last executing test programs: 4.335334702s ago: executing program 0 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x20, 0x0) 4.311124132s ago: executing program 0 (id=693): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) socket$inet6(0xa, 0x1, 0x3) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, 0x0) 4.209040945s ago: executing program 0 (id=695): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x24, &(0x7f0000000280)={0x0, 0xa49, 0x0, 0x0, 0x1bd}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, 0x0, 0x0, 0x4, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) sendmsg$inet6(r8, &(0x7f0000001400)={&(0x7f0000000000)={0xa, 0x4e21, 0x5, @loopback, 0x2}, 0x1c, 0x0}, 0x20044040) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, 0x0) io_setup(0xffff1691, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000050000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x0, 0x1000, 0x0, 0x1ea}, &(0x7f0000000dc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x3, 0x0, 0x0, r8}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1747, 0x100, 0x802}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1c6c, 0x0, 0x0, 0x27f, 0x0, r1}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x4, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) 4.178561346s ago: executing program 0 (id=697): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) 4.125046127s ago: executing program 0 (id=699): syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd61bbddf000283aff7e8800000000000000000000000001", @ANYRES32], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.122703337s ago: executing program 0 (id=700): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x1, 0x5, 0x2, 0x7}]}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='tcp 2', 0x5) write(0xffffffffffffffff, &(0x7f0000000400)='0', 0xff7) 2.688462763s ago: executing program 3 (id=741): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x20, 0x0) 2.687533653s ago: executing program 3 (id=743): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 2.537393376s ago: executing program 3 (id=744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'team0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x4, 0x45, 0xfffff004}, {0x6, 0x82, 0x2, 0x2}]}) 2.537123736s ago: executing program 3 (id=745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x78b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1007fff}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.107788757s ago: executing program 3 (id=750): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 2.01438168s ago: executing program 3 (id=751): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x1, 0x5, 0x2, 0x7}]}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='tcp 2', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) 773.97957ms ago: executing program 4 (id=779): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x80, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 701.478572ms ago: executing program 4 (id=781): setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) 701.347222ms ago: executing program 4 (id=782): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x403, &(0x7f0000000000)={0x0}) 682.707453ms ago: executing program 4 (id=783): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001480)={{r0}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) 660.360903ms ago: executing program 4 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 585.497485ms ago: executing program 4 (id=786): syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd61bbddf000283aff7e8800000000000000000000000001", @ANYRES32], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 542.677046ms ago: executing program 2 (id=791): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x400) ioctl$IOC_PR_RELEASE(r0, 0x801012ee, 0x0) 477.408098ms ago: executing program 2 (id=792): add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780), 0x0, 0x0, 0x0) 477.276488ms ago: executing program 2 (id=793): unshare(0xc060200) unshare(0x8000000) unshare(0x2a060400) bpf$MAP_CREATE(0x0, 0x0, 0x50) 477.188288ms ago: executing program 2 (id=794): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x420282, 0x19) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 452.388698ms ago: executing program 2 (id=795): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000d00)='ramfs\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x88) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES32=r0], 0x20) 425.031419ms ago: executing program 2 (id=796): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) sync() write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0x40}, 0x2) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xffffffff, 0x86c, 0x1, 0x2, 0xd59f80, 0x19f2, 0x5, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="10000000161409"], 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 173.217425ms ago: executing program 1 (id=805): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffff}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r0], 0x20) 173.016655ms ago: executing program 1 (id=806): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="8ce2ad4d", 0x4, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 152.192995ms ago: executing program 1 (id=807): mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) 134.433836ms ago: executing program 1 (id=808): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) tee(r0, r1, 0x8000000000000001, 0x2) 69.338537ms ago: executing program 1 (id=809): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000000000007910b800000000000500000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000040), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) fsopen(&(0x7f0000000040)='ext3\x00', 0x1) userfaultfd(0x80001) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40000000000000061115c00000000001600000000000000950074000000000059552ac209e29f456e80207ac53a6a01d6931dc2d04f52654d4da6dab982d865703217850208f70d7e7592241198618784af3f24185e95d7edc1d6c1e075c088d6a828610ca463ccb90a50a4b38d9bb9656528a6d92c7ceed1d0f375afcd65408ccac06a9f131ab1d0642bdeea21d307e97734e40bbcb962cee8b49ea2c376e68d6302f4d3f6"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0], 0x20) 0s ago: executing program 1 (id=810): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x1b4, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x1000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. syzkaller login: [ 28.227023][ T4316] cgroup: Unknown subsys name 'net' [ 28.444417][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.709915][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.440375][ T4334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.442334][ T4334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.444577][ T4335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.446055][ T4335] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.447449][ T4335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.448722][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.450358][ T4335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.451883][ T4335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.453331][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.454887][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.456382][ T4335] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.457557][ T4335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.458805][ T4335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.460190][ T4335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.461643][ T4335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.466195][ T4330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.468046][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.476192][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.484649][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.493065][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.495062][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.498815][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.500966][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.503827][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.505483][ T4335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.506947][ T4335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.508373][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.514563][ T4334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.516126][ T4334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.517517][ T4334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.610786][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 29.625349][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 29.628933][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 29.674559][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.675925][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.677579][ T4328] device bridge_slave_0 entered promiscuous mode [ 29.682650][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.684006][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.685712][ T4329] device bridge_slave_0 entered promiscuous mode [ 29.687557][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 29.693375][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.694637][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.696254][ T4332] device bridge_slave_0 entered promiscuous mode [ 29.697905][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.699214][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.700661][ T4328] device bridge_slave_1 entered promiscuous mode [ 29.706102][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.707456][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.709145][ T4329] device bridge_slave_1 entered promiscuous mode [ 29.718210][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.719502][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.721007][ T4332] device bridge_slave_1 entered promiscuous mode [ 29.739566][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.742281][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.745122][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.747532][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.755093][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.765562][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.773803][ T4328] team0: Port device team_slave_0 added [ 29.779198][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.780541][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.782364][ T4339] device bridge_slave_0 entered promiscuous mode [ 29.784223][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.785479][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.787033][ T4339] device bridge_slave_1 entered promiscuous mode [ 29.791022][ T4328] team0: Port device team_slave_1 added [ 29.798619][ T4338] chnl_net:caif_netlink_parms(): no params data found [ 29.804456][ T4329] team0: Port device team_slave_0 added [ 29.806518][ T4332] team0: Port device team_slave_0 added [ 29.816034][ T4329] team0: Port device team_slave_1 added [ 29.819076][ T4332] team0: Port device team_slave_1 added [ 29.824390][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.825560][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.829907][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.838039][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.839287][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.844732][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.850275][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.853677][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.855465][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.856665][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.861052][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.866428][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.867606][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.872559][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.883658][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.884890][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.889182][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.893684][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.894861][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.899025][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.903914][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.905160][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.906782][ T4338] device bridge_slave_0 entered promiscuous mode [ 29.914065][ T4339] team0: Port device team_slave_0 added [ 29.916634][ T4339] team0: Port device team_slave_1 added [ 29.917900][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.919226][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.920895][ T4338] device bridge_slave_1 entered promiscuous mode [ 29.972558][ T4332] device hsr_slave_0 entered promiscuous mode [ 30.011724][ T4332] device hsr_slave_1 entered promiscuous mode [ 30.054143][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.055385][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.059627][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.094367][ T4328] device hsr_slave_0 entered promiscuous mode [ 30.131600][ T4328] device hsr_slave_1 entered promiscuous mode [ 30.171470][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.172889][ T4328] Cannot create hsr debugfs directory [ 30.176974][ T4338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.181023][ T4338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.187143][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.188355][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.192968][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.232435][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.271636][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.311448][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.312758][ T4329] Cannot create hsr debugfs directory [ 30.325492][ T4338] team0: Port device team_slave_0 added [ 30.331044][ T4338] team0: Port device team_slave_1 added [ 30.394049][ T4339] device hsr_slave_0 entered promiscuous mode [ 30.433852][ T4339] device hsr_slave_1 entered promiscuous mode [ 30.471501][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.472886][ T4339] Cannot create hsr debugfs directory [ 30.477428][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.478714][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.483656][ T4338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.490302][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.492030][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.496249][ T4338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.562637][ T4338] device hsr_slave_0 entered promiscuous mode [ 30.601707][ T4338] device hsr_slave_1 entered promiscuous mode [ 30.641823][ T4338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.643182][ T4338] Cannot create hsr debugfs directory [ 30.696795][ T4332] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.746402][ T4332] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.772569][ T4332] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.821821][ T4332] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.890779][ T4328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.932511][ T4328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.985050][ T4328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.022697][ T4328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.073551][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.115572][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.152562][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.197864][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.236930][ T4339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.272660][ T4339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.332846][ T4339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.386064][ T4339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.459045][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.466862][ T4338] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.507043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.508921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.512211][ T4338] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.532070][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 31.533135][ T4336] Bluetooth: hci4: command 0x0409 tx timeout [ 31.534161][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 31.535178][ T4336] Bluetooth: hci0: command 0x0409 tx timeout [ 31.536173][ T4336] Bluetooth: hci1: command 0x0409 tx timeout [ 31.554925][ T4338] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.595516][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.597191][ T4338] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.640008][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.642098][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.643914][ T250] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.645002][ T250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.646612][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.649221][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.650774][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.653516][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.654800][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.658782][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.669029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.670799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.672775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.679795][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.685683][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.699374][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.700747][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.705777][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.707378][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.708627][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.710474][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.712912][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.725449][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.727079][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.728460][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.730322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.732356][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.733735][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.735134][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.736992][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.738661][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.740581][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.746861][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.748546][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.750255][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.760738][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.765061][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.766745][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.768274][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.770169][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.772011][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.780259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.782137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.785464][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.788707][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.795662][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.797322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.798798][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.800442][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.804918][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.810119][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.816209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.817757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.837120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.838899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.840461][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.841792][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.846444][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.848563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.862222][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.864006][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.865557][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.866985][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.868476][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.876852][ T4338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.880180][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.894219][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.896192][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.897749][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.899578][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.901167][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.908435][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.910037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.912590][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.914127][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.915367][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.916893][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.918873][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.929098][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.930858][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.933734][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.935027][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.936537][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.938346][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.940146][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.943410][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.945047][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.946556][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.948117][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.955477][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.957321][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.958986][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.960668][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.962717][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.964235][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.966285][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.970989][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.972914][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.974189][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.975913][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.980736][ T4338] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.986285][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 31.987681][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 31.994668][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.999530][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.012400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.014286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.015928][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.017210][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.033845][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.036879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.038535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.040912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.045344][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.046651][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.048209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.049921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.052276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.054039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.060169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.063271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.071872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.073887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.075524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.077108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.087135][ T4328] device veth0_vlan entered promiscuous mode [ 32.090793][ T4328] device veth1_vlan entered promiscuous mode [ 32.095471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.097205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.099112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.102760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.112048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.113926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.118518][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.122064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.123661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.127925][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.129673][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.143677][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.145477][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.147490][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.149265][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.150762][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.156508][ T4332] device veth0_vlan entered promiscuous mode [ 32.166628][ T4328] device veth0_macvtap entered promiscuous mode [ 32.168590][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.170089][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.174414][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.176102][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.179035][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.182993][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.194876][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.198894][ T4328] device veth1_macvtap entered promiscuous mode [ 32.200822][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.203118][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.204454][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.205818][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.207626][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.211377][ T4332] device veth1_vlan entered promiscuous mode [ 32.230352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.232534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.234091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.235735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.237606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.239180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.240805][ T4329] device veth0_vlan entered promiscuous mode [ 32.247450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.249277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.258074][ T4329] device veth1_vlan entered promiscuous mode [ 32.259823][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.261843][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.263215][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.264622][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.266198][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.269514][ T4332] device veth0_macvtap entered promiscuous mode [ 32.276020][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.278150][ T4332] device veth1_macvtap entered promiscuous mode [ 32.281285][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.283300][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.284793][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.286523][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.289913][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.300495][ T4329] device veth0_macvtap entered promiscuous mode [ 32.306266][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.309730][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.311577][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.313322][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.314967][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.316764][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.318336][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.319936][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.322948][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.324660][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.326222][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.329089][ T4328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.330740][ T4328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.333660][ T4328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.335119][ T4328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.337772][ T4339] device veth0_vlan entered promiscuous mode [ 32.342129][ T4339] device veth1_vlan entered promiscuous mode [ 32.345272][ T4329] device veth1_macvtap entered promiscuous mode [ 32.349559][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.351355][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.354852][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.358413][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.359980][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.362926][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.364521][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.369512][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.372799][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.374574][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.376480][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.379300][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.381160][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.383234][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.384990][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.387864][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.389690][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.393366][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.398433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.400294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.407598][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.409448][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.411109][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.422173][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.425276][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.435259][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.437454][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.449417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.451207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.458689][ T4332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.460305][ T4332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.464594][ T4332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.466173][ T4332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.477683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.479395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.484402][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.485887][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.487298][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.488721][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.496423][ T4339] device veth0_macvtap entered promiscuous mode [ 32.499162][ T4339] device veth1_macvtap entered promiscuous mode [ 32.503601][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.505032][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.507260][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.508880][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.511040][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.513999][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.515616][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.518707][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.520208][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.527053][ T4338] device veth0_vlan entered promiscuous mode [ 32.545171][ T4338] device veth1_vlan entered promiscuous mode [ 32.551000][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.554486][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.556175][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.557965][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.559667][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.561654][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.564190][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.574905][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.576685][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.578436][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.582214][ T284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.583398][ T284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.591269][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.593074][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.595394][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.597217][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.598899][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.600589][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.603796][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.605614][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.608062][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.615516][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.617401][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.624233][ T284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.625592][ T284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.626975][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.634752][ T4339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.636195][ T4339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.637598][ T4339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.639041][ T4339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.646252][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.647935][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.660544][ T284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.662224][ T284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.664498][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.686102][ T4338] device veth0_macvtap entered promiscuous mode [ 32.688874][ T4338] device veth1_macvtap entered promiscuous mode [ 32.705480][ T284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.706823][ T284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.708240][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.746661][ T27] audit: type=1326 audit(32.730:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.0.1" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 32.750998][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.752908][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.754382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.755534][ T27] audit: type=1326 audit(32.740:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.0.1" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 32.767212][ T27] audit: type=1326 audit(32.750:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.0.1" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 32.772475][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.774271][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.782195][ T27] audit: type=1326 audit(32.760:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.0.1" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb795c16c code=0x7ffc0000 [ 32.787322][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.789171][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.790974][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.798901][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.800798][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.803216][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.805799][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.806951][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.808741][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.810957][ T27] audit: type=1326 audit(32.790:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.0.1" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=130 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 32.821696][ T27] audit: type=1326 audit(32.800:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4413 comm="syz.0.1" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=93 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 32.829628][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.831035][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.835073][ T27] audit: type=1326 audit(32.810:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.0.1" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 32.838873][ T27] audit: type=1326 audit(32.810:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.0.1" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 32.843677][ T27] audit: type=1326 audit(32.810:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.0.1" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb879381c code=0x7ffc0000 [ 32.848287][ T27] audit: type=1326 audit(32.810:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4409 comm="syz.0.1" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 32.875069][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.876873][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.878481][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.880203][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.889480][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.893651][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.901266][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.903795][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.906409][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.907756][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.909237][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.910932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.926971][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.928362][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.929819][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.934822][ T4338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.936257][ T4338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.937727][ T4338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.939196][ T4338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.017044][ T4425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.018875][ T4425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.026954][ T4425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.029491][ T4425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.144402][ T284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.145876][ T284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.161178][ T284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.187749][ T284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.190169][ T284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.197775][ T4431] device syzkaller0 entered promiscuous mode [ 33.200550][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.233078][ T4425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.246225][ T4425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.358524][ T4449] Zero length message leads to an empty skb [ 33.436638][ T4461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.439225][ T4461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.524593][ T4464] loop0: detected capacity change from 0 to 164 [ 33.613963][ T4334] Bluetooth: hci1: command 0x041b tx timeout [ 33.615210][ T4334] Bluetooth: hci0: command 0x041b tx timeout [ 33.616336][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 33.617454][ T4334] Bluetooth: hci4: command 0x041b tx timeout [ 33.618465][ T4334] Bluetooth: hci3: command 0x041b tx timeout [ 33.801318][ T4488] device syzkaller0 entered promiscuous mode [ 33.841736][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 33.843557][ T4336] CPU: 0 PID: 4336 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 33.844733][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.846549][ T4336] Workqueue: hci2 hci_rx_work [ 33.847471][ T4336] Call trace: [ 33.848088][ T4336] dump_backtrace+0x1c4/0x1f0 [ 33.848922][ T4336] show_stack+0x2c/0x3c [ 33.849675][ T4336] __dump_stack+0x30/0x40 [ 33.850457][ T4336] dump_stack_lvl+0xf4/0x15c [ 33.851247][ T4336] dump_stack+0x1c/0x5c [ 33.851977][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 33.853053][ T4336] kobject_add_internal+0x5a8/0xb18 [ 33.854042][ T4336] kobject_add+0x144/0x20c [ 33.854825][ T4336] device_add+0x3dc/0xe4c [ 33.855589][ T4336] hci_conn_add_sysfs+0xb8/0x1bc [ 33.856480][ T4336] le_conn_complete_evt+0xd3c/0x1300 [ 33.857399][ T4336] hci_le_enh_conn_complete_evt+0x114/0x3b8 [ 33.858418][ T4336] hci_le_meta_evt+0x2c0/0x4a8 [ 33.859275][ T4336] hci_event_packet+0x64c/0xe60 [ 33.860152][ T4336] hci_rx_work+0x310/0xa70 [ 33.860958][ T4336] process_one_work+0x7e4/0x13bc [ 33.861860][ T4336] worker_thread+0x8cc/0xfe8 [ 33.862670][ T4336] kthread+0x254/0x2e0 [ 33.863408][ T4336] ret_from_fork+0x10/0x20 [ 33.866359][ T4336] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 33.868598][ T4336] Bluetooth: hci2: failed to register connection device [ 34.215051][ T4522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.216714][ T4522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.544728][ T4556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.66'. [ 34.546894][ T4556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.66'. [ 35.060798][ T4614] loop3: detected capacity change from 0 to 256 [ 35.068914][ T4614] ======================================================= [ 35.068914][ T4614] WARNING: The mand mount option has been deprecated and [ 35.068914][ T4614] and is ignored by this kernel. Remove the mand [ 35.068914][ T4614] option from the mount to silence this warning. [ 35.068914][ T4614] ======================================================= [ 35.089422][ T4614] exfat: Deprecated parameter 'utf8' [ 35.092989][ T4614] exFAT-fs (loop3): bogus fat length [ 35.094076][ T4614] exFAT-fs (loop3): failed to read boot sector [ 35.095030][ T4614] exFAT-fs (loop3): failed to recognize exfat type [ 35.497504][ T4665] device syzkaller0 entered promiscuous mode [ 35.668045][ T4689] loop4: detected capacity change from 0 to 512 [ 35.691769][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 35.692969][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 35.694058][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 35.695177][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 35.696209][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 35.704828][ T4689] EXT4-fs (loop4): Test dummy encryption mode enabled [ 35.742452][ T4689] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.125: inode #1: comm syz.4.125: iget: illegal inode # [ 35.745916][ T4689] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.125: error while reading EA inode 1 err=-117 [ 35.748403][ T4689] EXT4-fs (loop4): 1 orphan inode deleted [ 35.749966][ T4689] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 35.770164][ T4689] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.125: deleted inode referenced: 15 [ 35.812897][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 35.863794][ T4716] loop4: detected capacity change from 0 to 8 [ 36.039699][ T4735] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 37.001884][ T4757] syz.3.153 (4757): drop_caches: 0 [ 37.261212][ T4788] syz.4.166 (4788): drop_caches: 0 [ 37.366507][ T4782] loop3: detected capacity change from 0 to 1024 [ 37.406558][ T4782] hfsplus: invalid length 32517 has been corrected to 255 [ 37.530652][ T4815] loop0: detected capacity change from 0 to 16 [ 37.539190][ T4819] syz.3.180 (4819): drop_caches: 0 [ 37.545210][ T4815] erofs: (device loop0): mounted with root inode @ nid 36. [ 37.610576][ T4823] device syzkaller0 entered promiscuous mode [ 37.772929][ T4334] Bluetooth: hci1: command 0x0419 tx timeout [ 37.774145][ T4334] Bluetooth: hci0: command 0x0419 tx timeout [ 37.775192][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 37.776293][ T4334] Bluetooth: hci4: command 0x0419 tx timeout [ 37.777299][ T4334] Bluetooth: hci3: command 0x0419 tx timeout [ 37.847491][ T4852] syz.2.195 (4852): drop_caches: 0 [ 37.993684][ T4871] loop4: detected capacity change from 0 to 1024 [ 38.017607][ T4865] device syzkaller0 entered promiscuous mode [ 38.041274][ T4871] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.068326][ T4881] loop1: detected capacity change from 0 to 2048 [ 38.085493][ T4881] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=11586, location=11586 [ 38.105845][ T4881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 38.110619][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 38.127802][ T4883] device syzkaller0 entered promiscuous mode [ 38.218965][ T4890] syz.2.209 (4890): drop_caches: 0 [ 38.334556][ T4902] loop4: detected capacity change from 0 to 512 [ 38.395994][ T4911] loop1: detected capacity change from 0 to 1024 [ 38.410639][ T4902] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.456469][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 38.509096][ T4918] device syzkaller0 entered promiscuous mode [ 38.539018][ T4925] syz.4.222 (4925): drop_caches: 0 [ 49.504585][ T4980] usb usb7: usbfs: process 4980 (syz.2.240) did not claim interface 0 before use [ 49.586711][ T4998] syz.1.249 (4998): drop_caches: 0 [ 49.721020][ T5011] device syzkaller0 entered promiscuous mode [ 50.105684][ T5046] autofs4:pid:5046:autofs_fill_super: called with bogus options [ 60.935916][ T5078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.938409][ T5078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.961597][ T5080] syz.4.275 (5080): drop_caches: 0 [ 60.969967][ T5084] loop2: detected capacity change from 0 to 256 [ 61.097025][ T5102] loop2: detected capacity change from 0 to 512 [ 61.098908][ T5102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.105870][ T5102] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 61.122143][ T5102] EXT4-fs (loop2): 1 truncate cleaned up [ 61.123183][ T5102] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 61.604866][ T5117] device lo entered promiscuous mode [ 61.611172][ T5116] device lo left promiscuous mode [ 61.688188][ T5125] loop1: detected capacity change from 0 to 256 [ 61.692229][ T5125] exfat: Unknown parameter 'fm©Šgµ0^ask' [ 61.723430][ T5081] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 61.947109][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 62.039221][ T5145] syz.0.303 (5145): drop_caches: 0 [ 62.418852][ T5155] loop0: detected capacity change from 0 to 8 [ 62.429204][ T27] audit: type=1326 audit(62.410:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.0.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 62.436405][ T27] audit: type=1326 audit(62.420:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.0.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 62.446646][ T27] audit: type=1326 audit(62.420:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.0.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 62.458850][ T27] audit: type=1326 audit(62.430:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.0.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 62.463258][ T5155] loop0: detected capacity change from 0 to 2048 [ 62.467980][ T27] audit: type=1326 audit(62.430:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.0.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 62.472883][ T27] audit: type=1326 audit(62.430:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.0.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 62.478532][ T27] audit: type=1326 audit(62.430:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.0.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 62.484787][ T27] audit: type=1326 audit(62.430:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.0.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 62.489426][ T27] audit: type=1326 audit(62.430:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.0.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 62.495338][ T27] audit: type=1326 audit(62.430:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.0.307" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79792a8 code=0x7ffc0000 [ 62.508364][ T5155] Alternate GPT is invalid, using primary GPT. [ 62.509817][ T5155] loop0: p1 p2 p3 [ 62.609964][ T5073] udevd[5073]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 62.610001][ T5081] udevd[5081]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 62.614981][ T5082] udevd[5082]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 62.628946][ T5172] loop1: detected capacity change from 0 to 512 [ 62.643292][ T5161] tipc: Enabling of bearer rejected, failed to enable media [ 62.666883][ T5172] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.773618][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 62.867764][ T5187] loop4: detected capacity change from 0 to 2048 [ 62.884773][ T5187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 63.207354][ T5196] loop2: detected capacity change from 0 to 16 [ 63.230050][ T5196] erofs: (device loop2): mounted with root inode @ nid 36. [ 63.245938][ T5196] erofs: (device loop2): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 63.271539][ T5193] hub 5-0:1.0: USB hub found [ 63.273023][ T5193] hub 5-0:1.0: 8 ports detected [ 63.452057][ T5222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 63.553071][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 63.881938][ T5240] tipc: Started in network mode [ 63.883217][ T5240] tipc: Node identity ead22e923e8e, cluster identity 4711 [ 63.943679][ T5240] tipc: Enabled bearer , priority 0 [ 63.966440][ T5240] tipc: Resetting bearer [ 64.302154][ T5238] tipc: Disabling bearer [ 64.493320][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495920][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.612847][ T5283] "syz.2.346" (5283) uses obsolete ecb(arc4) skcipher [ 64.659032][ T5287] tipc: Started in network mode [ 64.659966][ T5287] tipc: Node identity 9e32b229c65b, cluster identity 4711 [ 64.661254][ T5287] tipc: Enabled bearer , priority 0 [ 64.668141][ T5287] tipc: Resetting bearer [ 64.742628][ T5285] tipc: Disabling bearer [ 64.793038][ T5297] loop1: detected capacity change from 0 to 2048 [ 64.796109][ T5297] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 64.843566][ T5297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.235853][ T5319] capability: warning: `syz.1.356' uses deprecated v2 capabilities in a way that may be insecure [ 65.963969][ T5340] netlink: 196 bytes leftover after parsing attributes in process `syz.2.365'. [ 66.000016][ T5344] loop0: detected capacity change from 0 to 256 [ 66.047550][ T5347] syz.2.369 uses obsolete (PF_INET,SOCK_PACKET) [ 66.650609][ T5376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 66.657178][ T5376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 66.702223][ T24] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 66.875357][ T5378] loop1: detected capacity change from 0 to 4096 [ 66.887325][ T24] usb 1-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 66.889454][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 66.893268][ T24] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 66.896728][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.911732][ T24] usb 1-1: config 0 descriptor?? [ 66.915980][ T5360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.922014][ T5378] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 66.969999][ T5378] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.381: Corrupt inode bitmap - block_group = 0, inode_bitmap = 3 [ 67.019386][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 67.026278][ T4329] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 67.032364][ T4329] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 67.037655][ T4329] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 67.062004][ T4329] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #4: comm syz-executor: mark_inode_dirty error [ 67.094919][ T5387] loop4: detected capacity change from 0 to 1024 [ 67.328170][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 67.329481][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 67.334546][ T24] usb 1-1: USB disconnect, device number 2 [ 67.454528][ T5413] netlink: 196 bytes leftover after parsing attributes in process `syz.1.395'. [ 67.500107][ T5419] tipc: Enabling of bearer rejected, failed to enable media [ 67.736451][ T5449] netlink: 196 bytes leftover after parsing attributes in process `syz.1.408'. [ 67.793720][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 67.824578][ T5452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'. [ 67.850405][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 67.975598][ T5464] 9pnet_fd: Insufficient options for proto=fd [ 68.193787][ T5465] process 'syz.0.413' launched './file1' with NULL argv: empty string added [ 68.317594][ T5472] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.489183][ T5471] tipc: Enabling of bearer rejected, failed to enable media [ 68.550182][ T5488] loop4: detected capacity change from 0 to 512 [ 68.575709][ T5488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.618059][ T5492] netlink: 196 bytes leftover after parsing attributes in process `syz.2.421'. [ 68.624156][ T5488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.657972][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 68.740253][ T5500] loop4: detected capacity change from 0 to 2048 [ 68.744322][ T5500] EXT4-fs: Ignoring removed i_version option [ 68.771994][ T5500] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 68.827825][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 68.858620][ T5513] loop4: detected capacity change from 0 to 128 [ 68.903390][ T5206] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 69.006206][ T5523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 69.012573][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 69.613928][ T1518] cfg80211: failed to load regulatory.db [ 69.857101][ T5554] loop0: detected capacity change from 0 to 128 [ 69.877578][ T5558] netlink: 196 bytes leftover after parsing attributes in process `syz.1.447'. [ 69.889065][ T5554] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 69.946371][ T5564] syz.0.445 (pid 5564) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 70.016527][ T5566] loop2: detected capacity change from 0 to 2048 [ 70.029115][ T5566] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.049201][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 70.214151][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 70.214841][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 70.385564][ T5596] netlink: 196 bytes leftover after parsing attributes in process `syz.0.459'. [ 70.434152][ T5601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 70.436827][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 70.898879][ T5626] loop1: detected capacity change from 0 to 1024 [ 70.953146][ T27] kauditd_printk_skb: 102 callbacks suppressed [ 70.953158][ T27] audit: type=1326 audit(70.940:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.4.474" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b792a8 code=0x7ffc0000 [ 70.960527][ T27] audit: type=1326 audit(70.940:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.4.474" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b792a8 code=0x7ffc0000 [ 70.962919][ T5631] netlink: 196 bytes leftover after parsing attributes in process `syz.0.473'. [ 70.976868][ T5630] loop4: detected capacity change from 0 to 512 [ 70.983764][ T5630] EXT4-fs: Ignoring removed nobh option [ 70.984910][ T27] audit: type=1326 audit(70.940:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.4.474" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b792a8 code=0x7ffc0000 [ 70.989034][ T27] audit: type=1326 audit(70.940:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.4.474" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff98b792a8 code=0x7ffc0000 [ 70.990261][ T5630] EXT4-fs (loop4): Test dummy encryption mode enabled [ 71.009250][ T5630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 71.011037][ T5630] System zones: 1-12 [ 71.014224][ T5630] EXT4-fs (loop4): orphan cleanup on readonly fs [ 71.019515][ T5630] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.474: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 71.025632][ T5630] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.4.474: ea_inode dec ref err=-117 [ 71.028635][ T5630] EXT4-fs (loop4): 1 orphan inode deleted [ 71.028997][ T27] audit: type=1326 audit(70.940:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.4.474" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b792a8 code=0x7ffc0000 [ 71.029823][ T5630] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 71.043848][ T27] audit: type=1326 audit(70.940:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.4.474" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b792a8 code=0x7ffc0000 [ 71.063203][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 71.064977][ T5636] loop0: detected capacity change from 0 to 256 [ 71.077974][ T27] audit: type=1326 audit(70.940:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.4.474" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b792a8 code=0x7ffc0000 [ 71.082942][ T5636] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 71.092394][ T27] audit: type=1326 audit(70.940:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.4.474" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff98b792a8 code=0x7ffc0000 [ 71.107649][ T27] audit: type=1326 audit(70.940:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.4.474" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff98b792a8 code=0x7ffc0000 [ 71.113587][ T5638] netlink: 'syz.4.477': attribute type 5 has an invalid length. [ 71.125722][ T27] audit: type=1326 audit(70.950:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5628 comm="syz.4.474" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff98b78fa0 code=0x7ffc0000 [ 71.135222][ T5640] binder: 5639:5640 tried to acquire reference to desc 0, got 1 instead [ 71.160296][ T22] binder: release 5639:5640 transaction 5 out, still active [ 71.183622][ T5644] netlink: 'syz.0.480': attribute type 2 has an invalid length. [ 71.222358][ T22] binder: undelivered TRANSACTION_COMPLETE [ 71.223611][ T22] binder: send failed reply for transaction 12 to 5639:5640 [ 71.225128][ T22] binder: undelivered TRANSACTION_COMPLETE [ 71.226148][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 71.227388][ T22] binder: send failed reply for transaction 5, target dead [ 71.400521][ T5666] loop0: detected capacity change from 0 to 2048 [ 71.407912][ T5666] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.084280][ T5685] usb usb7: usbfs: process 5685 (syz.1.493) did not claim interface 0 before use [ 72.138113][ T5689] loop1: detected capacity change from 0 to 1024 [ 72.143694][ T5689] EXT4-fs: Ignoring removed i_version option [ 72.155732][ T5689] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.165275][ T5689] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2805: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 72.184961][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 72.248860][ T5696] loop0: detected capacity change from 0 to 1024 [ 72.325011][ T5206] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.336216][ T5696] loop0: detected capacity change from 0 to 512 [ 72.337738][ T5696] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.344324][ T5696] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.345442][ T5696] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 72.348833][ T5696] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.497: attempt to clear invalid blocks 2 len 1 [ 72.355541][ T5696] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 72.358375][ T5696] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.497: invalid indirect mapped block 1819239214 (level 0) [ 72.361293][ T5696] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.497: invalid indirect mapped block 1819239214 (level 1) [ 72.367024][ T5696] EXT4-fs (loop0): 1 truncate cleaned up [ 72.367936][ T5696] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.380691][ T5696] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 72.382770][ T5696] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 72.384470][ T5696] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 72.395028][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 73.137746][ T5709] loop1: detected capacity change from 0 to 764 [ 73.140959][ T5709] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 82.464613][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.486'. [ 82.560251][ T5726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.560472][ T5725] loop0: detected capacity change from 0 to 736 [ 82.566606][ T5726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.102142][ T5756] syz.4.512 (5756): drop_caches: 0 [ 83.154603][ T5750] svc: failed to register lockdv1 RPC service (errno 111). [ 83.156895][ T5750] lockd_up: makesock failed, error=-111 [ 83.656966][ T5781] FAULT_INJECTION: forcing a failure. [ 83.656966][ T5781] name failslab, interval 1, probability 0, space 0, times 1 [ 83.660279][ T5781] CPU: 0 PID: 5781 Comm: syz.0.517 Not tainted syzkaller #0 [ 83.661613][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 83.663552][ T5781] Call trace: [ 83.664196][ T5781] dump_backtrace+0x1c4/0x1f0 [ 83.665167][ T5781] show_stack+0x2c/0x3c [ 83.665981][ T5781] __dump_stack+0x30/0x40 [ 83.666841][ T5781] dump_stack_lvl+0xf4/0x15c [ 83.667742][ T5781] dump_stack+0x1c/0x5c [ 83.668576][ T5781] should_fail_ex+0x3cc/0x524 [ 83.669519][ T5781] __should_failslab+0xc0/0x11c [ 83.670447][ T5781] should_failslab+0x10/0x28 [ 83.671330][ T5781] __kmem_cache_alloc_node+0x7c/0x318 [ 83.672372][ T5781] __kmalloc+0xc4/0x180 [ 83.673196][ T5781] memcg_list_lru_alloc+0x280/0x8bc [ 83.674209][ T5781] slab_pre_alloc_hook+0x2cc/0x31c [ 83.675195][ T5781] kmem_cache_alloc_lru+0x60/0x284 [ 83.676180][ T5781] proc_alloc_inode+0x2c/0xb8 [ 83.677108][ T5781] new_inode_pseudo+0x68/0x1cc [ 83.678043][ T5781] new_inode+0x38/0x174 [ 83.678840][ T5781] proc_get_inode+0x30/0x624 [ 83.679704][ T5781] proc_fill_super+0x40c/0x6ac [ 83.680606][ T5781] get_tree_nodev+0xb4/0x16c [ 83.681493][ T5781] proc_get_tree+0x28/0x38 [ 83.682356][ T5781] vfs_get_tree+0x90/0x278 [ 83.683209][ T5781] do_new_mount+0x228/0x804 [ 83.684041][ T5781] path_mount+0x5ac/0xe6c [ 83.684860][ T5781] __arm64_sys_mount+0x4a0/0x5a0 [ 83.685755][ T5781] invoke_syscall+0x98/0x290 [ 83.686617][ T5781] el0_svc_common+0x13c/0x258 [ 83.687494][ T5781] do_el0_svc+0x5c/0x134 [ 83.688287][ T5781] el0_svc+0x58/0x128 [ 83.689043][ T5781] el0t_64_sync_handler+0x84/0xf0 [ 83.689971][ T5781] el0t_64_sync+0x18c/0x190 [ 83.710820][ T5781] proc_fill_super: get root inode failed [ 83.738222][ T5784] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 83.929507][ T5804] FAULT_INJECTION: forcing a failure. [ 83.929507][ T5804] name failslab, interval 1, probability 0, space 0, times 0 [ 83.932161][ T5804] CPU: 1 PID: 5804 Comm: syz.1.526 Not tainted syzkaller #0 [ 83.933380][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 83.935105][ T5804] Call trace: [ 83.935707][ T5804] dump_backtrace+0x1c4/0x1f0 [ 83.936542][ T5804] show_stack+0x2c/0x3c [ 83.937287][ T5804] __dump_stack+0x30/0x40 [ 83.938070][ T5804] dump_stack_lvl+0xf4/0x15c [ 83.938896][ T5804] dump_stack+0x1c/0x5c [ 83.939615][ T5804] should_fail_ex+0x3cc/0x524 [ 83.940436][ T5804] __should_failslab+0xc0/0x11c [ 83.941273][ T5804] should_failslab+0x10/0x28 [ 83.942119][ T5804] kmem_cache_alloc+0x88/0x310 [ 83.943076][ T5804] __sigqueue_alloc+0x3e0/0x4e4 [ 83.944053][ T5804] __send_signal_locked+0x1d8/0xc88 [ 83.945097][ T5804] do_notify_parent+0x9bc/0xbe4 [ 83.946056][ T5804] release_task+0x11d0/0x1510 [ 83.946996][ T5804] do_exit+0x10bc/0x19ac [ 83.947835][ T5804] do_group_exit+0x198/0x238 [ 83.948734][ T5804] get_signal+0x11f4/0x133c [ 83.949589][ T5804] do_notify_resume+0x364/0x2c84 [ 83.950533][ T5804] el0_svc+0x98/0x128 [ 83.951250][ T5804] el0t_64_sync_handler+0x84/0xf0 [ 83.952165][ T5804] el0t_64_sync+0x18c/0x190 [ 84.046019][ T5812] device syzkaller0 entered promiscuous mode [ 84.052585][ T5817] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(8) [ 84.200538][ T5831] syz.4.535 (5831): drop_caches: 0 [ 84.247507][ T5836] loop0: detected capacity change from 0 to 512 [ 84.262507][ T5836] EXT4-fs: inline encryption not supported [ 84.283763][ T5829] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 84.284200][ T5836] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.299510][ T5836] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.321850][ T5838] FAULT_INJECTION: forcing a failure. [ 84.321850][ T5838] name failslab, interval 1, probability 0, space 0, times 0 [ 84.324148][ T5838] CPU: 1 PID: 5838 Comm: syz.4.538 Not tainted syzkaller #0 [ 84.325345][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 84.326952][ T5838] Call trace: [ 84.327485][ T5838] dump_backtrace+0x1c4/0x1f0 [ 84.328283][ T5838] show_stack+0x2c/0x3c [ 84.328979][ T5838] __dump_stack+0x30/0x40 [ 84.329691][ T5838] dump_stack_lvl+0xf4/0x15c [ 84.330516][ T5838] dump_stack+0x1c/0x5c [ 84.331262][ T5838] should_fail_ex+0x3cc/0x524 [ 84.332065][ T5838] __should_failslab+0xc0/0x11c [ 84.333000][ T5838] should_failslab+0x10/0x28 [ 84.333852][ T5838] kmem_cache_alloc_node+0x8c/0x344 [ 84.334840][ T5838] __alloc_skb+0x128/0x728 [ 84.335647][ T5838] tipc_buf_acquire+0x34/0xe8 [ 84.336500][ T5838] tipc_named_publish+0x1fc/0x638 [ 84.337431][ T5838] tipc_nametbl_publish+0xe8/0x1e4 [ 84.338399][ T5838] tipc_sk_publish+0x17c/0x384 [ 84.339248][ T5838] tipc_sk_join+0x2d4/0x508 [ 84.340028][ T5838] tipc_setsockopt+0x3b8/0x7a8 [ 84.340900][ T5838] __sys_setsockopt+0x2fc/0x50c [ 84.341801][ T5838] __arm64_sys_setsockopt+0xc0/0xdc [ 84.342753][ T5838] invoke_syscall+0x98/0x290 [ 84.343596][ T5838] el0_svc_common+0x13c/0x258 [ 84.344463][ T5838] do_el0_svc+0x5c/0x134 [ 84.345202][ T5838] el0_svc+0x58/0x128 [ 84.345924][ T5838] el0t_64_sync_handler+0x84/0xf0 [ 84.346849][ T5838] el0t_64_sync+0x18c/0x190 [ 84.347794][ T5838] tipc: Publication distribution failure [ 84.355753][ T5836] EXT4-fs (loop0): 1 truncate cleaned up [ 84.356718][ T5836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.463102][ T5850] FAULT_INJECTION: forcing a failure. [ 84.463102][ T5850] name fail_futex, interval 1, probability 0, space 0, times 1 [ 84.468978][ T5850] CPU: 1 PID: 5850 Comm: syz.1.542 Not tainted syzkaller #0 [ 84.470395][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 84.472135][ T5850] Call trace: [ 84.472733][ T5850] dump_backtrace+0x1c4/0x1f0 [ 84.473602][ T5850] show_stack+0x2c/0x3c [ 84.474363][ T5850] __dump_stack+0x30/0x40 [ 84.475123][ T5850] dump_stack_lvl+0xf4/0x15c [ 84.475956][ T5850] dump_stack+0x1c/0x5c [ 84.476702][ T5850] should_fail_ex+0x3cc/0x524 [ 84.477562][ T5850] should_fail+0x14/0x24 [ 84.478334][ T5850] get_futex_key+0x904/0xfb0 [ 84.479185][ T5850] futex_wait_setup+0xbc/0x320 [ 84.480029][ T5850] futex_wait+0x164/0x424 [ 84.480769][ T5850] do_futex+0x2e8/0x340 [ 84.481467][ T5850] __arm64_sys_futex+0x390/0x414 [ 84.482349][ T5850] invoke_syscall+0x98/0x290 [ 84.483151][ T5850] el0_svc_common+0x13c/0x258 [ 84.483986][ T5850] do_el0_svc+0x5c/0x134 [ 84.484717][ T5850] el0_svc+0x58/0x128 [ 84.485410][ T5850] el0t_64_sync_handler+0x84/0xf0 [ 84.486307][ T5850] el0t_64_sync+0x18c/0x190 [ 84.495310][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 84.529423][ T5857] FAULT_INJECTION: forcing a failure. [ 84.529423][ T5857] name failslab, interval 1, probability 0, space 0, times 0 [ 84.539153][ T5857] CPU: 1 PID: 5857 Comm: syz.0.544 Not tainted syzkaller #0 [ 84.540587][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 84.542506][ T5857] Call trace: [ 84.543100][ T5857] dump_backtrace+0x1c4/0x1f0 [ 84.543945][ T5857] show_stack+0x2c/0x3c [ 84.544695][ T5857] __dump_stack+0x30/0x40 [ 84.545503][ T5857] dump_stack_lvl+0xf4/0x15c [ 84.546338][ T5857] dump_stack+0x1c/0x5c [ 84.547114][ T5857] should_fail_ex+0x3cc/0x524 [ 84.547953][ T5857] __should_failslab+0xc0/0x11c [ 84.548834][ T5857] should_failslab+0x10/0x28 [ 84.549670][ T5857] __kmem_cache_alloc_node+0x7c/0x318 [ 84.550655][ T5857] kmalloc_trace+0x48/0x94 [ 84.551459][ T5857] cuse_channel_open+0x64/0x5c0 [ 84.552353][ T5857] misc_open+0x310/0x388 [ 84.553142][ T5857] chrdev_open+0x3d0/0x51c [ 84.553963][ T5857] do_dentry_open+0x738/0xf8c [ 84.554800][ T5857] vfs_open+0x7c/0x90 [ 84.555524][ T5857] path_openat+0x1fc0/0x27a0 [ 84.556336][ T5857] do_filp_open+0x198/0x38c [ 84.557124][ T5857] do_sys_openat2+0x134/0x3fc [ 84.557972][ T5857] __arm64_sys_openat+0x11c/0x150 [ 84.558884][ T5857] invoke_syscall+0x98/0x290 [ 84.559692][ T5857] el0_svc_common+0x13c/0x258 [ 84.560529][ T5857] do_el0_svc+0x5c/0x134 [ 84.561286][ T5857] el0_svc+0x58/0x128 [ 84.562009][ T5857] el0t_64_sync_handler+0x84/0xf0 [ 84.562913][ T5857] el0t_64_sync+0x18c/0x190 [ 85.086674][ T5920] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 85.127322][ T5926] syz.2.563 (5926): drop_caches: 0 [ 85.180542][ T5934] FAULT_INJECTION: forcing a failure. [ 85.180542][ T5934] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 85.195296][ T5934] CPU: 0 PID: 5934 Comm: syz.1.565 Not tainted syzkaller #0 [ 85.196616][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 85.198494][ T5934] Call trace: [ 85.199071][ T5934] dump_backtrace+0x1c4/0x1f0 [ 85.199923][ T5934] show_stack+0x2c/0x3c [ 85.200689][ T5934] __dump_stack+0x30/0x40 [ 85.201491][ T5934] dump_stack_lvl+0xf4/0x15c [ 85.202428][ T5934] dump_stack+0x1c/0x5c [ 85.203225][ T5934] should_fail_ex+0x3cc/0x524 [ 85.204132][ T5934] should_fail_alloc_page+0x74/0xb8 [ 85.205079][ T5934] prepare_alloc_pages+0x1b8/0x4f0 [ 85.206047][ T5934] __alloc_pages+0x134/0x544 [ 85.207006][ T5934] alloc_pages+0x434/0x6fc [ 85.207842][ T5934] get_zeroed_page+0x20/0x8c [ 85.208684][ T5934] __pud_alloc+0x48/0x1b8 [ 85.209490][ T5934] handle_mm_fault+0x1adc/0x3018 [ 85.210425][ T5934] __get_user_pages+0x340/0x770 [ 85.211324][ T5934] __get_user_pages_remote+0x188/0x684 [ 85.212328][ T5934] get_user_pages_remote+0x80/0xbc [ 85.213283][ T5934] get_arg_page+0x18c/0x3b4 [ 85.214129][ T5934] copy_string_kernel+0x15c/0x254 [ 85.215068][ T5934] do_execveat_common+0x508/0x7fc [ 85.215976][ T5934] __arm64_sys_execve+0x98/0xb0 [ 85.216861][ T5934] invoke_syscall+0x98/0x290 [ 85.217661][ T5934] el0_svc_common+0x13c/0x258 [ 85.218503][ T5934] do_el0_svc+0x5c/0x134 [ 85.219238][ T5934] el0_svc+0x58/0x128 [ 85.219920][ T5934] el0t_64_sync_handler+0x84/0xf0 [ 85.220814][ T5934] el0t_64_sync+0x18c/0x190 [ 85.330178][ T5948] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4 [ 85.337677][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.348246][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.123427][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.129338][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.197680][ T6009] tipc: Enabling of bearer rejected, failed to enable media [ 86.413373][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.591'. [ 86.425376][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 86.617005][ T6039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.620967][ T6039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.817694][ T6058] tipc: Enabling of bearer rejected, failed to enable media [ 86.828112][ T6039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.831209][ T6039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.959966][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.961929][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.842100][ T6081] random: crng reseeded on system resumption [ 87.852793][ T6083] overlayfs: failed to clone upperpath [ 87.910304][ T6089] FAULT_INJECTION: forcing a failure. [ 87.910304][ T6089] name failslab, interval 1, probability 0, space 0, times 0 [ 87.913501][ T6089] CPU: 0 PID: 6089 Comm: syz.0.614 Not tainted syzkaller #0 [ 87.914774][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 87.916601][ T6089] Call trace: [ 87.917190][ T6089] dump_backtrace+0x1c4/0x1f0 [ 87.918052][ T6089] show_stack+0x2c/0x3c [ 87.918831][ T6089] __dump_stack+0x30/0x40 [ 87.919651][ T6089] dump_stack_lvl+0xf4/0x15c [ 87.920497][ T6089] dump_stack+0x1c/0x5c [ 87.921249][ T6089] should_fail_ex+0x3cc/0x524 [ 87.922113][ T6089] __should_failslab+0xc0/0x11c [ 87.922999][ T6089] should_failslab+0x10/0x28 [ 87.923824][ T6089] slab_pre_alloc_hook+0x6c/0x31c [ 87.924763][ T6089] kmem_cache_alloc_lru+0x60/0x284 [ 87.925746][ T6089] __d_alloc+0x40/0x68c [ 87.926553][ T6089] d_alloc_pseudo+0x28/0x8c [ 87.927428][ T6089] alloc_file_pseudo+0xd8/0x1f4 [ 87.928354][ T6089] sock_alloc_file+0xb4/0x234 [ 87.929261][ T6089] __sys_socket+0x138/0x1b0 [ 87.930143][ T6089] __arm64_sys_socket+0x7c/0x94 [ 87.931085][ T6089] invoke_syscall+0x98/0x290 [ 87.931988][ T6089] el0_svc_common+0x13c/0x258 [ 87.932864][ T6089] do_el0_svc+0x5c/0x134 [ 87.933686][ T6089] el0_svc+0x58/0x128 [ 87.934450][ T6089] el0t_64_sync_handler+0x84/0xf0 [ 87.935392][ T6089] el0t_64_sync+0x18c/0x190 [ 88.023081][ T6096] netlink: 132 bytes leftover after parsing attributes in process `syz.0.618'. [ 88.025446][ T6096] netlink: 196 bytes leftover after parsing attributes in process `syz.0.618'. [ 88.112604][ T6102] Set syz1 is full, maxelem 1029 reached [ 88.289114][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 88.289125][ T27] audit: type=1400 audit(88.270:157): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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netlink: 20 bytes leftover after parsing attributes in process `syz.3.630'. [ 88.420501][ T6138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.429180][ T6138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.455069][ T6140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.634'. [ 88.458346][ T6140] netlink: 196 bytes leftover after parsing attributes in process `syz.3.634'. [ 88.462393][ T6142] loop4: detected capacity change from 0 to 512 [ 88.482101][ T6142] EXT4-fs: inline encryption not supported [ 88.487000][ T6142] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.514671][ T6142] EXT4-fs (loop4): 1 truncate cleaned up [ 88.515939][ T6142] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.577818][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 88.608996][ T6155] tipc: Enabling of bearer rejected, failed to enable media [ 88.879777][ T6189] netlink: 132 bytes leftover after parsing attributes in process `syz.1.648'. [ 88.886849][ T6189] netlink: 196 bytes leftover after parsing attributes in process `syz.1.648'. [ 88.949619][ T6198] tipc: Enabled bearer , priority 0 [ 88.964094][ T6198] tipc: Resetting bearer [ 88.970540][ T6201] netlink: 132 bytes leftover after parsing attributes in process `syz.0.662'. [ 88.977386][ T6201] netlink: 196 bytes leftover after parsing attributes in process `syz.0.662'. [ 88.979253][ T6202] loop2: detected capacity change from 0 to 736 [ 89.034519][ T6196] tipc: Disabling bearer [ 89.790695][ T6245] netlink: 132 bytes leftover after parsing attributes in process `syz.3.666'. [ 89.864919][ T6247] tipc: Enabling of bearer rejected, failed to enable media [ 90.284262][ T6286] device syzkaller0 entered promiscuous mode [ 90.288288][ T6286] tipc: Enabled bearer , priority 0 [ 90.295912][ T6286] tipc: Resetting bearer [ 90.305734][ T6285] tipc: Resetting bearer [ 90.363920][ T6285] tipc: Disabling bearer [ 90.612579][ T4377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.616358][ T4377] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.632417][ T4377] logitech-hidpp-device 0003:046D:C082.0002: Device not connected [ 90.764171][ T6327] device syzkaller0 entered promiscuous mode [ 90.769874][ T6327] tipc: Enabled bearer , priority 0 [ 90.803268][ T6327] tipc: Resetting bearer [ 90.813361][ T6326] tipc: Resetting bearer [ 90.852216][ T6326] tipc: Disabling bearer [ 90.858233][ T6336] FAULT_INJECTION: forcing a failure. [ 90.858233][ T6336] name failslab, interval 1, probability 0, space 0, times 0 [ 90.861006][ T6336] CPU: 0 PID: 6336 Comm: syz.4.701 Not tainted syzkaller #0 [ 90.862390][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 90.864258][ T6336] Call trace: [ 90.864831][ T6336] dump_backtrace+0x1c4/0x1f0 [ 90.865684][ T6336] show_stack+0x2c/0x3c [ 90.866409][ T6336] __dump_stack+0x30/0x40 [ 90.867152][ T6336] dump_stack_lvl+0xf4/0x15c [ 90.867946][ T6336] dump_stack+0x1c/0x5c [ 90.868699][ T6336] should_fail_ex+0x3cc/0x524 [ 90.869544][ T6336] __should_failslab+0xc0/0x11c [ 90.870412][ T6336] should_failslab+0x10/0x28 [ 90.871207][ T6336] __kmem_cache_alloc_node+0x7c/0x318 [ 90.872128][ T6336] kmalloc_trace+0x48/0x94 [ 90.872876][ T6336] alloc_mnt_ns+0xc0/0x3b4 [ 90.873668][ T6336] __arm64_sys_fsmount+0x528/0x8c4 [ 90.874620][ T6336] invoke_syscall+0x98/0x290 [ 90.875449][ T6336] el0_svc_common+0x13c/0x258 [ 90.876246][ T6336] do_el0_svc+0x5c/0x134 [ 90.876998][ T6336] el0_svc+0x58/0x128 [ 90.877692][ T6336] el0t_64_sync_handler+0x84/0xf0 [ 90.878579][ T6336] el0t_64_sync+0x18c/0x190 [ 90.974721][ T6345] tipc: New replicast peer: 172.20.20.187 [ 90.977656][ T6345] tipc: Enabled bearer , priority 10 [ 91.005014][ T6350] binder: 6349:6350 tried to acquire reference to desc 0, got 1 instead [ 91.006924][ T6350] binder: 6349:6350 unknown command 1074553620 [ 91.008060][ T6350] binder: 6349:6350 ioctl c0306201 200001c0 returned -22 [ 91.274601][ T6376] device syzkaller0 entered promiscuous mode [ 91.278103][ T6376] tipc: Enabled bearer , priority 0 [ 91.285320][ T6376] tipc: Resetting bearer [ 91.288003][ T6375] tipc: Resetting bearer [ 91.612203][ T6375] tipc: Disabling bearer [ 91.798406][ T6401] FAULT_INJECTION: forcing a failure. [ 91.798406][ T6401] name failslab, interval 1, probability 0, space 0, times 0 [ 91.801123][ T6401] CPU: 0 PID: 6401 Comm: syz.4.718 Not tainted syzkaller #0 [ 91.802443][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 91.804274][ T6401] Call trace: [ 91.804861][ T6401] dump_backtrace+0x1c4/0x1f0 [ 91.805718][ T6401] show_stack+0x2c/0x3c [ 91.806446][ T6401] __dump_stack+0x30/0x40 [ 91.807204][ T6401] dump_stack_lvl+0xf4/0x15c [ 91.808036][ T6401] dump_stack+0x1c/0x5c [ 91.808762][ T6401] should_fail_ex+0x3cc/0x524 [ 91.809636][ T6401] __should_failslab+0xc0/0x11c [ 91.810538][ T6401] should_failslab+0x10/0x28 [ 91.811332][ T6401] kmem_cache_alloc+0x88/0x310 [ 91.812331][ T6401] vm_area_dup+0x30/0x1c4 [ 91.813260][ T6401] copy_mm+0x828/0x1208 [ 91.814154][ T6401] copy_process+0x16d8/0x38b4 [ 91.815096][ T6401] kernel_clone+0x1ec/0x938 [ 91.815977][ T6401] __arm64_sys_clone3+0x354/0x388 [ 91.816945][ T6401] invoke_syscall+0x98/0x290 [ 91.817840][ T6401] el0_svc_common+0x13c/0x258 [ 91.818772][ T6401] do_el0_svc+0x5c/0x134 [ 91.819593][ T6401] el0_svc+0x58/0x128 [ 91.820320][ T6401] el0t_64_sync_handler+0x84/0xf0 [ 91.821247][ T6401] el0t_64_sync+0x18c/0x190 [ 91.929511][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.932379][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.953729][ T6418] device syzkaller0 entered promiscuous mode [ 91.960594][ T6418] tipc: Enabled bearer , priority 0 [ 91.970770][ T6418] tipc: Resetting bearer [ 91.973540][ T6417] tipc: Resetting bearer [ 92.004727][ T6417] tipc: Disabling bearer [ 92.214931][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.216657][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.625601][ T4377] tipc: Node number set to 1483321897 [ 92.698872][ T6470] tipc: Enabling of bearer rejected, failed to enable media [ 93.658484][ T6509] device syzkaller0 entered promiscuous mode [ 93.663928][ T6509] tipc: Started in network mode [ 93.664832][ T6509] tipc: Node identity aaccccc0ec7b, cluster identity 4711 [ 93.668558][ T6509] tipc: Enabled bearer , priority 0 [ 93.681295][ T6509] tipc: Resetting bearer [ 93.715159][ T6508] tipc: Resetting bearer [ 93.762052][ T6508] tipc: Disabling bearer [ 94.085124][ T6541] device syzkaller0 entered promiscuous mode [ 94.088266][ T6541] tipc: Enabled bearer , priority 0 [ 94.100890][ T6541] tipc: Resetting bearer [ 94.108467][ T6540] tipc: Resetting bearer [ 94.165526][ T6540] tipc: Disabling bearer [ 94.596752][ T6594] __nla_validate_parse: 12 callbacks suppressed [ 94.596764][ T6594] netlink: 72 bytes leftover after parsing attributes in process `syz.1.800'. [ 94.600330][ T6594] netlink: 196 bytes leftover after parsing attributes in process `syz.1.800'. [ 94.796874][ T6613] bpf_jit: unknown opcode 06 [ 94.909638][ T6615] loop1: detected capacity change from 0 to 16 [ 94.918841][ T6615] erofs: (device loop1): mounted with root inode @ nid 36. [ 94.925844][ T6615] syz.1.810: attempt to access beyond end of device [ 94.925844][ T6615] loop1: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 94.928925][ T6615] syz.1.810: attempt to access beyond end of device [ 94.928925][ T6615] loop1: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 94.935827][ T6615] ================================================================== [ 94.937230][ T6615] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x39c/0x494 [ 94.938725][ T6615] Read of size 4096 at addr ffff0000f3392000 by task syz.1.810/6615 [ 94.940136][ T6615] [ 94.940544][ T6615] CPU: 0 PID: 6615 Comm: syz.1.810 Not tainted syzkaller #0 [ 94.941821][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 94.943496][ T6615] Call trace: [ 94.944085][ T6615] dump_backtrace+0x1c4/0x1f0 [ 94.944892][ T6615] show_stack+0x2c/0x3c [ 94.945599][ T6615] __dump_stack+0x30/0x40 [ 94.946365][ T6615] dump_stack_lvl+0xf4/0x15c [ 94.947175][ T6615] print_address_description+0x88/0x218 [ 94.948181][ T6615] print_report+0x50/0x68 [ 94.948948][ T6615] kasan_report+0xa8/0xfc [ 94.949711][ T6615] kasan_check_range+0x258/0x290 [ 94.950559][ T6615] memcpy+0x48/0x90 [ 94.951233][ T6615] z_erofs_transform_plain+0x39c/0x494 [ 94.952196][ T6615] z_erofs_decompress+0x9c/0xd4 [ 94.953033][ T6615] z_erofs_decompress_queue+0x103c/0x1bf4 [ 94.954036][ T6615] z_erofs_runqueue+0x1540/0x16a8 [ 94.954938][ T6615] z_erofs_read_folio+0x2dc/0x5cc [ 94.955842][ T6615] filemap_read_folio+0x134/0x384 [ 94.956886][ T6615] filemap_fault+0x990/0xe98 [ 94.957789][ T6615] __do_fault+0x11c/0x3d8 [ 94.958632][ T6615] handle_mm_fault+0x1d04/0x3018 [ 94.959591][ T6615] do_page_fault+0x310/0x99c [ 94.960500][ T6615] do_translation_fault+0x94/0xc8 [ 94.961458][ T6615] do_mem_abort+0x70/0x198 [ 94.962362][ T6615] el1_abort+0x3c/0x5c [ 94.963138][ T6615] el1h_64_sync_handler+0x50/0xac [ 94.964204][ T6615] el1h_64_sync+0x64/0x68 [ 94.965094][ T6615] strncpy_from_user+0x264/0x59c [ 94.966094][ T6615] getname_flags+0xec/0x458 [ 94.966945][ T6615] getname+0x28/0x38 [ 94.967613][ T6615] do_sys_openat2+0xdc/0x3fc [ 94.968444][ T6615] __arm64_sys_openat+0x11c/0x150 [ 94.969309][ T6615] invoke_syscall+0x98/0x290 [ 94.970153][ T6615] el0_svc_common+0x13c/0x258 [ 94.970996][ T6615] do_el0_svc+0x5c/0x134 [ 94.971753][ T6615] el0_svc+0x58/0x128 [ 94.972469][ T6615] el0t_64_sync_handler+0x84/0xf0 [ 94.973342][ T6615] el0t_64_sync+0x18c/0x190 [ 94.974163][ T6615] [ 94.974576][ T6615] Allocated by task 4339: [ 94.975345][ T6615] kasan_set_track+0x4c/0x80 [ 94.976157][ T6615] kasan_save_alloc_info+0x24/0x30 [ 94.977035][ T6615] __kasan_slab_alloc+0x70/0x88 [ 94.977863][ T6615] slab_post_alloc_hook+0x74/0x430 [ 94.978778][ T6615] kmem_cache_alloc+0x234/0x310 [ 94.979637][ T6615] __kernfs_new_node+0xec/0x5fc [ 94.980536][ T6615] kernfs_new_node+0x120/0x230 [ 94.981433][ T6615] __kernfs_create_file+0x60/0x2e0 [ 94.982372][ T6615] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 94.983367][ T6615] internal_create_group+0x3e8/0xb24 [ 94.984302][ T6615] sysfs_create_group+0x2c/0x3c [ 94.985179][ T6615] netdev_queue_update_kobjects+0x204/0x444 [ 94.986243][ T6615] netdev_register_kobject+0x240/0x2f4 [ 94.987248][ T6615] register_netdevice+0xf28/0x1650 [ 94.988208][ T6615] register_vlan_dev+0x350/0x734 [ 94.989130][ T6615] vlan_newlink+0x398/0x4f4 [ 94.989954][ T6615] rtnl_newlink+0x10b4/0x1af0 [ 94.990766][ T6615] rtnetlink_rcv_msg+0x694/0xcc4 [ 94.991634][ T6615] netlink_rcv_skb+0x220/0x3ec [ 94.992523][ T6615] rtnetlink_rcv+0x28/0x38 [ 94.993317][ T6615] netlink_unicast+0x5fc/0x80c [ 94.994249][ T6615] netlink_sendmsg+0x6f0/0x9d8 [ 94.995061][ T6615] __sys_sendto+0x324/0x440 [ 94.995850][ T6615] __arm64_sys_sendto+0xe4/0x104 [ 94.996722][ T6615] invoke_syscall+0x98/0x290 [ 94.997542][ T6615] el0_svc_common+0x13c/0x258 [ 94.998374][ T6615] do_el0_svc+0x5c/0x134 [ 94.999162][ T6615] el0_svc+0x58/0x128 [ 94.999882][ T6615] el0t_64_sync_handler+0x84/0xf0 [ 95.000775][ T6615] el0t_64_sync+0x18c/0x190 [ 95.001576][ T6615] [ 95.001988][ T6615] The buggy address belongs to the object at ffff0000f3392000 [ 95.001988][ T6615] which belongs to the cache kernfs_node_cache of size 168 [ 95.004563][ T6615] The buggy address is located 0 bytes inside of [ 95.004563][ T6615] 168-byte region [ffff0000f3392000, ffff0000f33920a8) [ 95.006949][ T6615] [ 95.007347][ T6615] The buggy address belongs to the physical page: [ 95.008502][ T6615] page:000000002583e5be refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x133392 [ 95.010283][ T6615] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 95.011658][ T6615] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c0858a80 [ 95.013219][ T6615] raw: 0000000000000000 0000000000110011 00000001ffffffff 0000000000000000 [ 95.014755][ T6615] page dumped because: kasan: bad access detected [ 95.015927][ T6615] [ 95.016367][ T6615] Memory state around the buggy address: [ 95.017363][ T6615] ffff0000f3391f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.018812][ T6615] ffff0000f3392000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.020224][ T6615] >ffff0000f3392080: 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 [ 95.021661][ T6615] ^ [ 95.022607][ T6615] ffff0000f3392100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.024069][ T6615] ffff0000f3392180: 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 00 00 [ 95.025537][ T6615] ================================================================== [ 95.027614][ T6615] Disabling lock debugging due to kernel taint