binder: Unknown parameter 'func' [ 189.286990][ T9441] syz_tun: Device is already in use. [ 189.461133][ T9455] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 189.620162][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 190.414408][ T9485] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1731'. [ 190.608027][ T9481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.660206][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 190.673415][ T9482] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.772469][ T9482] device bridge_slave_1 left promiscuous mode [ 190.773832][ T9482] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.930489][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 190.932398][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 190.965520][ T9510] mmap: syz.1.1739 (9510) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 191.082937][ T9521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1745'. [ 191.488504][ T9558] wlan0 speed is unknown, defaulting to 1000 [ 191.500898][ T9558] lo speed is unknown, defaulting to 1000 [ 191.690182][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 192.171573][ T9609] jffs2: notice: (9609) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 192.179174][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1773'. [ 192.226925][ T9609] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 192.228546][ T9609] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 192.232337][ T9613] netlink: 'syz.4.1775': attribute type 2 has an invalid length. [ 192.734935][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 193.295212][ T9642] wlan0 speed is unknown, defaulting to 1000 [ 193.296598][ T9642] lo speed is unknown, defaulting to 1000 [ 193.321491][ T9640] device batadv_slave_0 entered promiscuous mode [ 193.445817][ T9654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1791'. [ 193.770179][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 193.897165][ T9639] device batadv_slave_0 left promiscuous mode [ 194.071573][ T9666] netlink: 572 bytes leftover after parsing attributes in process `syz.1.1792'. [ 194.073197][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1792'. [ 194.237948][ T9667] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1792'. [ 194.810218][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 195.081758][ T9673] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1795'. [ 195.850180][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 195.868957][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 195.878622][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 195.887046][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 195.889333][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 195.976381][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 196.186034][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 196.188424][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 196.239605][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 196.292063][ T9744] overlayfs: failed to clone upperpath [ 196.295366][ T9747] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1825'. [ 196.368545][ T9760] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 196.520837][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 196.742939][ T9786] netlink: 'syz.1.1839': attribute type 21 has an invalid length. [ 196.744838][ T9786] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1839'. [ 196.900263][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 197.930212][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 198.205314][ T9848] overlayfs: failed to resolve './file2': -2 [ 198.217096][ T9848] 9pnet_fd: Insufficient options for proto=fd [ 198.263571][ T9852] syz_tun: Device is already in use. [ 198.400433][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'. [ 198.970201][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 199.557254][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1878'. [ 200.010193][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 200.163844][ T9931] netlink: 'syz.4.1893': attribute type 1 has an invalid length. [ 200.165359][ T9931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1893'. [ 200.659124][ T9948] overlayfs: missing 'workdir' [ 201.060227][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 201.238782][ T9981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1909'. [ 202.090202][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 202.917171][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1928'. [ 202.960074][ T27] audit: type=1326 audit(202.938:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.3.1928" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff97579228 code=0x0 [ 203.140199][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 203.523734][T10106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.180146][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 204.567338][T10185] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1982'. [ 204.569095][T10185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1982'. [ 204.728958][T10185] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1982'. [ 204.761812][T10194] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 204.763835][T10194] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 205.033801][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'. [ 205.210298][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 205.869069][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2000'. [ 206.069044][T10242] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1999'. [ 206.250171][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 206.670199][ T27] audit: type=1326 audit(206.648:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.2014" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a779228 code=0x7ffc0000 [ 206.675104][ T27] audit: type=1326 audit(206.658:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.2014" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a779228 code=0x7ffc0000 [ 206.680072][ T27] audit: type=1326 audit(206.658:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.2014" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a779228 code=0x7ffc0000 [ 206.691481][ T27] audit: type=1326 audit(206.658:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.2014" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a779228 code=0x7ffc0000 [ 206.705411][ T27] audit: type=1326 audit(206.658:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.2014" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=78 compat=0 ip=0xffff9a779228 code=0x7ffc0000 [ 206.714831][ T27] audit: type=1326 audit(206.658:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.2014" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a779228 code=0x7ffc0000 [ 206.721412][ T27] audit: type=1326 audit(206.658:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.2014" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a779228 code=0x7ffc0000 [ 206.725861][ T27] audit: type=1326 audit(206.668:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.2014" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9a779228 code=0x7ffc0000 [ 206.741804][ T27] audit: type=1326 audit(206.668:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.1.2014" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9a779228 code=0x7ffc0000 [ 207.218004][T10298] 8021q: VLANs not supported on ip6gre0 [ 207.300205][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 207.338245][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2026'. [ 207.438561][T10320] IPVS: length: 185 != 24 [ 208.330174][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.192909][T10395] 9pnet_fd: Insufficient options for proto=fd [ 209.197260][T10394] device dummy0 entered promiscuous mode [ 209.198733][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2061'. [ 209.200690][T10394] device dummy0 left promiscuous mode [ 209.254833][T10403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2066'. [ 209.262848][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2066'. [ 209.380196][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.693996][T10437] __nla_validate_parse: 1 callbacks suppressed [ 209.694006][T10437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2083'. [ 209.697011][T10437] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2083'. [ 209.910841][T10465] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2096'. [ 210.001902][T10485] jffs2: notice: (10485) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 210.010119][ C1] hrtimer: interrupt took 72621 ns [ 210.410221][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 232.120081][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [kworker/u4:5:4383] [ 232.121640][ C0] Modules linked in: [ 232.122306][ C0] irq event stamp: 1345582 [ 232.123026][ C0] hardirqs last enabled at (1345581): [] exit_to_kernel_mode+0xcc/0xfc [ 232.124735][ C0] hardirqs last disabled at (1345582): [] el1_interrupt+0x24/0x54 [ 232.126381][ C0] softirqs last enabled at (1341298): [] handle_softirqs+0xb1c/0xc90 [ 232.128031][ C0] softirqs last disabled at (1341221): [] __do_softirq+0x14/0x20 [ 232.129708][ C0] CPU: 0 PID: 4383 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 232.131016][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 232.132736][ C0] Workqueue: events_unbound toggle_allocation_gate [ 232.133837][ C0] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 232.135241][ C0] pc : smp_call_function_many_cond+0xeac/0x1404 [ 232.136298][ C0] lr : smp_call_function_many_cond+0xec4/0x1404 [ 232.137374][ C0] sp : ffff800020e17880 [ 232.138085][ C0] x29: ffff800020e178d0 x28: dfff800000000000 x27: 0000000000000000 [ 232.139471][ C0] x26: ffff80001537d000 x25: 0000000000000011 x24: ffff800015380f40 [ 232.140863][ C0] x23: ffff00019f3a83c0 x22: 1fffe00033e75078 x21: ffff00019f3cdc08 [ 232.142281][ C0] x20: 0000000000000001 x19: ffff80001557a720 x18: 1fffe00033e7277e [ 232.143648][ C0] x17: ffff80001537d000 x16: ffff800011b90080 x15: 0000000000000000 [ 232.144986][ C0] x14: 0000000000000001 x13: 1fffe00033e79b81 x12: 0000000000000000 [ 232.146366][ C0] x11: ff0080000840e2e8 x10: 0000000000000000 x9 : 0000000000000000 [ 232.147755][ C0] x8 : 0000000000000011 x7 : 0000000000000000 x6 : 0000000000000000 [ 232.149176][ C0] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff80000840e2dc [ 232.150567][ C0] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 232.151967][ C0] Call trace: [ 232.152503][ C0] smp_call_function_many_cond+0xeac/0x1404 [ 232.153561][ C0] kick_all_cpus_sync+0x40/0xa0 [ 232.154398][ C0] arch_jump_label_transform_apply+0x14/0x20 [ 232.155452][ C0] __jump_label_update+0x314/0x33c [ 232.156345][ C0] jump_label_update+0x310/0x3c4 [ 232.157199][ C0] static_key_enable_cpuslocked+0x11c/0x220 [ 232.158245][ C0] static_key_enable+0x24/0x38 [ 232.159094][ C0] toggle_allocation_gate+0xc8/0x42c [ 232.159999][ C0] process_one_work+0x7e4/0x13bc [ 232.160871][ C0] worker_thread+0x8cc/0xfe8 [ 232.161683][ C0] kthread+0x254/0x2e0 [ 232.162446][ C0] ret_from_fork+0x10/0x20 [ 232.163222][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 232.164371][ C0] CPU: 0 PID: 4383 Comm: kworker/u4:5 Tainted: G L syzkaller #0 [ 232.165931][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 232.167618][ C0] Workqueue: events_unbound toggle_allocation_gate [ 232.168768][ C0] Call trace: [ 232.169333][ C0] dump_backtrace+0x1c4/0x1f0 [ 232.170195][ C0] show_stack+0x2c/0x3c [ 232.170950][ C0] __dump_stack+0x30/0x40 [ 232.171741][ C0] dump_stack_lvl+0xf4/0x15c [ 232.172540][ C0] dump_stack+0x1c/0x5c [ 232.173266][ C0] panic+0x2f8/0x7ac [ 232.173953][ C0] softlockup_fn+0x0/0x120 [ 232.174735][ C0] __hrtimer_run_queues+0x414/0xc58 [ 232.175637][ C0] hrtimer_interrupt+0x294/0xb28 [ 232.176469][ C0] arch_timer_handler_virt+0x74/0x88 [ 232.177411][ C0] handle_percpu_devid_irq+0x17c/0x358 [ 232.178344][ C0] generic_handle_domain_irq+0xe4/0x154 [ 232.179329][ C0] gic_handle_irq+0x70/0x1d8 [ 232.180125][ C0] call_on_irq_stack+0x30/0x48 [ 232.180927][ C0] do_interrupt_handler+0xd4/0x138 [ 232.181806][ C0] el1_interrupt+0x34/0x54 [ 232.182583][ C0] el1h_64_irq_handler+0x18/0x24 [ 232.183440][ C0] el1h_64_irq+0x64/0x68 [ 232.184197][ C0] smp_call_function_many_cond+0xeac/0x1404 [ 232.185210][ C0] kick_all_cpus_sync+0x40/0xa0 [ 232.186069][ C0] arch_jump_label_transform_apply+0x14/0x20 [ 232.187101][ C0] __jump_label_update+0x314/0x33c [ 232.187980][ C0] jump_label_update+0x310/0x3c4 [ 232.188868][ C0] static_key_enable_cpuslocked+0x11c/0x220 [ 232.189888][ C0] static_key_enable+0x24/0x38 [ 232.190761][ C0] toggle_allocation_gate+0xc8/0x42c [ 232.191732][ C0] process_one_work+0x7e4/0x13bc [ 232.192649][ C0] worker_thread+0x8cc/0xfe8 [ 232.193473][ C0] kthread+0x254/0x2e0 [ 232.194188][ C0] ret_from_fork+0x10/0x20 [ 232.194947][ C0] SMP: stopping secondary CPUs [ 233.282093][ C0] SMP: failed to stop secondary CPUs 0-1 [ 233.283097][ C0] Kernel Offset: disabled [ 233.283790][ C0] CPU features: 0x0a0000,000f0097,a65bfea7 [ 233.284717][ C0] Memory Limit: none [ 233.295112][ C0] [ 233.295543][ C0] ================================ [ 233.296426][ C0] WARNING: inconsistent lock state [ 233.297282][ C0] syzkaller #0 Tainted: G L [ 233.298329][ C0] -------------------------------- [ 233.299224][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 233.300435][ C0] kworker/u4:5/4383 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 233.301597][ C0] ffff8000153c14b8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 233.303385][ C0] {HARDIRQ-ON-W} state was registered at: [ 233.304324][ C0] lock_acquire+0x20c/0x638 [ 233.305107][ C0] _raw_spin_lock+0x54/0x6c [ 233.305912][ C0] efi_call_rts+0x3c8/0x9d8 [ 233.306753][ C0] process_one_work+0x7e4/0x13bc [ 233.307609][ C0] worker_thread+0x8cc/0xfe8 [ 233.308388][ C0] kthread+0x254/0x2e0 [ 233.309101][ C0] ret_from_fork+0x10/0x20 [ 233.309851][ C0] irq event stamp: 1345582 [ 233.310601][ C0] hardirqs last enabled at (1345581): [] exit_to_kernel_mode+0xcc/0xfc [ 233.312192][ C0] hardirqs last disabled at (1345582): [] el1_interrupt+0x24/0x54 [ 233.313779][ C0] softirqs last enabled at (1341298): [] handle_softirqs+0xb1c/0xc90 [ 233.315456][ C0] softirqs last disabled at (1341221): [] __do_softirq+0x14/0x20 [ 233.317030][ C0] [ 233.317030][ C0] other info that might help us debug this: [ 233.318379][ C0] Possible unsafe locking scenario: [ 233.318379][ C0] [ 233.319656][ C0] CPU0 [ 233.320224][ C0] ---- [ 233.320818][ C0] lock(efi_rt_lock); [ 233.321559][ C0] [ 233.322165][ C0] lock(efi_rt_lock); [ 233.322916][ C0] [ 233.322916][ C0] *** DEADLOCK *** [ 233.322916][ C0] [ 233.324297][ C0] 6 locks held by kworker/u4:5/4383: [ 233.325246][ C0] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 233.327239][ C0] #1: ffff800020e17c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 233.329418][ C0] #2: ffff8000153f7090 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x1c/0x38 [ 233.331192][ C0] #3: ffff8000155e4ac8 (jump_label_mutex){+.+.}-{3:3}, at: static_key_enable_cpuslocked+0xc4/0x220 [ 233.333073][ C0] #4: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 233.334725][ C0] #5: ffff80001743eb88 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x188/0x828 [ 233.336417][ C0] [ 233.336417][ C0] stack backtrace: [ 233.337491][ C0] CPU: 0 PID: 4383 Comm: kworker/u4:5 Tainted: G L syzkaller #0 [ 233.338943][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 233.340707][ C0] Workqueue: events_unbound toggle_allocation_gate [ 233.341819][ C0] Call trace: [ 233.342377][ C0] dump_backtrace+0x1c4/0x1f0 [ 233.343141][ C0] show_stack+0x2c/0x3c [ 233.343831][ C0] __dump_stack+0x30/0x40 [ 233.344525][ C0] dump_stack_lvl+0xf4/0x15c [ 233.345249][ C0] dump_stack+0x1c/0x5c [ 233.345940][ C0] print_usage_bug+0x4c0/0x6dc [ 233.346738][ C0] mark_lock_irq+0x858/0xab8 [ 233.347532][ C0] mark_lock+0x224/0x320 [ 233.348288][ C0] __lock_acquire+0xa60/0x6634 [ 233.349116][ C0] lock_acquire+0x20c/0x638 [ 233.349853][ C0] _raw_spin_lock+0x54/0x6c [ 233.350636][ C0] virt_efi_set_variable_nonblocking+0x74/0x16c [ 233.351712][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 233.352627][ C0] efi_pstore_write+0x2a8/0x3b4 [ 233.353482][ C0] pstore_dump+0x5b8/0x828 [ 233.354208][ C0] kmsg_dump+0x174/0x264 [ 233.354919][ C0] panic+0x384/0x7ac [ 233.355566][ C0] softlockup_fn+0x0/0x120 [ 233.356346][ C0] __hrtimer_run_queues+0x414/0xc58 [ 233.357273][ C0] hrtimer_interrupt+0x294/0xb28 [ 233.358157][ C0] arch_timer_handler_virt+0x74/0x88 [ 233.359078][ C0] handle_percpu_devid_irq+0x17c/0x358 [ 233.360027][ C0] generic_handle_domain_irq+0xe4/0x154 [ 233.360998][ C0] gic_handle_irq+0x70/0x1d8 [ 233.361804][ C0] call_on_irq_stack+0x30/0x48 [ 233.362619][ C0] do_interrupt_handler+0xd4/0x138 [ 233.363468][ C0] el1_interrupt+0x34/0x54 [ 233.364250][ C0] el1h_64_irq_handler+0x18/0x24 [ 233.365076][ C0] el1h_64_irq+0x64/0x68 [ 233.365788][ C0] smp_call_function_many_cond+0xeac/0x1404 [ 233.366789][ C0] kick_all_cpus_sync+0x40/0xa0 [ 233.367625][ C0] arch_jump_label_transform_apply+0x14/0x20 [ 233.368670][ C0] __jump_label_update+0x314/0x33c [ 233.369498][ C0] jump_label_update+0x310/0x3c4 [ 233.370319][ C0] static_key_enable_cpuslocked+0x11c/0x220 [ 233.371318][ C0] static_key_enable+0x24/0x38 [ 233.372146][ C0] toggle_allocation_gate+0xc8/0x42c [ 233.373065][ C0] process_one_work+0x7e4/0x13bc [ 233.373916][ C0] worker_thread+0x8cc/0xfe8 [ 233.374729][ C0] kthread+0x254/0x2e0 [ 233.375438][ C0] ret_from_fork+0x10/0x20 [ 233.633794][ C0] Rebooting in 86400 seconds..