last executing test programs: 9.795028128s ago: executing program 2 (id=805): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_usb_connect(0x3, 0x2e, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x9e, 0xa3, 0xe4, 0x10, 0x2833, 0x211, 0x1b63, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x10, 0x5, 0x70, 0x1, "", [{{0x9, 0x4, 0x4b, 0x9, 0x0, 0xff, 0x1, 0x0, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x8001, 0xa}}]}}]}}]}}, 0x0) 9.356959367s ago: executing program 1 (id=806): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) futex(&(0x7f000000cffc)=0x840000, 0x5, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4ffffef) 8.995714361s ago: executing program 0 (id=809): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 8.043755074s ago: executing program 4 (id=810): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000002c0)={0xa0000013}) close(r4) 7.956976552s ago: executing program 0 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22040000}, 0x0) 7.076733661s ago: executing program 0 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 6.93283545s ago: executing program 4 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.893634108s ago: executing program 1 (id=815): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r6 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r6, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.089464875s ago: executing program 2 (id=817): mount(0x0, 0x0, 0x0, 0x810004, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa348100000086dd60910100001c11fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22001c90780203000000000000000071cd0c3c92"], 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 4.090458718s ago: executing program 2 (id=818): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.714541985s ago: executing program 4 (id=819): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1', 0x1) 3.646501529s ago: executing program 1 (id=822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r3, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r5, 0x30d38000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) 3.636094041s ago: executing program 2 (id=823): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x10040) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x5345) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000370400006700009c212206fb5788", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000000400120008000100", @ANYBLOB], 0x6c}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x3, 0x0) 3.191232541s ago: executing program 0 (id=825): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x20004450) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047459, 0x0) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 2.941674742s ago: executing program 2 (id=826): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'user:'}, 0x1b, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 2.695134842s ago: executing program 4 (id=827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd26, 0x1001, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20002000}, 0x24088004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.693868493s ago: executing program 3 (id=828): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0xfffffffe) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 2.641364303s ago: executing program 1 (id=829): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80), 0x3, 0x439, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x1fe000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x10142, 0x1) fanotify_init(0x20, 0x0) write$UHID_INPUT(r3, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) 2.602492701s ago: executing program 3 (id=830): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000540)=0x73, 0x4) recvmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)=""/200, 0xc8}, 0x80}], 0x1, 0x40010022, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r3, r2, 0xe}, 0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2.435238395s ago: executing program 3 (id=831): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x2, r1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r4 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) pwrite64(r4, &(0x7f0000000000)='q', 0x1, 0x111ffe) r6 = accept$alg(r5, 0x0, 0x0) sendfile(r6, r4, 0x0, 0x4000000003) 2.134898966s ago: executing program 3 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.13223156s ago: executing program 1 (id=833): ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x5080, 0x0, 0x0, 0x0, 0x0) unshare(0xe000000) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) 985.07551ms ago: executing program 3 (id=834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25dfdc80, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x10000000, 0x7, 0xffeffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x8004) 222.828305ms ago: executing program 1 (id=835): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[], 0x50) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) 207.831318ms ago: executing program 2 (id=836): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xe, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={[0x4]}, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) 124.615745ms ago: executing program 4 (id=837): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000406000008001b"], 0x30}}, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) socket(0x10, 0x3, 0x0) 66.167137ms ago: executing program 3 (id=838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x100}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 0 (id=839): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@noinit_itable}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000025c0)="$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") r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x5}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r2) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) kernel console output (not intermixed with test programs): T4334] device veth1_vlan entered promiscuous mode [ 32.503975][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.505669][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.507233][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.509898][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.514963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.516729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.525124][ T4328] device veth0_macvtap entered promiscuous mode [ 32.541836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.543520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.545355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.546897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.550858][ T4328] device veth1_macvtap entered promiscuous mode [ 32.554129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.555610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.557319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.569939][ T4333] device veth0_macvtap entered promiscuous mode [ 32.575382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.577162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.581827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.584232][ T4341] device veth0_vlan entered promiscuous mode [ 32.586948][ T4333] device veth1_macvtap entered promiscuous mode [ 32.589016][ T4334] device veth0_macvtap entered promiscuous mode [ 32.594348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.596071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.597832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.602821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.606953][ T4334] device veth1_macvtap entered promiscuous mode [ 32.614512][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.616349][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.620289][ T1664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.621690][ T1664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.623598][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.627358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.628984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.630447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.631933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.634760][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.636532][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.638238][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.641187][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.643628][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.646504][ T4341] device veth1_vlan entered promiscuous mode [ 32.649157][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.650889][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.653155][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.654575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.656154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.657841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.660412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.662643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.665824][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.667637][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.670584][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.672573][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.675147][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.677703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.679852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.688174][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.690727][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.692410][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.694273][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.696109][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.698172][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.700928][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.703121][ T4334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.704614][ T4334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.706129][ T4334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.707712][ T4334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.713857][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.715415][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.717008][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.719426][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.721802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.723633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.725286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.734571][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.736052][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.738353][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.740722][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.742373][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.744108][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.745799][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.747586][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.750824][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.753887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.755436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.757108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.774339][ T4333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.775994][ T4333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.779118][ T4333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.780736][ T4333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.791553][ T4341] device veth0_macvtap entered promiscuous mode [ 32.793707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.795319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.804929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.807884][ T4341] device veth1_macvtap entered promiscuous mode [ 32.823539][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.825152][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.827600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.829773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.835611][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.837398][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.839619][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.841439][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.843093][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.844923][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.846631][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.848402][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.853988][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.862429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.864219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.884561][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.886452][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.888162][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.892929][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.895056][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.896811][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.898440][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.902048][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.904602][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.908879][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.910247][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.912362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.913927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.915615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.934550][ T4341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.936117][ T4341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.937682][ T4341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.942283][ T4341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.949237][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.950764][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.952304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.979739][ T4391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.981217][ T4391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.983961][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.992954][ T4416] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 33.007567][ T1664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.009765][ T1664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.010052][ T4418] loop0: detected capacity change from 0 to 128 [ 33.011579][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.028948][ T4418] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 33.052016][ T1664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.053447][ T1664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.054913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.075160][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.076596][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.078168][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.121464][ T4418] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 582) [ 33.123032][ T4418] FAT-fs (loop0): Filesystem has been set read-only [ 33.124256][ T4418] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 582) [ 33.125881][ T4418] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 582) [ 33.135155][ T1664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.136631][ T1664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.141933][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.252541][ T4428] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003 [ 33.327400][ T4431] loop1: detected capacity change from 0 to 512 [ 33.330714][ T4431] ======================================================= [ 33.330714][ T4431] WARNING: The mand mount option has been deprecated and [ 33.330714][ T4431] and is ignored by this kernel. Remove the mand [ 33.330714][ T4431] option from the mount to silence this warning. [ 33.330714][ T4431] ======================================================= [ 33.341509][ T4431] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 33.343171][ T4431] EXT4-fs (loop1): failed to open journal device unknown-block(8,1) -6 [ 33.616412][ T4434] bridge0: port 3(vxlan0) entered blocking state [ 33.633930][ T4434] bridge0: port 3(vxlan0) entered disabled state [ 33.635923][ T4434] device vxlan0 entered promiscuous mode [ 33.758772][ T4330] Bluetooth: hci2: command 0x041b tx timeout [ 33.760470][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 33.762095][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 33.763600][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 33.842374][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 34.295236][ T4461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 34.356099][ T4464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18'. [ 35.928653][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 35.928701][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 35.931054][ T4332] Bluetooth: hci2: command 0x040f tx timeout [ 35.932422][ T4339] Bluetooth: hci1: command 0x040f tx timeout [ 36.108491][ C1] sched: RT throttling activated [ 36.108745][ T4343] Bluetooth: hci3: command 0x040f tx timeout [ 36.162425][ T4479] sctp: [Deprecated]: syz.3.24 (pid 4479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 36.162425][ T4479] Use struct sctp_sack_info instead [ 37.123300][ T4486] binder: 4483:4486 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 37.136795][ T4484] binder: 4483:4484 got transaction to invalid handle, 1 [ 37.138125][ T4484] binder: 4484:4483 cannot find target node [ 37.147971][ T4484] binder: 4483:4484 transaction call to 0:0 failed 4/29201/-22, size 72-0 line 3062 [ 37.166895][ T4484] binder: 4483:4484 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 37.176307][ T4484] binder: 4484 RLIMIT_NICE not set [ 37.177915][ T4488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 37.323232][ T1516] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.386469][ T4493] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 37.987160][ T4517] loop1: detected capacity change from 0 to 512 [ 37.994886][ T4517] UDF-fs: bad mount option "€" or missing value [ 37.999320][ T4339] Bluetooth: hci1: command 0x0419 tx timeout [ 38.000738][ T4343] Bluetooth: hci4: command 0x0419 tx timeout [ 38.002087][ T4337] Bluetooth: hci2: command 0x0419 tx timeout [ 38.003279][ T4330] Bluetooth: hci0: command 0x0419 tx timeout [ 38.159296][ T4332] Bluetooth: hci3: command 0x0419 tx timeout [ 39.785891][ T4561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.788417][ T4561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.835224][ T4565] fuse: Bad value for 'fd' [ 40.251724][ T4577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.52'. [ 40.289843][ T4579] loop4: detected capacity change from 0 to 164 [ 41.907421][ T4599] loop4: detected capacity change from 0 to 2048 [ 41.932701][ T4599] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 42.939344][ T4617] loop1: detected capacity change from 0 to 256 [ 43.836881][ T4617] FAT-fs (loop1): Directory bread(block 64) failed [ 43.838299][ T4617] FAT-fs (loop1): Directory bread(block 65) failed [ 43.839830][ T4617] FAT-fs (loop1): Directory bread(block 66) failed [ 43.841155][ T4617] FAT-fs (loop1): Directory bread(block 67) failed [ 43.842558][ T4617] FAT-fs (loop1): Directory bread(block 68) failed [ 43.843886][ T4617] FAT-fs (loop1): Directory bread(block 69) failed [ 43.845327][ T4617] FAT-fs (loop1): Directory bread(block 70) failed [ 43.846652][ T4617] FAT-fs (loop1): Directory bread(block 71) failed [ 43.847985][ T4617] FAT-fs (loop1): Directory bread(block 72) failed [ 43.849347][ T4617] FAT-fs (loop1): Directory bread(block 73) failed [ 44.171541][ T4614] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 44.172822][ T4614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 44.174651][ T4614] vhci_hcd vhci_hcd.0: Device attached [ 44.266633][ T4615] vhci_hcd: connection closed [ 44.268866][ T4393] vhci_hcd: stop threads [ 44.270760][ T4393] vhci_hcd: release socket [ 44.271644][ T4393] vhci_hcd: disconnect device [ 44.748699][ T4622] bridge0: port 3(dummy0) entered blocking state [ 44.749985][ T4622] bridge0: port 3(dummy0) entered disabled state [ 44.761723][ T4622] device dummy0 entered promiscuous mode [ 44.763154][ T4622] bridge0: port 3(dummy0) entered blocking state [ 44.764344][ T4622] bridge0: port 3(dummy0) entered forwarding state [ 44.810351][ T4627] netlink: 'syz.1.67': attribute type 10 has an invalid length. [ 44.821222][ T4627] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.823568][ T4627] bond0: (slave team0): Enslaving as an active interface with an up link [ 44.919498][ T4625] device syzkaller0 entered promiscuous mode [ 44.931062][ T4625] tipc: Started in network mode [ 44.933648][ T4625] tipc: Node identity b26c2581d492, cluster identity 4711 [ 44.935204][ T4625] tipc: Enabled bearer , priority 0 [ 44.937804][ T4624] tipc: Resetting bearer [ 45.004430][ T4637] Invalid ELF header magic: != ELF [ 45.301059][ T4624] tipc: Disabling bearer [ 47.332429][ T4661] loop4: detected capacity change from 0 to 1024 [ 47.334073][ T4661] EXT4-fs: Ignoring removed bh option [ 47.335060][ T4661] EXT4-fs: Ignoring removed oldalloc option [ 47.336130][ T4661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.474279][ T4661] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.638883][ T4661] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 47.640670][ T4661] System zones: 0-1, 3-36 [ 47.718886][ T4661] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.177968][ T4666] loop3: detected capacity change from 0 to 4096 [ 48.407544][ T4666] EXT4-fs: Ignoring removed orlov option [ 48.413295][ T4666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.415173][ T4666] EXT4-fs (loop3): Test dummy encryption mode enabled [ 48.442715][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 48.468378][ T4666] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 48.531673][ T4666] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 49.219332][ T4666] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 49.322052][ T4692] device syzkaller0 entered promiscuous mode [ 49.402393][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 49.441592][ T4696] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 49.484328][ T4703] loop3: detected capacity change from 0 to 256 [ 49.496149][ T4703] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.513890][ T4703] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 49.515654][ T4703] FAT-fs (loop3): Filesystem has been set read-only [ 49.526493][ T4703] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 49.924843][ T4719] UBIFS error (pid: 4719): cannot open "./file0", error -22 [ 49.927150][ T4719] loop4: detected capacity change from 0 to 256 [ 49.940895][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 49.944656][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 49.946434][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 49.948851][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 49.950921][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 50.036654][ T4722] loop4: detected capacity change from 0 to 256 [ 50.053290][ T4722] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.070866][ T4722] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 50.073285][ T4722] FAT-fs (loop4): Filesystem has been set read-only [ 50.693356][ T4735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.98'. [ 50.726391][ T4735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.98'. [ 50.801277][ T4739] jffs2: notice: (4739) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 51.555645][ T4748] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 52.926397][ T4782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'. [ 52.932710][ T4782] device bond1 entered promiscuous mode [ 52.933837][ T4782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.951671][ T4782] device erspan1 entered promiscuous mode [ 52.953249][ T4782] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 52.954888][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 53.129242][ T4788] netlink: 'syz.4.114': attribute type 12 has an invalid length. [ 53.507973][ T4796] Zero length message leads to an empty skb [ 53.609093][ T4796] loop2: detected capacity change from 0 to 32768 [ 53.614635][ T4796] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.116 (4796) [ 53.622917][ T4796] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 53.624990][ T4796] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 53.626762][ T4796] BTRFS info (device loop2): force clearing of disk cache [ 53.628242][ T4796] BTRFS info (device loop2): enabling auto defrag [ 53.629586][ T4796] BTRFS info (device loop2): max_inline at 0 [ 53.630859][ T4796] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 53.634233][ T4796] BTRFS error (device loop2): open_ctree failed: -22 [ 53.655170][ T4798] loop1: detected capacity change from 0 to 8192 [ 53.677852][ T4798] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.748570][ T4799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4799) [ 53.816701][ T4798] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 53.822570][ T4798] FAT-fs (loop1): Filesystem has been set read-only [ 54.906416][ T4817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'. [ 54.958478][ T4817] bond1: (slave veth3): Enslaving as an active interface with an up link [ 55.017035][ T4823] device geneve2 entered promiscuous mode [ 55.876655][ T4844] sctp: [Deprecated]: syz.2.130 (pid 4844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 55.876655][ T4844] Use struct sctp_sack_info instead [ 55.900174][ T4847] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 55.976651][ T4849] tipc: Failed to remove unknown binding: 66,0,0/0:1619397217/1619397218 [ 55.980976][ T4849] tipc: Failed to remove unknown binding: 66,0,0/0:1619397217/1619397218 [ 55.985195][ T4854] tipc: Failed to remove unknown binding: 66,0,0/0:4146540723/4146540725 [ 56.037199][ T4851] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 56.064863][ T4861] kAFS: No cell specified [ 56.071423][ T4861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.137'. [ 56.419756][ T4868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 56.443150][ T4864] loop1: detected capacity change from 0 to 164 [ 56.523584][ T4868] bond2: (slave veth3): Enslaving as an active interface with an up link [ 56.564187][ T4866] raw_sendmsg: syz.2.140 forgot to set AF_INET. Fix it! [ 56.765996][ T4891] 9pnet: p9_errstr2errno: server reported unknown error ÈVmI®LÓâ—…N [ 56.822042][ T4894] bridge0: port 4(syz_tun) entered blocking state [ 56.823303][ T4894] bridge0: port 4(syz_tun) entered disabled state [ 56.825672][ T4894] device syz_tun entered promiscuous mode [ 56.826960][ T4894] bridge0: port 4(syz_tun) entered blocking state [ 56.828139][ T4894] bridge0: port 4(syz_tun) entered forwarding state [ 57.323071][ T4900] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 57.331312][ T4896] IPVS: stopping master sync thread 4900 ... [ 57.350600][ T4894] netlink: 'syz.0.153': attribute type 12 has an invalid length. [ 57.352256][ T4894] netlink: 'syz.0.153': attribute type 29 has an invalid length. [ 57.354700][ T4894] netlink: 148 bytes leftover after parsing attributes in process `syz.0.153'. [ 57.356480][ T4894] netlink: 59 bytes leftover after parsing attributes in process `syz.0.153'. [ 57.424430][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000a53bdad5: rx timeout, send abort [ 57.926450][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000a53bdad5: abort rx timeout. Force session deactivation [ 58.019193][ T4921] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 58.315954][ T4931] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 58.356291][ T4932] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 58.356291][ T4932] The task syz.1.162 (4932) triggered the difference, watch for misbehavior. [ 59.276504][ T4948] bridge0: port 3(dummy0) entered disabled state [ 59.277963][ T4948] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.279758][ T4948] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.315723][ T4948] bridge0: port 3(dummy0) entered blocking state [ 59.316961][ T4948] bridge0: port 3(dummy0) entered forwarding state [ 59.318125][ T4948] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.319444][ T4948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.320724][ T4948] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.322078][ T4948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.324532][ T4948] device bridge0 entered promiscuous mode [ 59.455107][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.383313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.383905][ T5009] loop2: detected capacity change from 0 to 512 [ 61.408087][ T5009] EXT4-fs (loop2): 1 truncate cleaned up [ 61.409649][ T5009] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 61.433463][ T5009] file system registered [ 61.445131][ T5009] read descriptors [ 61.465202][ T4333] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 61.470297][ T4333] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 61.472959][ T4333] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 61.476638][ T5016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 61.479431][ T4333] ffs_data_put(): freeing [ 61.493852][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 61.813412][ T5022] loop2: detected capacity change from 0 to 2048 [ 61.817067][ T5016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 61.835033][ T5016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 61.836869][ T5016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 61.843987][ T5022] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 61.868487][ T5016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.883380][ T5016] bond3: (slave bond0): making interface the new active one [ 61.894569][ T5016] bond3: (slave bond0): Enslaving as an active interface with an up link [ 61.901317][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 61.903760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 61.905981][ T5021] netlink: 'syz.0.192': attribute type 10 has an invalid length. [ 61.932307][ T5021] bridge0: port 4(syz_tun) entered disabled state [ 61.935608][ T5021] bridge0: port 4(syz_tun) entered disabled state [ 61.952429][ T5023] Injecting memory failure for pfn 0x1371df at process virtual address 0x20002000 [ 61.955376][ T5023] Memory failure: 0x1371df: recovery action for dirty LRU page: Recovered [ 61.956921][ T5023] Injecting memory failure for pfn 0x138660 at process virtual address 0x20003000 [ 61.965510][ T5023] Memory failure: 0x138660: recovery action for dirty LRU page: Recovered [ 61.967028][ T5023] Injecting memory failure for pfn 0x138661 at process virtual address 0x20004000 [ 61.971717][ T5023] Memory failure: 0x138661: recovery action for dirty LRU page: Recovered [ 61.973715][ T5023] Injecting memory failure for pfn 0x138662 at process virtual address 0x20005000 [ 61.977678][ T5021] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 61.979213][ T5023] Memory failure: 0x138662: recovery action for dirty LRU page: Recovered [ 63.122590][ T5045] netlink: 'syz.4.200': attribute type 1 has an invalid length. [ 63.528200][ T5045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.531566][ T5047] netlink: 'syz.0.201': attribute type 1 has an invalid length. [ 63.555069][ T5053] bond1: (slave gretap1): making interface the new active one [ 63.565848][ T5053] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 63.573259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 63.575190][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'. [ 63.617783][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'. [ 63.791362][ T5047] device bridge1 entered promiscuous mode [ 63.794020][ T5047] bond4: (slave bridge1): making interface the new active one [ 63.797323][ T5047] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 63.800692][ T5057] smc: net device team0 applied user defined pnetid SYZ2 [ 63.807476][ T5045] bond1: (slave veth3): Enslaving as an active interface with a down link [ 63.909441][ T5058] bond0: (slave team0): Releasing backup interface [ 63.951976][ T5058] smc: removing net device team0 with user defined pnetid SYZ2 [ 63.963606][ T5058] team0 (unregistering): Port device team_slave_0 removed [ 63.971016][ T5058] team0 (unregistering): Port device team_slave_1 removed [ 64.010459][ T5053] device veth0_virt_wifi entered promiscuous mode [ 64.015399][ T5053] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 64.479846][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.481287][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.598268][ T27] audit: type=1326 audit(78.577:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.2.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8979368 code=0x7ffc0000 [ 64.608341][ T27] audit: type=1326 audit(78.577:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.2.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8979368 code=0x7ffc0000 [ 64.619500][ T27] audit: type=1326 audit(78.587:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.2.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8979368 code=0x7ffc0000 [ 64.623970][ T27] audit: type=1326 audit(78.587:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.2.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8979368 code=0x7ffc0000 [ 64.628333][ T27] audit: type=1326 audit(78.587:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.2.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=116 compat=0 ip=0xffffb8979368 code=0x7ffc0000 [ 64.633710][ T27] audit: type=1326 audit(78.597:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.2.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8979368 code=0x7ffc0000 [ 64.638800][ T27] audit: type=1326 audit(78.607:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.2.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8979368 code=0x7ffc0000 [ 64.643221][ T27] audit: type=1326 audit(78.617:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.2.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8979368 code=0x7ffc0000 [ 64.647683][ T27] audit: type=1326 audit(78.617:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.2.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb8979368 code=0x7ffc0000 [ 64.653619][ T5093] bond0: (slave syz_tun): Releasing backup interface [ 64.655143][ T27] audit: type=1326 audit(78.617:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5096 comm="syz.2.218" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8979368 code=0x7ffc0000 [ 65.262472][ T5110] loop1: detected capacity change from 0 to 8192 [ 65.271345][ T5110] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value [ 65.778869][ T5124] netlink: 'syz.2.226': attribute type 1 has an invalid length. [ 65.785049][ T5124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.802795][ T5124] bond1: (slave gretap1): making interface the new active one [ 65.805624][ T5124] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 65.807364][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 65.825424][ T5124] bond1: (slave veth3): Enslaving as an active interface with a down link [ 65.839605][ T5124] device veth0_virt_wifi entered promiscuous mode [ 65.849955][ T5124] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 65.890132][ T5129] netlink: 'syz.2.227': attribute type 1 has an invalid length. [ 65.965124][ T5129] device bridge1 entered promiscuous mode [ 65.967884][ T5129] bond2: (slave bridge1): making interface the new active one [ 65.970405][ T5129] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 66.332375][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 66.342279][ T5135] smc: net device team0 applied user defined pnetid SYZ2 [ 66.440942][ T5135] smc: removing net device team0 with user defined pnetid SYZ2 [ 66.459525][ T5135] team0 (unregistering): Port device team_slave_0 removed [ 66.472614][ T5135] team0 (unregistering): Port device team_slave_1 removed [ 66.536879][ T5152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 66.670797][ T5159] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.693741][ T5161] loop1: detected capacity change from 0 to 164 [ 66.799849][ T5164] bridge0: port 4(macvlan2) entered blocking state [ 66.801791][ T5164] bridge0: port 4(macvlan2) entered disabled state [ 66.803526][ T5164] device macvlan2 entered promiscuous mode [ 66.804912][ T5164] bridge0: port 4(macvlan2) entered blocking state [ 66.806021][ T5164] bridge0: port 4(macvlan2) entered forwarding state [ 66.899732][ T5167] rock: directory entry would overflow storage [ 66.900982][ T5167] rock: sig=0x4f50, size=4, remaining=3 [ 66.901947][ T5167] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 67.374611][ T4332] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.376911][ T4332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.379371][ T4337] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.381789][ T4337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.383549][ T4337] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.385104][ T4337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.436628][ T5182] chnl_net:caif_netlink_parms(): no params data found [ 67.455591][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.457173][ T5182] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.459073][ T5182] device bridge_slave_0 entered promiscuous mode [ 67.461996][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.463496][ T5182] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.465270][ T5182] device bridge_slave_1 entered promiscuous mode [ 67.473628][ T5182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.476522][ T5182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.485582][ T5182] team0: Port device team_slave_0 added [ 67.488048][ T5182] team0: Port device team_slave_1 added [ 67.495354][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.496750][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.501973][ T5182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.502974][ T5191] xt_TPROXY: Can be used only with -p tcp or -p udp [ 67.504708][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.506506][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.511890][ T5182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.514836][ T5191] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 67.623324][ T5182] device hsr_slave_0 entered promiscuous mode [ 67.658821][ T5182] device hsr_slave_1 entered promiscuous mode [ 67.701268][ T5182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.703439][ T5182] Cannot create hsr debugfs directory [ 67.714971][ T5196] device syzkaller0 entered promiscuous mode [ 67.864282][ T5199] netlink: 'syz.4.250': attribute type 1 has an invalid length. [ 67.940540][ T5182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.968851][ T5204] bridge0: port 4(syz_tun) entered blocking state [ 67.973236][ T5204] bridge0: port 4(syz_tun) entered disabled state [ 67.975120][ T5204] device syz_tun entered promiscuous mode [ 67.976631][ T5204] bridge0: port 4(syz_tun) entered blocking state [ 67.977917][ T5204] bridge0: port 4(syz_tun) entered forwarding state [ 68.019829][ T5193] loop1: detected capacity change from 0 to 131072 [ 68.032133][ T5193] F2FS-fs (loop1): Test dummy encryption mode enabled [ 68.320128][ T5182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.329097][ T5193] F2FS-fs (loop1): invalid crc value [ 68.345823][ T5193] F2FS-fs (loop1): Found nat_bits in checkpoint [ 68.379072][ T5193] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 68.391014][ T5182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.394479][ T5216] netlink: 'syz.3.254': attribute type 1 has an invalid length. [ 68.396085][ T5193] ipt_CLUSTERIP: Please specify destination IP [ 68.411949][ T5216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.501894][ T5182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.512732][ T5216] bond1: (slave gretap1): making interface the new active one [ 68.518929][ T5216] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 68.521694][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 68.549965][ T5216] bond1: (slave veth3): Enslaving as an active interface with a down link [ 68.563102][ T5216] device veth0_virt_wifi entered promiscuous mode [ 68.579063][ T5216] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 68.704472][ T5182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.749745][ T5182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.801220][ T5182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.841206][ T5182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.933712][ T5182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.941662][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.943295][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.946448][ T5182] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.951191][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.952780][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.954460][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.956008][ T4391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.958273][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.964151][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.965906][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.967541][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.969059][ T4391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.978418][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.981385][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.983248][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.985242][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.986819][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.989050][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.990943][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.992670][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.996240][ T5182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.998282][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.026293][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.028157][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.030188][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.387919][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.389487][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.393316][ T5182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.400983][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.403933][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.412283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.414200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.415987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.420777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.424505][ T5182] device veth0_vlan entered promiscuous mode [ 69.427933][ T5182] device veth1_vlan entered promiscuous mode [ 69.435185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.437511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.444609][ T4343] Bluetooth: hci3: command 0x0409 tx timeout [ 69.456418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.462519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.466687][ T5182] device veth0_macvtap entered promiscuous mode [ 69.470184][ T5182] device veth1_macvtap entered promiscuous mode [ 69.483181][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.485484][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.494638][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.498765][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.502881][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.506875][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.514504][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.525381][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.527859][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.602750][ T7] cfg80211: failed to load regulatory.db [ 69.604792][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.607556][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.618369][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.620531][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.622923][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.624986][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.628867][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.630748][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.632512][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.634289][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.635984][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.637723][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.732857][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.758285][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.938909][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.940760][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.943279][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.948442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.953698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.960677][ T5182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.962138][ T5182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.963674][ T5182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.965199][ T5182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.076518][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.078148][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.081599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.093763][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.095272][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.096724][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.811363][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.054977][ T5277] netlink: 'syz.0.268': attribute type 1 has an invalid length. [ 71.183108][ T5277] device veth0_virt_wifi entered promiscuous mode [ 71.198858][ T27] kauditd_printk_skb: 145 callbacks suppressed [ 71.198866][ T27] audit: type=1326 audit(85.187:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.3.270" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d79368 code=0x0 [ 71.519640][ T4343] Bluetooth: hci3: command 0x041b tx timeout [ 72.076398][ T5304] kAFS: No cell specified [ 72.094006][ T5304] netlink: 32 bytes leftover after parsing attributes in process `syz.3.278'. [ 72.300070][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.923047][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 73.181775][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000f76e406f: rx timeout, send abort [ 73.598579][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 73.608135][ T5339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 73.683461][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000f76e406f: abort rx timeout. Force session deactivation [ 73.923366][ T5348] netlink: 96 bytes leftover after parsing attributes in process `syz.3.292'. [ 74.267705][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.320029][ T5367] Core dump to core aborted: cannot preserve file permissions [ 75.678802][ T4343] Bluetooth: hci3: command 0x0419 tx timeout [ 78.002416][ T4376] psci: CPU1 killed (polled 0 ms) [ 78.221661][ T5412] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 78.260133][ T0] Detected PIPT I-cache on CPU1 [ 78.261028][ T0] GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 [ 78.262433][ T0] CPU1: Booted secondary processor 0x0000000001 [0x410fd4f1] [ 78.404102][ T5416] IPVS: stopping master sync thread 5412 ... [ 79.388244][ T5421] smc: net device team0 applied user defined pnetid SYZ2 [ 79.594392][ T5427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.310'. [ 79.681105][ T5421] smc: removing net device team0 with user defined pnetid SYZ2 [ 79.697627][ T5421] team0 (unregistering): Port device team_slave_0 removed [ 79.716708][ T5421] team0 (unregistering): Port device team_slave_1 removed [ 79.770700][ T5426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 79.850033][ T5430] bond2: (slave veth5): Enslaving as an active interface with an up link [ 81.133584][ T5441] bridge0: port 3(syz_tun) entered blocking state [ 82.099596][ T5441] bridge0: port 3(syz_tun) entered disabled state [ 82.101798][ T5441] device syz_tun entered promiscuous mode [ 82.102961][ T5441] bridge0: port 3(syz_tun) entered blocking state [ 82.104182][ T5441] bridge0: port 3(syz_tun) entered forwarding state [ 82.123154][ T5449] loop2: detected capacity change from 0 to 1024 [ 83.101891][ T5447] netlink: 'syz.4.318': attribute type 12 has an invalid length. [ 83.105244][ T5451] netlink: 48 bytes leftover after parsing attributes in process `syz.3.321'. [ 83.117519][ T5447] netlink: 'syz.4.318': attribute type 29 has an invalid length. [ 83.126816][ T5447] netlink: 148 bytes leftover after parsing attributes in process `syz.4.318'. [ 83.131150][ T5447] netlink: 59 bytes leftover after parsing attributes in process `syz.4.318'. [ 85.355788][ T5467] loop0: detected capacity change from 0 to 32768 [ 85.598831][ T5464] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 85.599976][ T5464] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.601336][ T5464] vhci_hcd vhci_hcd.0: Device attached [ 87.103888][ T5476] netlink: 'syz.2.327': attribute type 1 has an invalid length. [ 87.120369][ T5476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.327'. [ 87.122734][ T5476] device bond4 entered promiscuous mode [ 87.124103][ T5476] 8021q: adding VLAN 0 to HW filter on device bond4 [ 87.130711][ T5476] device bridge2 entered promiscuous mode [ 87.134923][ T5476] bond4: (slave bridge2): making interface the new active one [ 87.519722][ T5467] read_mapping_page failed! [ 87.521319][ T5467] jfs_mount: Failed to read FILESYSTEM_I [ 87.522620][ T5467] Mount JFS Failure: -5 [ 87.523381][ T5467] jfs_mount failed w/return code = -5 [ 88.104742][ T5476] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 88.106596][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 88.138078][ T5471] device ip6gre1 entered promiscuous mode [ 88.615935][ T5466] vhci_hcd: connection closed [ 88.616762][ T1664] vhci_hcd: stop threads [ 88.621180][ T1664] vhci_hcd: release socket [ 88.622547][ T1664] vhci_hcd: disconnect device [ 88.831809][ T7] usb 2-1: new low-speed USB device number 2 using vhci_hcd [ 88.833372][ T7] usb 2-1: enqueue for inactive port 0 [ 88.930395][ T7] vhci_hcd: vhci_device speed not set [ 90.233706][ T5502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'. [ 90.323438][ T5502] device bond2 entered promiscuous mode [ 91.628975][ T5518] "syz.3.339" (5518) uses obsolete ecb(arc4) skcipher [ 93.016935][ T5527] netlink: 'syz.1.343': attribute type 4 has an invalid length. [ 93.278313][ T5530] netlink: 'syz.1.343': attribute type 4 has an invalid length. [ 93.336623][ T5527] netlink: 'syz.1.343': attribute type 4 has an invalid length. [ 93.814156][ T5548] device syzkaller0 entered promiscuous mode [ 93.838117][ T5552] loop2: detected capacity change from 0 to 2048 [ 93.890756][ T5552] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.938269][ T5559] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.942978][ T5559] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.968747][ T5560] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 94.084758][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 94.186940][ T5569] syz.2.355 uses obsolete (PF_INET,SOCK_PACKET) [ 94.189541][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 94.336183][ T5576] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\" or missing value [ 94.382507][ T5578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.384865][ T5578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.379021][ T5603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.402002][ T5603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 98.430134][ T5601] device syzkaller0 entered promiscuous mode [ 98.536034][ T5592] loop0: detected capacity change from 0 to 32768 [ 98.554478][ T5608] netlink: 'syz.2.373': attribute type 1 has an invalid length. [ 98.562037][ T5608] 8021q: adding VLAN 0 to HW filter on device bond5 [ 98.579181][ T5592] XFS (loop0): Mounting V5 Filesystem [ 98.637971][ T5592] XFS (loop0): Ending clean mount [ 98.653457][ T5592] XFS (loop0): Quotacheck needed: Please wait. [ 98.730996][ T5608] bridge0: port 3(dummy0) entered disabled state [ 98.732774][ T5608] device dummy0 left promiscuous mode [ 98.733811][ T5608] bridge0: port 3(dummy0) entered disabled state [ 98.747891][ T5592] XFS (loop0): Quotacheck: Done. [ 99.022701][ T4343] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 99.932319][ T5608] bond5: (slave dummy0): making interface the new active one [ 99.934590][ T5608] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 99.937178][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 99.988081][ T5634] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 100.284209][ T5182] XFS (loop0): Unmounting Filesystem [ 101.862831][ T5666] overlayfs: failed to clone upperpath [ 101.910599][ T5669] loop1: detected capacity change from 0 to 128 [ 101.939633][ T5669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 102.240777][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 102.285550][ T5684] device vlan2 entered promiscuous mode [ 102.325242][ T5684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 102.346435][ T5686] netlink: 'syz.3.395': attribute type 2 has an invalid length. [ 104.185284][ T5707] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 104.345993][ T5707] device bond3 entered promiscuous mode [ 104.377078][ T5707] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.384128][ T5713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.402'. [ 104.396185][ T5715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.404'. [ 104.483841][ T5707] bond3: (slave bridge1): making interface the new active one [ 104.485699][ T5707] device bridge1 entered promiscuous mode [ 104.487765][ T5707] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 104.503584][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 105.744419][ T5724] loop0: detected capacity change from 0 to 256 [ 105.757554][ T5724] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 105.777442][ T5701] ceph: No mds server is up or the cluster is laggy [ 106.177245][ T27] audit: type=1326 audit(120.157:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.4.407" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe379368 code=0x0 [ 106.719151][ T5758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 106.725511][ T5758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.730913][ T5759] netlink: 'syz.4.413': attribute type 1 has an invalid length. [ 106.849960][ T5758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.908802][ T5763] capability: warning: `syz.4.415' uses deprecated v2 capabilities in a way that may be insecure [ 106.961557][ T5761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.415'. [ 106.963805][ T5762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.415'. [ 107.465760][ T5772] loop1: detected capacity change from 0 to 736 [ 109.097308][ T5796] loop0: detected capacity change from 0 to 2048 [ 110.123335][ T5805] loop1: detected capacity change from 0 to 128 [ 111.101743][ T5805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.407470][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 112.417913][ T5818] loop0: detected capacity change from 0 to 2048 [ 112.637548][ T5820] netlink: 'syz.4.435': attribute type 10 has an invalid length. [ 112.648798][ T5818] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.663497][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.666720][ T5820] bond0: (slave team0): Enslaving as an active interface with an up link [ 113.039690][ T4343] Bluetooth: Frame is too long (len 12, expected len 8) [ 113.045174][ T4343] Bluetooth: hci2: link tx timeout [ 113.046192][ T4343] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.094366][ T4337] Bluetooth: Frame is too long (len 12, expected len 8) [ 113.147604][ T4337] Bluetooth: hci2: link tx timeout [ 113.148693][ T4337] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.228302][ T4343] Bluetooth: hci2: link tx timeout [ 113.229367][ T4343] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.188907][ T4343] Bluetooth: hci2: link tx timeout [ 114.189809][ T4343] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.191339][ T3706] Bluetooth: bad checksum in packet [ 114.212030][ T5848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.442'. [ 114.228251][ T5848] device ip6gre1 entered promiscuous mode [ 114.576125][ T5854] netlink: 'syz.3.442': attribute type 6 has an invalid length. [ 114.579288][ T5854] netlink: 72 bytes leftover after parsing attributes in process `syz.3.442'. [ 115.118513][ T4337] Bluetooth: hci2: command 0x0406 tx timeout [ 116.109520][ T5857] netlink: 168 bytes leftover after parsing attributes in process `syz.4.446'. [ 117.120971][ T5864] netlink: 550 bytes leftover after parsing attributes in process `syz.4.449'. [ 117.129892][ T4343] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 117.131632][ T4343] Bluetooth: hci1: Injecting HCI hardware error event [ 117.133369][ T4343] Bluetooth: hci1: hardware error 0x00 [ 120.318542][ T4343] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 120.865021][ T4380] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.020190][ T5732] bridge0: port 3(syz_tun) entered disabled state [ 121.307938][ T5732] device syz_tun left promiscuous mode [ 121.309302][ T5732] bridge0: port 3(syz_tun) entered disabled state [ 121.328584][ T4380] usb 1-1: Using ep0 maxpacket: 8 [ 121.331952][ T4380] usb 1-1: config 0 has no interfaces? [ 121.337007][ T4380] usb 1-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 121.340330][ T4380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.342918][ T4380] usb 1-1: Product: syz [ 121.344900][ T4380] usb 1-1: Manufacturer: syz [ 121.346245][ T4380] usb 1-1: SerialNumber: syz [ 121.351529][ T4380] usb 1-1: config 0 descriptor?? [ 121.646972][ T4337] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.651820][ T4337] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.653811][ T4337] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.655712][ T4337] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.657222][ T4337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 121.659831][ T4337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.772584][ T5897] chnl_net:caif_netlink_parms(): no params data found [ 121.823385][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.824783][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.826619][ T5897] device bridge_slave_0 entered promiscuous mode [ 121.829218][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.830486][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.832137][ T5897] device bridge_slave_1 entered promiscuous mode [ 121.843914][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.846684][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.854908][ T5897] team0: Port device team_slave_0 added [ 121.857407][ T5897] team0: Port device team_slave_1 added [ 121.866773][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.867926][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.873655][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.876453][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.876810][ T3901] usb 1-1: USB disconnect, device number 2 [ 121.877627][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.895671][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.937322][ T5897] device hsr_slave_0 entered promiscuous mode [ 121.988653][ T5897] device hsr_slave_1 entered promiscuous mode [ 122.028553][ T5897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.029934][ T5897] Cannot create hsr debugfs directory [ 122.190910][ T5897] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.289420][ T5897] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.839578][ T5897] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.960366][ T5897] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.969215][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 122.990208][ T5924] tipc: Started in network mode [ 122.991290][ T5924] tipc: Node identity 7ad7e9496216, cluster identity 4711 [ 122.992680][ T5924] tipc: Enabled bearer , priority 0 [ 123.011925][ T5924] device syzkaller0 entered promiscuous mode [ 123.021370][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 123.211981][ T5924] tipc: Resetting bearer [ 123.232489][ T5923] tipc: Resetting bearer [ 123.344125][ T5923] tipc: Disabling bearer [ 123.390928][ T5897] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.441905][ T5897] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.483040][ T5897] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.523693][ T5897] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.603380][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.607985][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.610243][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.614368][ T5897] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.616958][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.618661][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.620218][ T4477] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.621546][ T4477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.625444][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.631441][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.633035][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.634687][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.636040][ T4550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.640905][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.644704][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.647185][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.650901][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.658174][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.662331][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.664970][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.673848][ T5897] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.675648][ T5897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.678860][ T4343] Bluetooth: hci4: command 0x0409 tx timeout [ 123.681567][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.683393][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.685312][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.686933][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.695666][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.760213][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.761612][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.766563][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.862020][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.863847][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.876641][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.878291][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.881706][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.883735][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.886604][ T5897] device veth0_vlan entered promiscuous mode [ 123.894347][ T5897] device veth1_vlan entered promiscuous mode [ 123.904172][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.905708][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.907380][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.913418][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.916566][ T5897] device veth0_macvtap entered promiscuous mode [ 123.921913][ T5897] device veth1_macvtap entered promiscuous mode [ 123.927176][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.933145][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.934950][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.936910][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.939996][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.941802][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.943500][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.945232][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.946993][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.954812][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.956527][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.958317][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.961591][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.963619][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.965249][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.966742][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.972548][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.975851][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.977609][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.979724][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.981676][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.983399][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.985281][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.987231][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.993023][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.994714][ T5897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.996424][ T5897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.003216][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.004773][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.006632][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.013948][ T5897] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.015488][ T5897] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.017085][ T5897] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.019201][ T5897] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.064962][ T1664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.066315][ T1664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.067970][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.096717][ T4550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.098193][ T4550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.100570][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.287463][ T5947] loop4: detected capacity change from 0 to 256 [ 125.276088][ T5956] netlink: 156 bytes leftover after parsing attributes in process `syz.3.471'. [ 125.761493][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 125.857799][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.474'. [ 125.918923][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.920122][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.981230][ T5970] netlink: 'syz.2.475': attribute type 12 has an invalid length. [ 126.036391][ T5972] netlink: 'syz.3.477': attribute type 1 has an invalid length. [ 126.076353][ T5972] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.188079][ T5962] loop4: detected capacity change from 0 to 32768 [ 126.199533][ T5972] bond4: (slave gretap2): making interface the new active one [ 126.208351][ T5972] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 126.220101][ T5962] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.226889][ T1664] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 126.227263][ T5962] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 126.230025][ T5962] BTRFS info (device loop4): force clearing of disk cache [ 126.242503][ T5975] loop0: detected capacity change from 0 to 8192 [ 126.243930][ T5962] BTRFS info (device loop4): enabling auto defrag [ 126.245248][ T5962] BTRFS info (device loop4): max_inline at 0 [ 126.252100][ T5962] BTRFS error (device loop4): support for check_integrity* not compiled in! [ 126.264946][ T5962] BTRFS error (device loop4): open_ctree failed: -22 [ 126.266311][ T5975] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.444564][ T5985] netlink: 'syz.4.480': attribute type 1 has an invalid length. [ 126.453263][ T5975] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 126.457241][ T5975] FAT-fs (loop0): Filesystem has been set read-only [ 127.838768][ T4343] Bluetooth: hci4: command 0x040f tx timeout [ 128.398877][ T39] net_ratelimit: 84 callbacks suppressed [ 129.919437][ T4337] Bluetooth: hci4: command 0x0419 tx timeout [ 130.682703][ T6002] loop1: detected capacity change from 0 to 1024 [ 130.684440][ T6002] EXT4-fs: Ignoring removed bh option [ 130.685549][ T6002] EXT4-fs: Ignoring removed oldalloc option [ 130.686693][ T6002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.848620][ T6002] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.188502][ T6002] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 131.190026][ T6002] System zones: 0-1, 3-36 [ 131.849938][ T6002] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 133.406136][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 133.438562][ C1] net_ratelimit: 76 callbacks suppressed [ 135.123819][ T6018] loop1: detected capacity change from 0 to 512 [ 135.125382][ T6018] EXT4-fs: Ignoring removed nobh option [ 135.203895][ T6018] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 135.212664][ T6027] netlink: 'syz.4.492': attribute type 1 has an invalid length. [ 135.238654][ T6027] batman_adv: batadv0: Adding interface: geneve2 [ 135.239845][ T6027] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 135.349360][ T6027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.492'. [ 135.723446][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 137.522458][ T6082] Core dump to core aborted: cannot preserve file permissions [ 138.478845][ C0] net_ratelimit: 55 callbacks suppressed [ 139.045707][ T6098] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 139.078798][ T6104] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 141.106846][ T6104] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 141.112513][ T6115] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 141.115307][ T6104] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 141.117091][ T6104] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 141.121734][ T6104] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 141.124080][ T6104] bond6: (slave geneve2): making interface the new active one [ 141.127055][ T6104] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 141.870908][ T6104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.511'. [ 141.886548][ T6104] 8021q: adding VLAN 0 to HW filter on device bond6 [ 141.903215][ T6128] netlink: 68 bytes leftover after parsing attributes in process `syz.0.519'. [ 141.928809][ T6130] Core dump to core aborted: cannot preserve file permissions [ 141.988877][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.520'. [ 142.038005][ T6133] device bond7 entered promiscuous mode [ 142.048163][ T6133] 8021q: adding VLAN 0 to HW filter on device bond7 [ 142.075227][ T6139] device erspan1 entered promiscuous mode [ 142.076649][ T6139] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 142.124770][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 142.166466][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.522'. [ 143.673412][ T6176] bridge0: port 3(syz_tun) entered blocking state [ 143.678552][ C1] net_ratelimit: 74 callbacks suppressed [ 143.680577][ T6176] bridge0: port 3(syz_tun) entered disabled state [ 143.690952][ T6176] device syz_tun entered promiscuous mode [ 143.711665][ T6176] device bridge_slave_0 left promiscuous mode [ 143.721676][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.178342][ T6183] loop1: detected capacity change from 0 to 164 [ 144.484594][ T6188] device syzkaller0 entered promiscuous mode [ 144.505167][ T6188] tipc: Started in network mode [ 144.506271][ T6188] tipc: Node identity eec89c51ecc4, cluster identity 4711 [ 144.516497][ T6188] tipc: Enabled bearer , priority 0 [ 144.520349][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.535'. [ 144.544247][ T6187] tipc: Resetting bearer [ 144.668338][ T6187] tipc: Disabling bearer [ 144.902787][ T6202] xt_CONNSECMARK: invalid mode: 0 [ 145.219931][ T6226] loop4: detected capacity change from 0 to 512 [ 145.226752][ T6227] netlink: 'syz.3.548': attribute type 1 has an invalid length. [ 145.268644][ T6226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 145.332818][ T6227] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 145.339252][ T6227] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 145.345220][ T6227] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 145.351109][ T6227] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 145.363020][ T6227] bond5: (slave geneve2): making interface the new active one [ 145.371518][ T6227] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 145.400114][ T5897] EXT4-fs (loop4): unmounting filesystem. [ 145.475507][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.548'. [ 145.491249][ T6234] loop1: detected capacity change from 0 to 512 [ 145.493810][ T27] audit: type=1326 audit(159.477:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.549" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2579368 code=0x7ffc0000 [ 145.495050][ T6227] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.497975][ T27] audit: type=1326 audit(159.477:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.549" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2579368 code=0x7ffc0000 [ 145.504385][ T27] audit: type=1326 audit(159.487:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.549" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2579368 code=0x7ffc0000 [ 145.512389][ T27] audit: type=1326 audit(159.487:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.549" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2579368 code=0x7ffc0000 [ 145.516649][ T27] audit: type=1326 audit(159.487:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.549" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=60 compat=0 ip=0xffffa2579368 code=0x7ffc0000 [ 145.521632][ T27] audit: type=1326 audit(159.497:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.549" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2579368 code=0x7ffc0000 [ 145.525610][ T27] audit: type=1326 audit(159.497:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.549" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2579368 code=0x7ffc0000 [ 145.547974][ T27] audit: type=1326 audit(159.497:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.549" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2579368 code=0x7ffc0000 [ 145.572268][ T27] audit: type=1326 audit(159.497:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.549" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2579368 code=0x7ffc0000 [ 145.576643][ T27] audit: type=1326 audit(159.497:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.549" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa2578f90 code=0x7ffc0000 [ 145.582814][ T6234] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 145.653868][ T6234] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.550: Invalid inode table block 4134528463 in block_group 0 [ 145.664235][ T6234] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 145.668084][ T6234] EXT4-fs error (device loop1): __ext4_unlink:3329: inode #2: comm syz.1.550: mark_inode_dirty error [ 145.710905][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 145.772186][ T6243] loop1: detected capacity change from 0 to 1024 [ 145.802762][ T6243] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 146.620396][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 146.653334][ T6261] netlink: 'syz.3.560': attribute type 39 has an invalid length. [ 147.661009][ T4343] Bluetooth: hci4: command 0x0405 tx timeout [ 147.767775][ T6263] loop1: detected capacity change from 0 to 512 [ 148.015115][ T6263] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.083451][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 148.091556][ T6278] loop4: detected capacity change from 0 to 1024 [ 148.190991][ T6279] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.212616][ T6266] loop2: detected capacity change from 0 to 40427 [ 148.215475][ T6266] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 148.217152][ T6266] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 148.219760][ T6266] F2FS-fs (loop2): invalid crc value [ 148.222233][ T6266] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.236483][ T6266] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 148.238098][ T6266] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.718598][ C1] net_ratelimit: 63 callbacks suppressed [ 149.265256][ T4343] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 149.271079][ T4343] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 149.272730][ T4343] CPU: 1 PID: 4343 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 149.274055][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 149.275715][ T4343] Workqueue: hci3 hci_rx_work [ 149.276544][ T4343] Call trace: [ 149.277134][ T4343] dump_backtrace+0x1c4/0x1f0 [ 149.277941][ T4343] show_stack+0x2c/0x3c [ 149.278773][ T4343] __dump_stack+0x30/0x40 [ 149.279647][ T4343] dump_stack_lvl+0xf4/0x15c [ 149.280547][ T4343] dump_stack+0x1c/0x5c [ 149.281321][ T4343] sysfs_create_dir_ns+0x244/0x264 [ 149.282301][ T4343] kobject_add_internal+0x5a8/0xb18 [ 149.283292][ T4343] kobject_add+0x144/0x20c [ 149.284157][ T4343] device_add+0x3dc/0xe4c [ 149.284974][ T4343] hci_conn_add_sysfs+0xb8/0x1bc [ 149.285923][ T4343] hci_conn_complete_evt+0x7b8/0x10b4 [ 149.286975][ T4343] hci_event_packet+0x698/0xe60 [ 149.287956][ T4343] hci_rx_work+0x310/0xa70 [ 149.288842][ T4343] process_one_work+0x7e4/0x13bc [ 149.289777][ T4343] worker_thread+0x8cc/0xfe8 [ 149.290647][ T4343] kthread+0x254/0x2e0 [ 149.291545][ T4343] ret_from_fork+0x10/0x20 [ 149.292895][ T4343] kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 149.294911][ T4343] Bluetooth: hci3: failed to register connection device [ 149.970230][ T6298] loop1: detected capacity change from 0 to 32768 [ 150.088520][ T6296] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 150.089688][ T6296] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 150.091019][ T6296] vhci_hcd vhci_hcd.0: Device attached [ 151.358640][ T4343] Bluetooth: hci3: command 0x0409 tx timeout [ 152.241887][ T4343] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 152.243681][ T4343] Bluetooth: hci4: Injecting HCI hardware error event [ 152.246670][ T4337] Bluetooth: hci4: hardware error 0x00 [ 153.089794][ T1516] usb 4-1: new low-speed USB device number 2 using vhci_hcd [ 153.131897][ T6297] vhci_hcd: connection reset by peer [ 153.133184][ T4358] vhci_hcd: stop threads [ 153.133980][ T4358] vhci_hcd: release socket [ 153.135575][ T4358] vhci_hcd: disconnect device [ 153.247349][ T6316] loop4: detected capacity change from 0 to 256 [ 153.269170][ T6316] exfat: Deprecated parameter 'utf8' [ 153.289523][ T6316] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 153.439243][ T4332] Bluetooth: hci3: command 0x041b tx timeout [ 154.078550][ C1] net_ratelimit: 48 callbacks suppressed [ 154.078664][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.158556][ T4343] Bluetooth: hci0: command 0x0406 tx timeout [ 154.306125][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 154.318973][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 154.321202][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 154.323250][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 154.324992][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 155.359308][ T4337] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 155.528722][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 157.107460][ T6324] loop2: detected capacity change from 0 to 512 [ 158.101388][ T6324] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 158.881190][ T6333] loop0: detected capacity change from 0 to 256 [ 158.896243][ T6333] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 158.898254][ T6333] exFAT-fs (loop0): invalid boot region [ 158.899419][ T6333] exFAT-fs (loop0): failed to recognize exfat type [ 158.944559][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 158.958667][ T1516] vhci_hcd: vhci_device speed not set [ 159.118560][ C0] net_ratelimit: 64 callbacks suppressed [ 160.165027][ T6354] loop4: detected capacity change from 0 to 1024 [ 160.205158][ T6354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 160.597080][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 160.597089][ T27] audit: type=1326 audit(174.577:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.1.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79368 code=0x7ffc0000 [ 160.604644][ T27] audit: type=1326 audit(174.587:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.1.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79368 code=0x7ffc0000 [ 160.611824][ T27] audit: type=1326 audit(174.587:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.1.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79368 code=0x7ffc0000 [ 160.615832][ T27] audit: type=1326 audit(174.587:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.1.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=60 compat=0 ip=0xffff98d79368 code=0x7ffc0000 [ 160.620328][ T27] audit: type=1326 audit(174.597:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.1.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79368 code=0x7ffc0000 [ 160.624478][ T27] audit: type=1326 audit(174.597:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.1.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79368 code=0x7ffc0000 [ 160.632429][ T27] audit: type=1326 audit(174.597:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.1.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79368 code=0x7ffc0000 [ 160.636825][ T27] audit: type=1326 audit(174.597:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.1.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff98d78f90 code=0x7ffc0000 [ 160.641962][ T27] audit: type=1326 audit(174.597:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.1.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79368 code=0x7ffc0000 [ 160.646358][ T27] audit: type=1326 audit(174.607:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.1.589" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79368 code=0x7ffc0000 [ 160.749601][ T6368] netlink: 84 bytes leftover after parsing attributes in process `syz.2.590'. [ 160.930878][ T1516] kernel write not supported for file bpf-prog (pid: 1516 comm: kworker/0:2) [ 161.024295][ T5897] EXT4-fs (loop4): unmounting filesystem. [ 162.368126][ T6388] device syzkaller0 entered promiscuous mode [ 162.591748][ T6396] netlink: 'syz.1.600': attribute type 12 has an invalid length. [ 162.593445][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 162.595367][ T6396] bond0: option primary_reselect: invalid value (113) [ 162.676698][ T6399] loop1: detected capacity change from 0 to 2048 [ 162.715675][ T6399] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 162.718585][ T4332] Bluetooth: hci3: command 0x0405 tx timeout [ 163.636018][ T6401] loop0: detected capacity change from 0 to 512 [ 163.647684][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 163.669313][ T6401] EXT4-fs (loop0): orphan cleanup on readonly fs [ 163.679462][ T6401] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.602: corrupted inode contents [ 163.768306][ T6401] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 163.775641][ T6401] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.602: corrupted inode contents [ 163.780719][ T6415] process 'syz.3.605' launched './file1' with NULL argv: empty string added [ 163.783077][ T6401] EXT4-fs error (device loop0): ext4_evict_inode:329: inode #15: comm syz.0.602: mark_inode_dirty error [ 163.787467][ T6401] EXT4-fs (loop0): 1 orphan inode deleted [ 163.788665][ T6401] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 163.796908][ T6393] loop2: detected capacity change from 0 to 32768 [ 164.019581][ T6393] (syz.2.599,6393,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ" or missing value [ 164.041023][ T6393] (syz.2.599,6393,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 164.056971][ T5182] EXT4-fs (loop0): unmounting filesystem. [ 164.158529][ C0] net_ratelimit: 63 callbacks suppressed [ 164.323625][ T6393] bond8: (slave xfrm1): The slave device specified does not support setting the MAC address [ 164.325899][ T6393] bond8: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 164.330569][ T6393] bond8: (slave xfrm1): making interface the new active one [ 164.332741][ T6393] bond8: (slave xfrm1): Enslaving as an active interface with an up link [ 166.535548][ T6460] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\Ãåý07†ðÿ$Áܲ¹" or missing value [ 166.834908][ T6462] netlink: 156 bytes leftover after parsing attributes in process `syz.3.620'. [ 167.183588][ T6468] loop0: detected capacity change from 0 to 256 [ 167.187630][ T6468] exfat: Bad value for 'fmask' [ 167.483020][ T6472] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.507565][ T4337] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 167.509534][ T4337] CPU: 1 PID: 4337 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 167.509564][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 167.509570][ T4337] Workqueue: hci2 hci_rx_work [ 167.512551][ T4337] [ 167.513874][ T4337] Call trace: [ 167.514401][ T4337] dump_backtrace+0x1c4/0x1f0 [ 167.515186][ T4337] show_stack+0x2c/0x3c [ 167.515916][ T4337] __dump_stack+0x30/0x40 [ 167.516620][ T4337] dump_stack_lvl+0xf4/0x15c [ 167.517368][ T4337] dump_stack+0x1c/0x5c [ 167.518017][ T4337] sysfs_create_dir_ns+0x244/0x264 [ 167.518910][ T4337] kobject_add_internal+0x5a8/0xb18 [ 167.518932][ T4337] kobject_add+0x144/0x20c [ 167.520027][ T4337] device_add+0x3dc/0xe4c [ 167.521675][ T4337] hci_conn_add_sysfs+0xb8/0x1bc [ 167.522647][ T4337] le_conn_complete_evt+0xd08/0x12c8 [ 167.523651][ T4337] hci_le_enh_conn_complete_evt+0x114/0x3b8 [ 167.524753][ T4337] hci_le_meta_evt+0x2c0/0x4a8 [ 167.525655][ T4337] hci_event_packet+0x64c/0xe60 [ 167.526551][ T4337] hci_rx_work+0x310/0xa70 [ 167.527340][ T4337] process_one_work+0x7e4/0x13bc [ 167.528238][ T4337] worker_thread+0x8cc/0xfe8 [ 167.529228][ T4337] kthread+0x254/0x2e0 [ 167.530081][ T4337] ret_from_fork+0x10/0x20 [ 167.539141][ T4337] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 167.541593][ T4337] Bluetooth: hci2: failed to register connection device [ 167.704582][ T6480] loop4: detected capacity change from 0 to 128 [ 167.713927][ T6480] affs: No valid root block on device loop4 [ 167.867663][ T6491] loop0: detected capacity change from 0 to 512 [ 167.899140][ T6491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 167.900847][ T6491] System zones: 1-12 [ 167.909499][ T6491] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.627: missing EA_INODE flag [ 167.913101][ T6491] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.627: error while reading EA inode 12 err=-117 [ 167.916402][ T6491] EXT4-fs (loop0): 1 orphan inode deleted [ 167.917658][ T6491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 169.261693][ T6502] netlink: 72 bytes leftover after parsing attributes in process `syz.4.630'. [ 169.288507][ C1] net_ratelimit: 62 callbacks suppressed [ 170.125380][ T5182] EXT4-fs (loop0): unmounting filesystem. [ 170.229617][ T6504] capability: warning: `syz.3.629' uses 32-bit capabilities (legacy support in use) [ 170.304336][ T27] kauditd_printk_skb: 65 callbacks suppressed [ 170.304347][ T27] audit: type=1326 audit(184.287:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.631" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 170.315067][ T27] audit: type=1326 audit(184.297:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.631" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 170.333428][ T27] audit: type=1326 audit(184.297:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.631" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 170.337554][ T27] audit: type=1326 audit(184.297:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.631" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=60 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 170.344124][ T6514] IPVS: Error connecting to the multicast addr [ 170.363472][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.633'. [ 170.373027][ T27] audit: type=1326 audit(184.307:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.631" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 170.377007][ T27] audit: type=1326 audit(184.307:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.631" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 170.405186][ T27] audit: type=1326 audit(184.307:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.631" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 170.409968][ T27] audit: type=1326 audit(184.307:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.631" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 170.414505][ T27] audit: type=1326 audit(184.307:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.631" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff83378f90 code=0x7ffc0000 [ 170.453066][ T27] audit: type=1326 audit(184.307:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.0.631" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 172.435283][ T6546] netlink: 'syz.3.646': attribute type 1 has an invalid length. [ 172.478065][ T6546] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.561719][ T6546] device bridge2 entered promiscuous mode [ 172.602574][ T6546] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 172.604431][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 172.863936][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 173.171105][ T6558] bridge1: port 1(veth7) entered blocking state [ 173.172395][ T6558] bridge1: port 1(veth7) entered disabled state [ 173.174355][ T6558] device veth7 entered promiscuous mode [ 173.272652][ T6558] bridge1: port 2(veth0_to_bond) entered blocking state [ 173.276282][ T6558] bridge1: port 2(veth0_to_bond) entered disabled state [ 173.278286][ T6558] device veth0_to_bond entered promiscuous mode [ 173.392206][ T6558] bridge1: port 3(veth9) entered blocking state [ 173.394587][ T6558] bridge1: port 3(veth9) entered disabled state [ 173.400880][ T6558] device veth9 entered promiscuous mode [ 173.468275][ T6565] wireguard: wg0: Could not create IPv6 socket [ 173.542489][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 173.796435][ T6576] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 173.928042][ T6569] bond1 (unregistering): (slave erspan0): Releasing backup interface [ 174.398507][ C1] net_ratelimit: 64 callbacks suppressed [ 174.823287][ T6569] bond1 (unregistering): Released all slaves [ 174.896853][ T6590] loop2: detected capacity change from 0 to 256 [ 174.954967][ T6590] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 175.060889][ T6582] loop4: detected capacity change from 0 to 512 [ 175.153212][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.155057][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.157398][ T6582] EXT4-fs (loop4): orphan cleanup on readonly fs [ 175.160845][ T6582] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.658: corrupted inode contents [ 175.168729][ T6582] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 175.191017][ T6582] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.658: corrupted inode contents [ 175.193608][ T6582] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.658: mark_inode_dirty error [ 175.395549][ T6582] EXT4-fs (loop4): 1 orphan inode deleted [ 175.396688][ T6582] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 175.446293][ T5897] EXT4-fs (loop4): unmounting filesystem. [ 176.281396][ T6606] loop1: detected capacity change from 0 to 128 [ 176.548885][ T6606] affs: No valid root block on device loop1 [ 177.839588][ T6621] netlink: 'syz.2.668': attribute type 1 has an invalid length. [ 178.959068][ T6630] netlink: 72 bytes leftover after parsing attributes in process `syz.1.669'. [ 179.117892][ T6621] 8021q: adding VLAN 0 to HW filter on device bond10 [ 179.130385][ T6621] bond9: (slave bond10): making interface the new active one [ 179.131848][ T6621] bond9: (slave bond10): Enslaving as an active interface with an up link [ 179.502078][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.668'. [ 179.504417][ T6642] 8021q: adding VLAN 0 to HW filter on device bond9 [ 179.688705][ T1664] net_ratelimit: 60 callbacks suppressed [ 179.923223][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 180.897417][ T6627] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 180.981059][ T6627] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 180.984375][ T6627] bond7: (slave xfrm1): making interface the new active one [ 180.986242][ T6627] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 182.305653][ T6672] device vlan2 entered promiscuous mode [ 182.327630][ T6673] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 182.340301][ T6667] device syzkaller0 entered promiscuous mode [ 182.383488][ T6667] tipc: Enabled bearer , priority 0 [ 182.389160][ T6666] tipc: Resetting bearer [ 182.499701][ T6666] tipc: Disabling bearer [ 182.507631][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.684'. [ 182.509724][ T6673] device bond1 entered promiscuous mode [ 182.510845][ T6673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.524586][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.682'. [ 182.531185][ T6677] device bridge2 entered promiscuous mode [ 182.534348][ T6677] bond1: (slave bridge2): making interface the new active one [ 182.565012][ T6677] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 182.574855][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 182.741283][ T6685] bridge0: port 3(macvlan2) entered blocking state [ 182.749245][ T6685] bridge0: port 3(macvlan2) entered disabled state [ 182.754316][ T6685] device macvlan2 entered promiscuous mode [ 182.762234][ T6685] bridge0: port 3(macvlan2) entered blocking state [ 182.763553][ T6685] bridge0: port 3(macvlan2) entered forwarding state [ 182.977176][ T6690] device syzkaller0 entered promiscuous mode [ 183.403419][ T6702] loop0: detected capacity change from 0 to 512 [ 183.628830][ T6707] xt_CONNSECMARK: invalid mode: 0 [ 183.657706][ T6702] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 183.697027][ T6713] loop1: detected capacity change from 0 to 256 [ 183.704787][ T6713] exfat: Deprecated parameter 'utf8' [ 184.695197][ T6713] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 184.714639][ T5182] EXT4-fs (loop0): unmounting filesystem. [ 184.728627][ T4550] net_ratelimit: 62 callbacks suppressed [ 185.921603][ T6727] loop1: detected capacity change from 0 to 256 [ 186.133322][ T6727] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.136758][ T6727] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 186.164064][ T6727] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 186.177736][ T6727] exFAT-fs (loop1): failed to load alloc-bitmap [ 186.184733][ T6727] exFAT-fs (loop1): failed to recognize exfat type [ 186.368132][ T6727] loop1: detected capacity change from 0 to 40427 [ 186.372283][ T6727] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 186.377082][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.088791][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.090041][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.753481][ T6748] loop2: detected capacity change from 0 to 8 [ 189.758650][ C1] net_ratelimit: 51 callbacks suppressed [ 189.812326][ T6748] unable to read fragment index table [ 190.174625][ T6757] loop2: detected capacity change from 0 to 1024 [ 190.176286][ T6757] EXT4-fs: Ignoring removed bh option [ 190.183779][ T6750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.185687][ T6750] bond1: (slave bond2): Enslaving as an active interface with an up link [ 190.204447][ T6759] bond1 (unregistering): (slave bond2): Releasing backup interface [ 190.218430][ T6757] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 190.281847][ T6759] bond1 (unregistering): Released all slaves [ 190.339820][ T6765] tipc: Started in network mode [ 190.341011][ T6765] tipc: Node identity 1000001, cluster identity 4369 [ 190.342394][ T6765] tipc: Node number set to 16777217 [ 190.343889][ T6765] tipc: Cannot configure node identity twice [ 191.457966][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 191.617998][ T6779] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 191.711863][ T6779] 8021q: adding VLAN 0 to HW filter on device bond8 [ 192.895517][ T6793] loop1: detected capacity change from 0 to 1764 [ 192.919082][ T6795] loop2: detected capacity change from 0 to 256 [ 192.923612][ T6795] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 192.942276][ T6751] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.984292][ T6786] bond8: (slave dummy0): making interface the new active one [ 192.993696][ T6786] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 192.995958][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 192.996176][ T6784] usb usb9: usbfs: process 6784 (syz.1.717) did not claim interface 0 before use [ 193.074975][ T6784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.076831][ T6784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.118187][ T6799] device syzkaller0 entered promiscuous mode [ 193.551459][ T6804] tipc: Enabled bearer , priority 0 [ 193.553196][ T6809] device syzkaller0 entered promiscuous mode [ 193.653031][ T6804] tipc: Resetting bearer [ 193.664549][ T6803] tipc: Resetting bearer [ 193.761792][ T6803] tipc: Disabling bearer [ 193.779759][ T6811] loop1: detected capacity change from 0 to 512 [ 193.795727][ T6811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 193.797366][ T6811] System zones: 1-12 [ 193.800393][ T6811] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.724: missing EA_INODE flag [ 193.803387][ T6811] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.724: error while reading EA inode 12 err=-117 [ 193.806060][ T6811] EXT4-fs (loop1): 1 orphan inode deleted [ 193.807260][ T6811] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 193.940168][ T6815] loop0: detected capacity change from 0 to 2048 [ 193.944242][ T6815] UDF-fs: bad mount option "01777777777777777777777ÿÿÿÿ" or missing value [ 194.568754][ T4332] Bluetooth: hci3: command 0x0406 tx timeout [ 194.878505][ C1] net_ratelimit: 67 callbacks suppressed [ 194.914522][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 196.062188][ T6834] loop2: detected capacity change from 0 to 256 [ 196.169516][ T6796] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.173617][ T6834] netlink: 168 bytes leftover after parsing attributes in process `syz.2.729'. [ 197.669992][ T6843] loop4: detected capacity change from 0 to 256 [ 197.686657][ T6843] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 199.112169][ T6853] netlink: 'syz.1.733': attribute type 1 has an invalid length. [ 199.126940][ T6853] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.080005][ T4477] net_ratelimit: 57 callbacks suppressed [ 200.111439][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.121412][ T6855] bond3: (slave dummy0): making interface the new active one [ 200.126154][ T6855] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 200.130180][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 201.408243][ T6869] netlink: 'syz.3.738': attribute type 4 has an invalid length. [ 201.644300][ T6874] loop2: detected capacity change from 0 to 256 [ 201.681625][ T6869] netlink: 'syz.3.738': attribute type 4 has an invalid length. [ 201.702202][ T6869] netlink: 'syz.3.738': attribute type 4 has an invalid length. [ 201.921481][ T6888] futex_wake_op: syz.3.745 tries to shift op by 144; fix this program [ 202.035773][ T6891] loop1: detected capacity change from 0 to 764 [ 202.048733][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 202.230354][ T7] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 202.231855][ T7] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 202.233436][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 202.237306][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 202.239029][ T7] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 202.245130][ T7] usb 1-1: Product: syz [ 202.245873][ T7] usb 1-1: Manufacturer: syz [ 202.246653][ T7] usb 1-1: SerialNumber: syz [ 202.255953][ T7] usb 1-1: config 0 descriptor?? [ 202.263249][ T7] hub 1-1:0.0: bad descriptor, ignoring hub [ 202.264357][ T7] hub: probe of 1-1:0.0 failed with error -5 [ 202.280691][ T7] usb 1-1: selecting invalid altsetting 0 [ 202.350511][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 205.091916][ C1] net_ratelimit: 54 callbacks suppressed [ 205.093499][ T3901] usb 1-1: USB disconnect, device number 3 [ 206.008931][ T6909] loop2: detected capacity change from 0 to 2048 [ 206.059695][ T6909] loop2: p1 < > p4 [ 206.059695][ T6909] p4: [ 206.063124][ T6909] loop2: p4 size 722688 extends beyond EOD, truncated [ 207.726758][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 207.745256][ T6923] loop4: detected capacity change from 0 to 8192 [ 207.757942][ T6923] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 207.761327][ T6923] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 207.767485][ T6923] REISERFS (device loop4): using ordered data mode [ 207.769330][ T6923] reiserfs: using flush barriers [ 207.964440][ T6923] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 207.971813][ T6923] REISERFS (device loop4): checking transaction log (loop4) [ 208.008944][ T6923] REISERFS (device loop4): Using rupasov hash to sort names [ 208.011931][ T6923] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 210.199036][ T6956] "syz.4.761" (6956) uses obsolete ecb(arc4) skcipher [ 210.248533][ C1] net_ratelimit: 70 callbacks suppressed [ 211.082973][ T6953] loop0: detected capacity change from 0 to 128 [ 211.101890][ T6960] loop2: detected capacity change from 0 to 764 [ 211.111772][ T6953] FAT-fs (loop0): bogus number of reserved sectors [ 211.113031][ T6953] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 211.114867][ T6953] FAT-fs (loop0): Can't find a valid FAT filesystem [ 211.351364][ T6974] netlink: 'syz.3.774': attribute type 10 has an invalid length. [ 211.369977][ T6974] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 211.381012][ T6974] team0: Failed to send options change via netlink (err -105) [ 211.382563][ T6974] team0: Port device netdevsim0 added [ 213.833795][ T7006] loop0: detected capacity change from 0 to 256 [ 213.854710][ T7006] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.779868][ T7025] loop1: detected capacity change from 0 to 128 [ 214.781592][ T7025] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 214.898524][ T7025] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.358610][ C1] net_ratelimit: 65 callbacks suppressed [ 216.705165][ T7038] tipc: Enabled bearer , priority 0 [ 216.707277][ T7038] device syzkaller0 entered promiscuous mode [ 217.042622][ T7047] tipc: Resetting bearer [ 217.047250][ T7037] tipc: Resetting bearer [ 217.919323][ T7037] tipc: Disabling bearer [ 217.949409][ T4380] tipc: Node number set to 415361353 [ 217.970548][ T7052] device syz_tun left promiscuous mode [ 217.971731][ T7052] bridge0: port 3(syz_tun) entered disabled state [ 218.091550][ T7052] bond8: (slave dummy0): Releasing active interface [ 218.298167][ T7052] device bridge_slave_1 left promiscuous mode [ 218.299767][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.326564][ T7065] loop2: detected capacity change from 0 to 2048 [ 218.329180][ T7065] EXT4-fs: Ignoring removed orlov option [ 218.342531][ T7052] bond0: (slave bond_slave_0): Releasing backup interface [ 218.346619][ T7065] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 218.397389][ T7052] bond0: (slave bond_slave_1): Releasing backup interface [ 218.404664][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 218.473848][ T7052] team0: Port device team_slave_0 removed [ 218.483562][ T7052] team0: Port device team_slave_1 removed [ 218.485263][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.487309][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.490004][ T7052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.491679][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.498115][ T7052] bond1: (slave veth0_virt_wifi): Releasing active interface [ 218.499952][ T7052] device gretap1 entered promiscuous mode [ 218.547187][ T7078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.549683][ T7078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.558296][ T7052] team0: Port device netdevsim0 removed [ 218.562280][ T7052] bond1: (slave gretap1): Releasing active interface [ 218.563903][ T7052] bond1: (slave gretap1): the permanent HWaddr of slave - 5a:46:ae:5f:42:b4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 218.567201][ T7052] device gretap1 left promiscuous mode [ 218.614707][ T7052] bond1: (slave veth3): Releasing active interface [ 218.663772][ T7052] bond2: (slave veth5): Releasing backup interface [ 218.715119][ T7052] bond3: (slave bridge1): Releasing backup interface [ 218.716600][ T7052] device bridge1 left promiscuous mode [ 218.760628][ T7052] bond4: (slave gretap2): Releasing active interface [ 218.851197][ T7052] bond5: (slave geneve2): Releasing active interface [ 218.890343][ T7052] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 218.892331][ T7052] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 218.893977][ T7052] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 218.895840][ T7052] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 218.935214][ T7052] bond6: (slave bridge2): Releasing backup interface [ 218.985570][ T7052] bond7: (slave xfrm1): Releasing backup interface [ 219.017847][ T7059] device syzkaller1 entered promiscuous mode [ 220.478507][ C1] net_ratelimit: 52 callbacks suppressed [ 221.294737][ T7102] syz.0.812 sent an empty control message without MSG_MORE. [ 223.219683][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.544849][ T27] kauditd_printk_skb: 68 callbacks suppressed [ 224.544854][ T27] audit: type=1326 audit(238.527:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.820" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 224.556530][ T27] audit: type=1326 audit(238.537:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.820" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 224.562045][ T27] audit: type=1326 audit(238.537:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.820" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 224.566102][ T27] audit: type=1326 audit(238.537:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.820" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 224.574878][ T27] audit: type=1326 audit(238.537:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.820" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 224.579171][ T27] audit: type=1326 audit(238.537:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.820" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 224.582990][ T27] audit: type=1326 audit(238.537:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.820" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 224.586901][ T27] audit: type=1326 audit(238.567:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.820" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 224.594654][ T27] audit: type=1326 audit(238.567:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.820" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 224.598970][ T27] audit: type=1326 audit(238.567:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.0.820" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83379368 code=0x7ffc0000 [ 224.987099][ T7137] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 225.313621][ T4337] Bluetooth: hci2: link tx timeout [ 225.314631][ T4337] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 225.316702][ T4337] Bluetooth: hci2: link tx timeout [ 225.317827][ T4337] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 225.410709][ T7141] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.413325][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.518564][ C0] net_ratelimit: 44 callbacks suppressed [ 225.608255][ T7155] loop1: detected capacity change from 0 to 512 [ 225.628845][ T7155] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 225.631452][ T7155] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 225.658024][ T7155] EXT4-fs (loop1): 1 truncate cleaned up [ 225.660073][ T7155] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 227.071774][ T4337] Bluetooth: hci2: link tx timeout [ 227.072760][ T4337] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 227.074121][ T4337] Bluetooth: hci2: link tx timeout [ 227.074959][ T4337] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.077479][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 227.260148][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.358637][ T4337] Bluetooth: hci2: command 0x0406 tx timeout [ 227.448641][ T7184] __vm_enough_memory: pid: 7184, comm: syz.1.833, no enough memory for the allocation [ 227.471871][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.747445][ T7141] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.749722][ T7141] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.751649][ T7141] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.753440][ T7141] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.011287][ T7162] tipc: Enabling of bearer rejected, failed to enable media [ 228.125789][ T7187] device syzkaller0 entered promiscuous mode [ 228.140996][ T7194] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 228.175588][ T7196] tipc: Enabled bearer , priority 0 [ 228.244904][ T7198] loop0: detected capacity change from 0 to 4096 [ 228.246716][ T7198] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.260345][ T7198] EXT4-fs (loop0): Test dummy encryption mode enabled [ 228.295896][ T7198] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 228.308666][ C0] Unable to handle kernel paging request at virtual address dfff800000000000 [ 228.310506][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 228.311856][ C0] Mem abort info: [ 228.312457][ C0] ESR = 0x0000000096000006 [ 228.313210][ C0] EC = 0x25: DABT (current EL), IL = 32 bits [ 228.314204][ C0] SET = 0, FnV = 0 [ 228.314836][ C0] EA = 0, S1PTW = 0 [ 228.315498][ C0] FSC = 0x06: level 2 translation fault [ 228.316532][ C0] Data abort info: [ 228.317131][ C0] ISV = 0, ISS = 0x00000006 [ 228.317907][ C0] CM = 0, WnR = 0 [ 228.318611][ C0] [dfff800000000000] address between user and kernel address ranges [ 228.320179][ C0] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 228.321336][ C0] Modules linked in: [ 228.321995][ C0] CPU: 0 PID: 7197 Comm: syz.0.839 Not tainted syzkaller #0 [ 228.323217][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 228.324896][ C0] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 228.326224][ C0] pc : fq_codel_enqueue+0x844/0x1004 [ 228.327138][ C0] lr : fq_codel_enqueue+0x7c0/0x1004 [ 228.327411][ T7156] inotify_handle_inode_event: group=000000000a70a992 mark=0000000085c7c13a mask=8000 [ 228.328073][ C0] sp : ffff8000080074c0 [ 228.329885][ C1] wireguard: wg1: Handshake for peer 28 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 10) [ 228.330617][ C0] x29: ffff8000080075e0 x28: 0000000000000000 x27: 0000000000000000 [ 228.332610][ C1] wireguard: wg2: Handshake for peer 5 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 14) [ 228.334082][ C0] x26: ffff8000080076c0 x25: 0000000000000001 x24: ffff700001000eb0 [ 228.335983][ C1] wireguard: wg2: Handshake for peer 29 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 11) [ 228.336255][ T4475] nf_conntrack: normal packet for 0000000007841729 [ 228.337482][ C0] [ 228.337487][ C0] x23: 0000000000000000 x22: 00000000000003ff x21: ffff0000eb400000 [ 228.342119][ T113] nf_conntrack: normal packet for 00000000cb352b63 [ 228.342873][ C0] x20: dfff800000000000 x19: 0000000000000000 x18: 0000000000000000 [ 228.344329][ T7156] fsnotify_insert_event: group=000000000a70a992 event=0000000075fc65f4 [ 228.345754][ C0] x17: 0000000000c200d0 x16: ffff8000082dd284 x15: 0000000000000000 [ 228.347261][ T3939] get_one_event: group=000000000a70a992 event=0000000075fc65f4 [ 228.348877][ C0] x14: 0000000000000003 x13: 1ffff00002a78071 x12: 00000000e9cc3f88 [ 228.350228][ T3939] fsnotify_remove_first_event: group=000000000a70a992 event=0000000075fc65f4 [ 228.351741][ C0] x11: ff00800010195ebc x10: 0000000000000000 [ 228.353261][ T3939] inotify_read: group=000000000a70a992 kevent=0000000075fc65f4 [ 228.353270][ C0] x9 : 1fffe0001d680000 [ 228.354415][ C0] x8 : 0000000000000000 [ 228.355612][ T3939] copy_event_to_user: group=000000000a70a992 event=0000000075fc65f4 [ 228.356381][ C0] x7 : ffff8000083c7974 [ 228.357062][ T3939] inotify_read: group=000000000a70a992 kevent=0000000000000000 [ 228.358514][ C0] x6 : 0000000000000000 [ 228.358526][ C0] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 228.363042][ C0] x2 : ffff0000d1e90b28 x1 : 0000000000000000 x0 : 0000000000000000 [ 228.364593][ C0] dump_backtrace(regs = 000000002c6ff541 tsk = 0000000000000000) [ 228.366053][ C0] Call trace: [ 228.366685][ C0] fq_codel_enqueue+0x844/0x1004 [ 228.367650][ C0] netem_dequeue+0xa00/0x1018 [ 228.368554][ C0] __qdisc_run+0x1b4/0x1300 [ 228.369430][ C0] __dev_queue_xmit+0xc38/0x3154 [ 228.370368][ C0] tipc_l2_send_msg+0x2a0/0x364 [ 228.371298][ C0] tipc_bearer_xmit_skb+0x240/0x380 [ 228.372273][ C0] tipc_disc_timeout+0x4e8/0x630 [ 228.373191][ C0] call_timer_fn+0x1b8/0x96c [ 228.374056][ C0] __run_timers+0x478/0x6d8 [ 228.374903][ C0] run_timer_softirq+0x7c/0x114 [ 228.375782][ C0] handle_softirqs+0x318/0xc90 [ 228.376645][ C0] __do_softirq+0x14/0x20 [ 228.377419][ C0] ____do_softirq+0x14/0x20 [ 228.378277][ C0] call_on_irq_stack+0x30/0x48 [ 228.379155][ C0] do_softirq_own_stack+0x20/0x2c [ 228.380138][ C0] __irq_exit_rcu+0x23c/0x430 [ 228.381038][ C0] irq_exit_rcu+0x14/0x84 [ 228.381913][ C0] el0_interrupt+0x80/0x1b8 [ 228.382753][ C0] __el0_irq_handler_common+0x18/0x24 [ 228.383764][ C0] el0t_64_irq_handler+0x10/0x1c [ 228.384726][ C0] el0t_64_irq+0x18c/0x190 [ 228.385589][ C0] Code: aa1503e0 961d8066 f94002b7 d343fee8 (38746908) [ 228.386870][ C0] ---[ end trace 0000000000000000 ]--- [ 228.778788][ C0] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 228.780347][ C0] SMP: stopping secondary CPUs [ 228.781320][ C0] Kernel Offset: disabled [ 228.782205][ C0] CPU features: 0x0a0000,000f0097,a65bfea7 [ 228.783347][ C0] Memory Limit: none [ 229.156769][ C0] Rebooting in 86400 seconds..