last executing test programs: 5.087548704s ago: executing program 1 (id=1971): socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80001) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4.987501237s ago: executing program 1 (id=1972): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1000000, r3}, 0x10) 4.065432055s ago: executing program 1 (id=1976): socket(0x10, 0x803, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x401, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000005c0)={'wg0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wg2\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @remote}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 3.977080718s ago: executing program 4 (id=1977): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) unshare(0x20000100) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xf}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x305}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044010}, 0x4004004) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x37, 0xa01, 0x0, 0x4, {}, [@typed={0x8, 0xe0, 0x0, 0x0, @uid}]}, 0x1c}}, 0x4008080) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x1) syz_usb_connect(0x3, 0x4f, &(0x7f0000001040)=ANY=[@ANYBLOB="120100036e9a83108606174001000102030109023d00010c021000090460ff049d5f360609050701100008d740090504000004060f2fd2c54a1fff0327fe0507250180060500090508081000060403"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x4af, r2}, 0x38) 3.840096482s ago: executing program 3 (id=1979): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24024815}, 0x0) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4881}, 0x0) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 3.651923748s ago: executing program 1 (id=1980): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x880) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) 3.499048162s ago: executing program 2 (id=1982): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) connect$inet6(r1, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) 3.355898357s ago: executing program 4 (id=1983): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000010010000180a0000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 3.25584548s ago: executing program 2 (id=1984): socket(0x8000000010, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) 2.494856843s ago: executing program 3 (id=1985): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 2.377519177s ago: executing program 2 (id=1986): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)={[{@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@noload}, {@usrquota}, {@data_ordered}, {@dioread_nolock}]}, 0x0, 0x503, &(0x7f0000001140)="$eJzs3c9vHFcdAPDvjL2x67q1C5UKCKgphYCi7Nqb1qp6KhcQqiohVZw4uMbeWJZ3vZZ3XWoTqfb/gEQlDgi4cOaAxKFSThwR3OCWSzggBYhAMRKHRbM/HMfejU2y2U28n480mnnzZuf7Xlbz3uZre18AI2suIvYj4lJEfBARM+3zSXuLd1pbdt29uzdWDu/eWEmi0Xj/H0mzPjsXx16Teb59z8nsvt+J+GFyOm5td29juVwubbfLhXplq1Db3bu6XlleK62VNovFxYXF+beuvVnsW19frfzmzrfX3/3+p7/70u0/7X/zx1mzptt1x/vRT62u547iZMYj4t0nEWwIxtr9uTTshvBI0oj4TES81nz+Z2Ks+W6eT5fHGgB4BjQaM9GYOV4GAC66tJkDS9J8OxcwHWmaz7dyeC/HVFqu1upXrld3NldbubLZyKXX18ul+XaucDZySVZe+Dg7vl8uxoPlaxHxUkT8ZOK5Zjm/cv48AwDQX8+fmP//PdGa/wGAC27yrAuWBtMOAGBwzpz/AYALx/wPAKPH/A8Ao8f8DwCjx/wPAKPmVmf+Hxt2SwCAgfjee+9lW+Ow/f3Xqx/u7mxUP7y6Wqpt5Cs7K/mV6vZWfq1aXSuX8ivVyln3K1erWwtvxM5HhXqpVi/UdveWKtWdzfpS83u9l0q5gfQKAHiYl169+ZckIvbffq65xbG1HMzVcLGlw24AMDRy/jC6fAs3jC7/xwfOWsuz568If/IIwRofP8KLgH67/Hn5fxhV8v8wuuT/YXTJ/8PoajSSXmv+p0eXAAAXihw/MNCf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAFMd3cZo+V0zSfj3ghImYjl1xfL5fmI+LFiPjzRG4iKy8MtcUAwONL/5a01/+6PPP69MnaS8l/Jpr7iPjRz97/6UfL9fr2Qnb+n0fn65+0zxeH0X4A4Cydebozj3fcu3tjpbMNsj13vtVaXDSLe9jeWjXjMZ7t/jgZuYiY+lfSKrdln1fG+hB//yAiPtet/0kzNzLbXvn0ZPws9gsDjZ8+ED9t1rX22b/FZ0/deaJnzLPWeoVRcTMbf97p9vylMdfcT3Zd/HiyOUI9vs74d3hq/Os875PNsabb+Dd33hhv/P67PesOIr4w3i1+chQ/6RH/9XPGv/XFL7/Wq67xi4jL0T3+8ViFemWrUNvdu7peWV4rrZU2i8XFhcX5t669WSw0c9SFTqb6tL+/feXFnv3/dcRUj/iTZ/T/a/eLc7863bOjAfiX//3gB1/pFf8g4htf7f7+v/yQ+Nmc+PVenTpheeq3PZfvzuKvtvp/8P++/1fOGf/2X/dWz3kpADAAtd29jeVyubTd14Nc9PmGxw6SJ9TmZ/6g85H5aWnP03aQfR5/3Pu80k6Zdb3mDz//9JWscug97cvBUIclYADuP/TDbgkAAAAAAAAAAAAAANDLE/9zonTYPQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAi+18AAAD//zqXyDg=") r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2b3c80, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) setreuid(0xee00, 0xee00) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x48) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40006) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x10, 0x70bd24, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x404c1}, 0xc2dab20c2b6ead4b) 2.27235571s ago: executing program 3 (id=1987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 2.127913375s ago: executing program 0 (id=1988): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}, @TCA_NETEM_CORR={0x10, 0x1, {0xa267, 0xffffffff, 0x4000}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x7946f580167b6286}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x27b}], 0x2}, 0x0) 2.127632275s ago: executing program 4 (id=1989): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 1.731282036s ago: executing program 4 (id=1990): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000040000924211ec000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x5c, 0x2c, 0xf31, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xf}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x30, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0xffffffffffffff75, 0x3, 'xfrm0\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.685648598s ago: executing program 4 (id=1991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 1.575854381s ago: executing program 0 (id=1992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000d100)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 1.243559102s ago: executing program 3 (id=1993): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 1.224233112s ago: executing program 2 (id=1994): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x90000014}) wait4(r1, 0x0, 0x8, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003) exit(0xfffffffffffffffa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x14, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000500000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006c00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000000c0)={0x2, 0x20, 0x4, 0x9, 0x2, 0xc0, 0x46, 0x14c, 0x1}) 1.124018385s ago: executing program 3 (id=1995): r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440088c4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x78) fchdir(r1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x5, 0x81, 0xffffffff}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x11) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000100)=""/174, 0xae}], 0x1) 1.123615095s ago: executing program 0 (id=1996): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x3, 0x84) close(r0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000280), &(0x7f0000000500)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 1.000386109s ago: executing program 0 (id=1997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffff7dfc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x5, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0x11, 0xffffffff, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xa4f, 0x2, 0xc, 0x3, 0x0, 0xfffffff2, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x71d, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa8, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x0, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x8, 0x4, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xa000, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0xfffffffe, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x77, 0x385, 0x3ff, 0x100, 0x2, 0x5, 0x4, 0x7, 0xb9, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x7fff, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x39, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x5, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x8, 0x0, 0x7, 0x0, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x10001, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x1, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0x8, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff29, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x1, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 989.177539ms ago: executing program 1 (id=1998): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 971.65832ms ago: executing program 3 (id=1999): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() fcntl$lock(0xffffffffffffffff, 0x26, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) preadv(0xffffffffffffffff, &(0x7f0000003340)=[{0x0}], 0x1, 0x4, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000000580)}, 0x7}], 0x1, 0x1, 0x0) 899.104992ms ago: executing program 0 (id=2000): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x38, r1, 0x7, 0x0, 0x4, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'veth0_vlan\x00', {0x1}, 0x1}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f636b20696f2b6d659edbee4093d3c95e6d4e639b05dee996d76f2f9f29ea608d00d6f2ad451493d07ae313d63bceaf5d5be81851fffd06c83847599826af1a0b89f26bd0b349080aa21456edb3a025b01853"], 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000061180c000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$vga_arbiter(r3, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2bd8012, &(0x7f0000000240)=ANY=[], 0x1, 0x377, &(0x7f0000000400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 883.958783ms ago: executing program 1 (id=2001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x76) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 757.438017ms ago: executing program 4 (id=2002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 274.288901ms ago: executing program 2 (id=2003): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071109300000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080), 0x0) write$cgroup_subtree(r0, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x29}, 0x28) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 168.292705ms ago: executing program 2 (id=2004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r4, 0x2, r2, 0x0, 0x80000}) 0s ago: executing program 0 (id=2005): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c9"], 0x9) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) getpid() mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): 325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.916450][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.918161][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.919757][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.921699][ T4278] device veth0_vlan entered promiscuous mode [ 62.928047][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.930945][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.932569][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.933978][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.935927][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.937787][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.939470][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.942586][ T4278] device veth1_vlan entered promiscuous mode [ 62.945612][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.948234][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.949908][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.951491][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.953068][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.958235][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.959865][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.961659][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.970445][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.972335][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.976388][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.980105][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.981715][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.983400][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.001538][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.003678][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.006869][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.008258][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.009961][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.012490][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.014000][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.016104][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.017575][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.027183][ T4289] device veth0_macvtap entered promiscuous mode [ 63.033120][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.034962][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.036574][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.038228][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.040788][ T4278] device veth0_macvtap entered promiscuous mode [ 63.043846][ T4278] device veth1_macvtap entered promiscuous mode [ 63.047258][ T4289] device veth1_macvtap entered promiscuous mode [ 63.051522][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.053208][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.055883][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.057980][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.070074][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.071970][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.073722][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.076347][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.078627][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.082389][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.084614][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.087990][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.090106][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.095195][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.096986][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.098684][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.100531][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.102762][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.106999][ T1808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.108340][ T1808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.117448][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.119332][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.121162][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.123039][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.126886][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.128775][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.131019][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.132619][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.134214][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.135833][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.137553][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.139173][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.147315][ T4289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.148862][ T4289] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.150417][ T4289] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.152065][ T4289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.156292][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.157765][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.159890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.161988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.163643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.165612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.167535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.169746][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.171623][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.173361][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.178088][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.179859][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.181753][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.184702][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.189762][ T4292] device veth0_vlan entered promiscuous mode [ 63.192028][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.193768][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.200726][ T4292] device veth1_vlan entered promiscuous mode [ 63.203461][ T4278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.205808][ T4278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.207237][ T4278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.208814][ T4278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.232398][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.233823][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.236213][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.237739][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.239995][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.261585][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.263298][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.271578][ T4292] device veth0_macvtap entered promiscuous mode [ 63.276592][ T4292] device veth1_macvtap entered promiscuous mode [ 63.300879][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.302306][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.303839][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.309658][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.312911][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.324745][ T1808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.326164][ T1808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.327753][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.328077][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.329133][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.335894][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.339705][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.341540][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.343340][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.346075][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.347872][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.349787][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.351587][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.353499][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.360510][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.363059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.365078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.373129][ T1808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.374698][ T1808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.376629][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.379403][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.381597][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.383367][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.386476][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.388221][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.391454][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.393185][ T4292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.396781][ T4292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.399093][ T4292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.408588][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.410011][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.411818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.413700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.416681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.427899][ T4292] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.442070][ T4292] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.443696][ T4292] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.460875][ T4292] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.528865][ T4370] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 63.562849][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.564424][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.571828][ T4376] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 63.573134][ T4376] overlayfs: failed to set xattr on upper [ 63.577323][ T4376] overlayfs: ...falling back to index=off,metacopy=off. [ 63.601267][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.608984][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.610320][ T4374] netlink: 'syz.0.10': attribute type 11 has an invalid length. [ 63.610462][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.613207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.891462][ T4398] loop0: detected capacity change from 0 to 256 [ 63.893259][ T4398] ======================================================= [ 63.893259][ T4398] WARNING: The mand mount option has been deprecated and [ 63.893259][ T4398] and is ignored by this kernel. Remove the mand [ 63.893259][ T4398] option from the mount to silence this warning. [ 63.893259][ T4398] ======================================================= [ 63.900735][ T4398] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.317331][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 64.318497][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 64.319764][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 64.320889][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 64.322038][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 64.374272][ T4408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21'. [ 64.475806][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.477231][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.654275][ T4420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 64.773806][ T4432] binder: 4431:4432 tried to acquire reference to desc 0, got 1 instead [ 64.778309][ T4432] binder: 4431:4432 got transaction with invalid offset (24, min 24 max 32) or object. [ 64.780036][ T4432] binder: 4431:4432 transaction call to 4431:0 failed 5/29201/-22, size 32-24 line 3346 [ 64.798795][ T4331] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.828994][ T4438] binder: 4437:4438 tried to acquire reference to desc 0, got 1 instead [ 64.830900][ T4438] binder: 4437:4438 got transaction with invalid parent offset or type [ 64.832508][ T4438] binder: 4437:4438 transaction call to 4437:0 failed 12/29201/-22, size 80-24 line 3439 [ 64.847667][ T4331] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.856932][ T4441] loop2: detected capacity change from 0 to 1024 [ 64.867496][ T4441] EXT4-fs: Ignoring removed bh option [ 64.908944][ T4441] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.918222][ T4449] loop0: detected capacity change from 0 to 512 [ 64.919703][ T4449] EXT4-fs: Ignoring removed orlov option [ 64.920819][ T4449] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.921968][ T4449] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.929743][ T4449] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.35: corrupted in-inode xattr [ 64.932913][ T4449] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.35: couldn't read orphan inode 15 (err -117) [ 64.935783][ T4449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 64.959856][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 65.012403][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 65.033080][ T4457] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.034942][ T4457] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.036455][ T4457] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.038009][ T4457] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.066654][ T4441] capability: warning: `syz.2.28' uses 32-bit capabilities (legacy support in use) [ 65.066691][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 65.070457][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 65.087750][ T4457] Zero length message leads to an empty skb [ 65.133115][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 65.218550][ T9] bond0: (slave bond_slave_0): interface is now down [ 65.219921][ T9] bond0: (slave bond_slave_1): interface is now down [ 65.232060][ T9] bond0: now running without any active interface! [ 65.371298][ T4468] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.372956][ T4468] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.096056][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.111493][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.384659][ T4468] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.386326][ T4468] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.387887][ T4468] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.389843][ T4468] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.404259][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 66.405383][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 66.406401][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 66.407513][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 66.408646][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 66.636198][ T4468] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.637917][ T4468] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.639573][ T4468] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.641350][ T4468] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 66.678526][ T4467] tipc: Started in network mode [ 66.679466][ T4467] tipc: Node identity 4e9e36f6ffcd, cluster identity 4711 [ 66.680837][ T4467] tipc: Enabled bearer , priority 0 [ 66.685502][ T1808] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 66.687320][ T1808] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 66.689140][ T1808] bond0: active interface up! [ 66.693078][ T4464] tipc: Resetting bearer [ 68.474320][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 68.474630][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 68.475470][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 68.476576][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 68.477611][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 69.595852][ T24] cfg80211: failed to load regulatory.db [ 77.329801][ T4464] tipc: Disabling bearer [ 77.356691][ T112] tipc: Node number set to 2975020790 [ 77.507632][ T4518] loop1: detected capacity change from 0 to 40427 [ 77.510904][ T4518] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 77.512445][ T4518] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 77.553011][ T4518] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.565787][ T4518] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 77.567152][ T4518] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 77.743498][ T4518] syz.1.55: attempt to access beyond end of device [ 77.743498][ T4518] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 77.746533][ T4518] syz.1.55: attempt to access beyond end of device [ 77.746533][ T4518] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.767743][ T4538] syz.1.55: attempt to access beyond end of device [ 77.767743][ T4538] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.769973][ T4542] loop2: detected capacity change from 0 to 512 [ 77.808684][ T4542] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 77.871645][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 78.045076][ T4559] loop2: detected capacity change from 0 to 2048 [ 78.088975][ T4559] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.182870][ T4559] EXT4-fs (loop2): shut down requested (1) [ 78.193786][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.211295][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.222007][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.240559][ T4565] device bridge_slave_0 left promiscuous mode [ 78.242212][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 78.242511][ T4553] loop3: detected capacity change from 0 to 131072 [ 78.251631][ T4553] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 78.252897][ T4553] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 78.256920][ T4565] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.263205][ T4553] F2FS-fs (loop3): invalid crc value [ 78.280308][ T4565] device bridge_slave_1 left promiscuous mode [ 78.281555][ T4565] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.283146][ T4553] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.291447][ T4553] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 78.292736][ T4553] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 78.315763][ T4565] bond0: (slave bond_slave_0): Releasing backup interface [ 78.336600][ T4553] F2FS-fs (loop3): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 78.399128][ T4565] bond0: (slave bond_slave_1): Releasing backup interface [ 78.447872][ T4565] team0: Failed to send options change via netlink (err -105) [ 78.451926][ T4565] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 78.456514][ T4579] binder: 4578:4579 tried to acquire reference to desc 0, got 1 instead [ 78.458744][ T4565] team0: Port device team_slave_0 removed [ 78.461208][ T4579] binder: 4578:4579 got transaction with unaligned buffers size, 252 [ 78.467619][ T4565] team0: Failed to send options change via netlink (err -105) [ 78.469164][ T4579] binder: 4578:4579 transaction async to 4578:0 failed 17/29201/-22, size 0-24 line 3286 [ 78.471393][ T4565] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 78.473832][ T4330] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.476731][ T4565] team0: Port device team_slave_1 removed [ 78.479305][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.483001][ T4565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.487535][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.491460][ T4565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.503202][ T4566] team0: Failed to send options change via netlink (err -105) [ 78.510590][ T4566] team0: Mode changed to "activebackup" [ 78.520405][ T4581] netlink: 'syz.2.74': attribute type 4 has an invalid length. [ 78.598983][ T4589] binder: 4588:4589 tried to acquire reference to desc 0, got 1 instead [ 78.601262][ T4589] binder: 4588:4589 sending u0000000000000000 node 23, cookie mismatch 0000000000000000 != 0000000000000030 [ 78.603292][ T4589] binder: 4589:4588 translate binder failed [ 78.605225][ T4589] binder: 4588:4589 transaction call to 4588:0 failed 22/29201/-22, size 72-24 line 3374 [ 78.608145][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.657646][ T4591] bpf getsockopt: ignoring program buffer with optlen=1869768547 (max_optlen=4096) [ 78.718461][ T4595] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 79.137025][ T4608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 79.165911][ T4609] block device autoloading is deprecated and will be removed. [ 79.349468][ T27] audit: type=1326 audit(79.340:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4626 comm="syz.3.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc377aa8 code=0x0 [ 79.758782][ T4636] process 'syz.1.92' launched './file0' with NULL argv: empty string added [ 80.020286][ T4625] Set syz1 is full, maxelem 65536 reached [ 80.100137][ T27] audit: type=1326 audit(80.090:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4640 comm="syz.0.94" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff90377aa8 code=0x0 [ 80.202039][ T4645] binder: 4644:4645 tried to acquire reference to desc 0, got 1 instead [ 80.207336][ T4645] binder: 4644:4645 BC_REQUEST_DEATH_NOTIFICATION invalid ref 6 [ 80.655806][ T4654] loop2: detected capacity change from 0 to 1024 [ 80.666928][ T4654] hfsplus: invalid extent btree flag [ 80.668421][ T4654] hfsplus: failed to load extents file [ 80.716509][ T4656] loop1: detected capacity change from 0 to 16 [ 80.728736][ T4656] erofs: (device loop1): mounted with root inode @ nid 36. [ 80.745680][ T4658] loop2: detected capacity change from 0 to 128 [ 80.762574][ T4658] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.789259][ T4658] EXT4-fs (loop2): shut down requested (1) [ 80.790641][ T4658] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 80.816982][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 81.209732][ T4672] loop1: detected capacity change from 0 to 40427 [ 81.214300][ T4672] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 81.216796][ T4672] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 81.223185][ T4672] F2FS-fs (loop1): invalid crc value [ 81.230946][ T4672] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.247637][ T4672] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 81.251247][ T4672] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 81.882779][ T4723] loop4: detected capacity change from 0 to 256 [ 81.887066][ T4723] exfat: Deprecated parameter 'utf8' [ 81.892235][ T4723] exfat: Unknown parameter 'keep_last_kots' [ 81.912381][ T4288] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 82.414120][ T4286] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.604003][ T4286] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.605868][ T4286] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 82.607375][ T4286] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.611166][ T4286] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.612692][ T4286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.614651][ T4286] usb 1-1: Product: syz [ 82.615424][ T4286] usb 1-1: Manufacturer: syz [ 82.616276][ T4286] usb 1-1: SerialNumber: syz [ 82.622697][ T4286] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 82.624006][ T4286] cdc_ncm 1-1:1.0: bind() failure [ 82.844822][ T24] usb 1-1: USB disconnect, device number 2 [ 83.228098][ T4809] loop4: detected capacity change from 0 to 256 [ 83.234351][ T4809] exfat: Deprecated parameter 'utf8' [ 83.249921][ T4809] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf8a64500, utbl_chksum : 0xe619d30d) [ 83.424817][ T4825] loop0: detected capacity change from 0 to 512 [ 83.435860][ T4825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.440290][ T4825] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 83.442028][ T4825] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 83.452967][ T4825] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 83.456567][ T4825] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 83.459649][ T4825] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.461561][ T4825] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.138: Invalid inode bitmap blk 0 in block_group 1 [ 83.466671][ T4825] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.211115][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 91.537965][ T4701] netlink: 14 bytes leftover after parsing attributes in process `syz.1.116'. [ 91.672945][ T4858] loop0: detected capacity change from 0 to 128 [ 91.729410][ T4853] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 91.750796][ T4868] loop4: detected capacity change from 0 to 512 [ 91.774216][ T4866] netlink: 'syz.1.151': attribute type 1 has an invalid length. [ 91.776367][ T4868] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.806710][ T4868] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.153: iget: bad i_size value: 38620345925642 [ 91.809192][ T4868] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.153: couldn't read orphan inode 15 (err -117) [ 91.814231][ T4868] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.888984][ T4886] binder: 4885:4886 tried to acquire reference to desc 0, got 1 instead [ 91.891011][ T4886] binder: 4885:4886 parent offset not aligned correctly. [ 91.892303][ T4886] binder: 4886:4885 translate fd array failed [ 91.893487][ T4886] binder: 4885:4886 transaction call to 4885:0 failed 35/29201/-22, size 112-24 line 3486 [ 91.897161][ T4286] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.919068][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 91.984972][ T4894] loop4: detected capacity change from 0 to 4096 [ 91.987516][ T4894] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 92.004343][ T4894] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 92.100592][ T4292] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 92.103960][ T4292] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 92.128208][ T4900] overlayfs: failed to get inode (-116) [ 92.129496][ T4900] overlayfs: failed to get inode (-116) [ 92.140423][ T4908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 92.272412][ T4916] loop2: detected capacity change from 0 to 128 [ 92.280876][ T4916] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.351933][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 92.365496][ T4923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.367073][ T4923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.979175][ T4931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 93.140470][ T4931] team0: Port device team_slave_0 removed [ 93.794228][ T4967] loop4: detected capacity change from 0 to 512 [ 93.835023][ T4967] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 93.875722][ T4972] loop3: detected capacity change from 0 to 1024 [ 93.878000][ T4972] EXT4-fs (loop3): blocks per group (131072) and clusters per group (32) inconsistent [ 93.911498][ T4967] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 3: comm syz.4.189: lblock 0 mapped to illegal pblock 3 (length 1) [ 93.914996][ T4863] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.920273][ T4967] EXT4-fs (loop4): Remounting filesystem read-only [ 93.922477][ T4967] EXT4-fs error (device loop4): swap_inode_boot_loader:378: comm syz.4.189: inode #5: comm syz.4.189: iget: illegal inode # [ 93.933779][ T4976] binder: 4975:4976 ioctl c0306201 20000080 returned -14 [ 93.937892][ T4976] binder: 4975:4976 tried to acquire reference to desc 0, got 1 instead [ 93.939381][ T4976] binder: 4975:4976 ioctl c0306201 200003c0 returned -14 [ 93.941621][ T7] binder: undelivered TRANSACTION_COMPLETE [ 93.949505][ T7] binder: undelivered transaction 43, process died. [ 93.954818][ T4967] EXT4-fs (loop4): Remounting filesystem read-only [ 93.996325][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 94.034514][ T39] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #4: block 16: comm kworker/u4:2: lblock 0 mapped to illegal pblock 16 (length 1) [ 94.040742][ T39] EXT4-fs (loop4): Remounting filesystem read-only [ 94.041890][ T39] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 94.043598][ T39] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 1 [ 94.049730][ T4982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'. [ 94.052853][ T39] EXT4-fs (loop4): Remounting filesystem read-only [ 94.085765][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 94.123020][ T4991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.127472][ T4991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.186284][ T4997] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 94.198095][ T4997] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 94.328997][ T5004] loop3: detected capacity change from 0 to 32768 [ 94.342250][ T5004] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.205 (5004) [ 94.383288][ T5004] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 94.387691][ T5004] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 94.389410][ T5004] BTRFS info (device loop3): use zlib compression, level 3 [ 94.390664][ T5004] BTRFS info (device loop3): using free space tree [ 94.400456][ T5007] loop0: detected capacity change from 0 to 40427 [ 94.409794][ T5007] F2FS-fs (loop0): invalid crc value [ 94.427186][ T5007] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 94.447342][ T5007] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 94.449673][ T5007] F2FS-fs (loop0): Start checkpoint disabled! [ 94.455813][ T5007] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 94.470252][ T5004] BTRFS info (device loop3): enabling ssd optimizations [ 94.473429][ T5004] BTRFS info (device loop3): checking UUID tree [ 94.488849][ T5007] syz.0.206: attempt to access beyond end of device [ 94.488849][ T5007] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.495831][ T5007] syz.0.206: attempt to access beyond end of device [ 94.495831][ T5007] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 94.517796][ T55] kworker/u4:3: attempt to access beyond end of device [ 94.517796][ T55] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 94.598754][ T4279] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 94.682779][ T5041] Bluetooth: MGMT ver 1.22 [ 94.765523][ T5049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 94.869033][ T5056] sctp: [Deprecated]: syz.4.216 (pid 5056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.869033][ T5056] Use struct sctp_sack_info instead [ 94.961851][ T5057] tc_dump_action: action bad kind [ 95.003567][ T5061] binder: 5060:5061 tried to acquire reference to desc 0, got 1 instead [ 95.006886][ T5061] binder: cannot allocate buffer [ 95.006904][ T5061] binder: 5060:5061 transaction call to 5060:0 failed 48/29201/-22, size 88--67 line 3230 [ 95.010472][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.050654][ T5066] device macvlan0 entered promiscuous mode [ 95.058261][ T5066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 95.155678][ T5066] device macvlan0 left promiscuous mode [ 95.358094][ T5077] loop4: detected capacity change from 0 to 32768 [ 95.405623][ T5077] JBD2: Ignoring recovery information on journal [ 95.442808][ T5077] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 95.561841][ T4292] ocfs2: Unmounting device (7,4) on (node local) [ 95.698762][ T5091] netlink: 44 bytes leftover after parsing attributes in process `syz.4.228'. [ 96.185186][ T5100] loop4: detected capacity change from 0 to 40427 [ 96.202477][ T5100] F2FS-fs (loop4): Found nat_bits in checkpoint [ 96.224826][ T5100] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 96.226251][ T5100] F2FS-fs (loop4): Start checkpoint disabled! [ 96.244885][ T5100] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 96.297028][ T4864] loop2: p1 [ 96.297667][ T4864] loop2: partition table partially beyond EOD, truncated [ 96.301720][ T4864] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 96.307700][ T5107] loop2: p1 [ 96.308272][ T5107] loop2: partition table partially beyond EOD, truncated [ 96.311493][ T5107] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 96.349489][ T4863] udevd[4863]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 96.357751][ T4863] udevd[4863]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 96.362000][ T39] kworker/u4:2: attempt to access beyond end of device [ 96.362000][ T39] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.531293][ T5097] F2FS-fs (loop3): invalid crc value [ 96.550054][ T5097] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.560232][ T5097] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 96.562018][ T5097] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 96.990816][ T5130] Illegal XDP return value 4025759216 on prog (id 41) dev syz_tun, expect packet loss! [ 97.837743][ T5150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.250'. [ 97.947855][ T5134] set_capacity_and_notify: 2 callbacks suppressed [ 97.947863][ T5134] loop2: detected capacity change from 0 to 131072 [ 97.950870][ T5134] F2FS-fs (loop2): Corrupted extension count (65573 + 1 > 64) [ 97.963773][ T5134] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 97.968014][ T5134] F2FS-fs (loop2): invalid crc value [ 97.972939][ T5134] F2FS-fs (loop2): Found nat_bits in checkpoint [ 97.980428][ T5134] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 97.981886][ T5134] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 98.063575][ T5165] loop0: detected capacity change from 0 to 512 [ 98.072487][ T5167] overlayfs: upper fs does not support file handles, falling back to index=off. [ 98.096322][ T5165] EXT4-fs (loop0): Test dummy encryption mode enabled [ 98.112219][ T5165] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.256: inode has both inline data and extents flags [ 98.115128][ T5165] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.256: couldn't read orphan inode 15 (err -117) [ 98.117632][ T5169] binder: 5168:5169 tried to acquire reference to desc 0, got 1 instead [ 98.119736][ T5169] binder: cannot allocate buffer: no space left [ 98.119757][ T5169] binder: 5168:5169 transaction async to 5168:0 failed 53/29201/-28, size 104-32784 line 3230 [ 98.123029][ T5165] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.127631][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.151036][ T5165] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 98.330874][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 99.140552][ T5216] loop2: detected capacity change from 0 to 64 [ 99.179446][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 99.246453][ T5218] loop2: detected capacity change from 0 to 512 [ 99.258657][ T5218] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.310536][ T5218] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 99.332598][ T5218] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 99.336998][ T5218] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 99.342268][ T5218] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 99.344873][ T5218] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 99.346373][ T5218] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 99.410466][ T5222] loop0: detected capacity change from 0 to 512 [ 99.424812][ T5222] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.448120][ T5222] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 99.449805][ T5222] EXT4-fs (loop0): orphan cleanup on readonly fs [ 99.451209][ T5222] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 99.452880][ T5222] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 99.456551][ T5222] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 99.460213][ T5222] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.278: bg 0: block 64: padding at end of block bitmap is not set [ 99.466422][ T5222] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 99.466843][ T5197] Set syz1 is full, maxelem 65536 reached [ 99.469671][ T5222] EXT4-fs (loop0): 1 truncate cleaned up [ 99.470707][ T5222] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.529582][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 100.455119][ T5260] loop3: detected capacity change from 0 to 131072 [ 100.458339][ T5260] F2FS-fs (loop3): inline encryption not supported [ 100.460687][ T5260] F2FS-fs (loop3): Test dummy encryption mode enabled [ 100.462379][ T5260] F2FS-fs (loop3): invalid crc value [ 100.466389][ T5260] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.473103][ T5260] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.091649][ T5284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.300'. [ 101.098357][ T5284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 101.324588][ T5295] loop0: detected capacity change from 0 to 4096 [ 101.332209][ T5295] EXT4-fs (loop0): Test dummy encryption mode enabled [ 101.347353][ T5295] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 101.360866][ T5295] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 101.382454][ T5295] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 101.406680][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 101.566030][ T5300] loop0: detected capacity change from 0 to 8192 [ 101.591797][ T5300] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 101.604102][ T5300] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 101.605870][ T5300] REISERFS (device loop0): using ordered data mode [ 101.606976][ T5300] reiserfs: using flush barriers [ 101.609540][ T5300] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.620111][ T5300] REISERFS (device loop0): checking transaction log (loop0) [ 101.649078][ T5300] REISERFS (device loop0): Using tea hash to sort names [ 101.651910][ T5300] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 102.237501][ T5324] loop0: detected capacity change from 0 to 16 [ 102.242886][ T5324] erofs: (device loop0): mounted with root inode @ nid 36. [ 102.250381][ T7] libceph: connect (1)[c::]:6789 error -101 [ 102.251777][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 102.264603][ T7] libceph: connect (1)[c::]:6789 error -101 [ 102.265726][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 102.271183][ T5326] binder: 5325:5326 tried to acquire reference to desc 0, got 1 instead [ 102.273100][ T5326] binder: tried to use weak ref as strong ref [ 102.274695][ T5326] binder: 5325:5326 got transaction with invalid handle, 0 [ 102.276123][ T5326] binder: 5326:5325 translate handle failed [ 102.277196][ T5320] ceph: No mds server is up or the cluster is laggy [ 102.278581][ T5326] binder: 5325:5326 transaction async to 5325:0 failed 58/29201/-22, size 72-24 line 3393 [ 102.280766][ T4332] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.303700][ C0] vxcan0: j1939_tp_rxtimer: 0x00000000a59c0e9d: rx timeout, send abort [ 102.668280][ T5309] loop1: detected capacity change from 0 to 131072 [ 102.713916][ T5309] F2FS-fs (loop1): inline encryption not supported [ 102.728451][ T5309] F2FS-fs (loop1): Test dummy encryption mode enabled [ 102.760153][ T5309] F2FS-fs (loop1): invalid crc value [ 102.762219][ T5309] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.769342][ T5309] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.805804][ C0] vxcan0: j1939_tp_rxtimer: 0x00000000a59c0e9d: abort rx timeout. Force session deactivation [ 103.442077][ T5356] Invalid ELF header len 9 [ 103.466358][ T5358] fuse: Bad value for 'fd' [ 103.586667][ T5364] tipc: Enabling of bearer rejected, failed to enable media [ 103.611694][ T5367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'. [ 104.157118][ T5367] team0: Port device team_slave_0 removed [ 104.169785][ T5379] bond1: (slave ip6gretap1): making interface the new active one [ 104.171927][ T5379] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 104.523945][ T5398] tipc: Enabling of bearer rejected, failed to enable media [ 104.576341][ T5402] loop2: detected capacity change from 0 to 256 [ 104.582434][ T5402] exfat: Deprecated parameter 'namecase' [ 104.583603][ T5402] exfat: Deprecated parameter 'namecase' [ 104.596230][ T5402] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 104.618524][ T5402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.620829][ T5402] device batadv_slave_1 entered promiscuous mode [ 105.470915][ T5431] loop2: detected capacity change from 0 to 256 [ 105.491769][ T5431] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.493911][ T5431] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 105.500036][ T5431] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xdca9dc68, utbl_chksum : 0xe619d30d) [ 105.923996][ T5443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.362'. [ 106.207616][ C0] vcan0: j1939_tp_rxtimer: 0x000000006fdcd5e6: rx timeout, send abort [ 106.263206][ T5458] netlink: 'syz.1.369': attribute type 3 has an invalid length. [ 106.268134][ T5458] netlink: 'syz.1.369': attribute type 3 has an invalid length. [ 106.393430][ T5468] fuse: Bad value for 'fd' [ 106.615996][ T5480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.379'. [ 106.637763][ T5480] netlink: 1 bytes leftover after parsing attributes in process `syz.0.379'. [ 106.707662][ C0] vcan0: j1939_tp_rxtimer: 0x00000000651ec856: rx timeout, send abort [ 106.709284][ C0] vcan0: j1939_tp_rxtimer: 0x000000006fdcd5e6: abort rx timeout. Force session deactivation [ 106.870752][ T4288] Bluetooth: hci1: link tx timeout [ 106.871877][ T4288] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.926037][ T5501] netlink: 'syz.3.390': attribute type 10 has an invalid length. [ 106.927761][ T5501] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.929247][ T5501] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.938484][ T5501] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.939825][ T5501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.941946][ T5501] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.943202][ T5501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.947973][ T5501] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 106.952233][ T5501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.390'. [ 106.953793][ T5501] device bridge_slave_1 left promiscuous mode [ 106.955595][ T5501] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.975621][ T5501] device bridge_slave_0 left promiscuous mode [ 106.977089][ T5501] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.094889][ T5501] bond0: (slave bridge0): Releasing backup interface [ 107.202980][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e08168b7: rx timeout, send abort [ 107.204884][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000e08168b7: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 107.209249][ C0] vcan0: j1939_tp_rxtimer: 0x00000000651ec856: abort rx timeout. Force session deactivation [ 107.330341][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 107.503275][ T5537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'. [ 107.516631][ T5530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.879188][ T5546] netlink: 'syz.4.408': attribute type 1 has an invalid length. [ 107.886670][ T5546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.900283][ T5546] bond1: (slave geneve2): making interface the new active one [ 107.903550][ T5546] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 107.907397][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 108.050869][ T5554] netlink: 68 bytes leftover after parsing attributes in process `syz.2.411'. [ 108.228715][ T5562] loop2: detected capacity change from 0 to 256 [ 108.275618][ T4863] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.888962][ T5577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.953884][ T5577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.007106][ T5577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.113579][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 109.120213][ T5580] syz.1.421 uses obsolete (PF_INET,SOCK_PACKET) [ 109.603171][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.608472][ T7] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.644713][ T5594] loop0: detected capacity change from 0 to 4096 [ 109.650658][ T5594] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.652259][ T5594] EXT4-fs: Ignoring removed orlov option [ 109.659005][ T5594] EXT4-fs (loop0): Test dummy encryption mode enabled [ 109.665938][ T5594] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.770313][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 109.901436][ T5616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.432'. [ 110.013109][ T5622] netlink: 180 bytes leftover after parsing attributes in process `syz.4.434'. [ 110.192275][ T5632] overlayfs: failed to clone upperpath [ 111.990729][ T5718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.156868][ T4332] wlan1: authenticate with 08:02:11:00:00:00 [ 112.166247][ T4332] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 112.285009][ T4479] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 112.321311][ T4479] wlan1: authenticated [ 112.322265][ T7] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 112.324330][ T5718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.334186][ T1808] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 112.379109][ T4503] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 112.380955][ T4503] wlan1: associated [ 112.382492][ T5714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.652574][ T5744] loop0: detected capacity change from 0 to 16 [ 112.662002][ T5744] erofs: (device loop0): mounted with root inode @ nid 36. [ 112.681707][ T5744] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 112.691944][ T5744] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 112.695690][ T5744] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 112.698022][ T5744] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 112.705853][ T5744] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 112.708149][ T5744] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 112.710705][ T5744] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 112.713148][ T5744] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 112.717257][ T5747] xt_hashlimit: size too large, truncated to 1048576 [ 112.814621][ T5749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.290106][ T4332] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 113.292423][ T4332] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.351609][ T5770] loop2: detected capacity change from 0 to 4096 [ 113.369913][ T5770] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.378172][ T5770] EXT4-fs: Ignoring removed orlov option [ 113.394478][ T5770] EXT4-fs (loop2): Test dummy encryption mode enabled [ 113.407041][ T5770] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.508614][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 113.664754][ T5779] loop2: detected capacity change from 0 to 16 [ 113.673226][ T5779] erofs: (device loop2): mounted with root inode @ nid 36. [ 113.699842][ T5779] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 113.701747][ T5779] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 113.703816][ T5779] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 113.714529][ T5779] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 113.719265][ T5779] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 113.721240][ T5779] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 113.723202][ T5779] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 113.732386][ T5779] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 113.857964][ T5786] overlayfs: failed to clone upperpath [ 114.053637][ T5794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.110616][ T5794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.167595][ T5794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.009413][ T5837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.014223][ T5837] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 115.016567][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.018166][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.036699][ T5841] xt_hashlimit: size too large, truncated to 1048576 [ 115.042783][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.044173][ T5837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.045585][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.046874][ T5837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.050276][ T5837] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 115.146629][ T5843] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.148489][ T5845] loop2: detected capacity change from 0 to 512 [ 115.169335][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.183443][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.193544][ T5845] EXT4-fs (loop2): orphan cleanup on readonly fs [ 115.201751][ T5845] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 115.207515][ T5845] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 115.216379][ T5845] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.517: attempt to clear invalid blocks 2 len 1 [ 115.223845][ T5845] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.517: invalid indirect mapped block 1819239214 (level 0) [ 115.232706][ T5845] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.517: invalid indirect mapped block 1819239214 (level 1) [ 115.239617][ T5845] EXT4-fs (loop2): 1 truncate cleaned up [ 115.241960][ T5845] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.244629][ T5843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.259940][ T5845] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 115.274492][ T5845] EXT4-fs error (device loop2): __ext4_remount:6650: comm syz.2.517: Abort forced by user [ 115.277849][ T5845] EXT4-fs (loop2): Remounting filesystem read-only [ 115.281593][ T5845] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 115.310149][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 116.337483][ T5876] netlink: 'syz.2.527': attribute type 4 has an invalid length. [ 116.339705][ T5876] netlink: 'syz.2.527': attribute type 4 has an invalid length. [ 117.128724][ T5899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.135555][ T5906] loop0: detected capacity change from 0 to 128 [ 117.157976][ T5899] netlink: 'syz.4.536': attribute type 10 has an invalid length. [ 117.162240][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.163718][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.186140][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.187505][ T5899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.188956][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.190239][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.192321][ T5899] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 117.269907][ T5916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.282605][ T5909] loop0: detected capacity change from 0 to 32768 [ 117.288978][ T5909] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.540 (5909) [ 117.309527][ T5909] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.311664][ T5909] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 117.313727][ T5909] BTRFS info (device loop0): setting nodatasum [ 117.318856][ T5909] BTRFS info (device loop0): force zlib compression, level 3 [ 117.320659][ T5909] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 117.322613][ T5915] netlink: 'syz.4.543': attribute type 1 has an invalid length. [ 117.349298][ T5915] device bond3 entered promiscuous mode [ 117.350498][ T5909] BTRFS info (device loop0): use lzo compression, level 0 [ 117.351797][ T5909] BTRFS info (device loop0): turning on flush-on-commit [ 117.353054][ T5909] BTRFS info (device loop0): enabling auto defrag [ 117.357585][ T5915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.359540][ T5909] BTRFS info (device loop0): max_inline at 4096 [ 117.360662][ T5909] BTRFS info (device loop0): using free space tree [ 117.365762][ T5905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.373822][ T5918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.376646][ T5918] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 117.381415][ T5918] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 117.392838][ T5918] bond3: (slave ip6gre1): making interface the new active one [ 117.395581][ T5918] device ip6gre1 entered promiscuous mode [ 117.397705][ T5918] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 117.416175][ T5926] xt_hashlimit: size too large, truncated to 1048576 [ 117.423578][ T5911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.471171][ T5909] BTRFS info (device loop0): enabling ssd optimizations [ 117.711821][ T4283] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.125616][ T5915] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 118.127305][ T5915] device ip6gre1 left promiscuous mode [ 118.159473][ T5915] bond3 (unregistering): Released all slaves [ 118.167082][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.216680][ T5943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.689757][ T5958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.715076][ T5958] netlink: 'syz.0.555': attribute type 10 has an invalid length. [ 118.720454][ T5958] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 118.875848][ T5976] bond1: option mode: unable to set because the bond device is up [ 118.880576][ T5976] device bridge0 entered promiscuous mode [ 118.881928][ T5976] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 118.884382][ T5976] bond1: (slave macvlan2): making interface the new active one [ 118.886930][ T5976] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 118.888551][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 118.901055][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.903950][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.905620][ T5974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.948449][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 118.950108][ T5974] device bridge_slave_1 left promiscuous mode [ 118.953459][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.985487][ T5974] device bridge_slave_0 left promiscuous mode [ 118.986749][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.104883][ T5974] bond0: (slave bridge0): Releasing backup interface [ 119.366239][ T5988] xt_hashlimit: size too large, truncated to 1048576 [ 119.441050][ T5990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.474668][ T5990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.147977][ T6005] netlink: 60 bytes leftover after parsing attributes in process `syz.1.566'. [ 120.387661][ T6021] loop2: detected capacity change from 0 to 128 [ 120.414780][ T6021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.753287][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 120.937984][ T6032] loop2: detected capacity change from 0 to 32768 [ 120.946887][ T6032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.575 (6032) [ 120.954653][ T6032] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.956556][ T6032] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 120.959530][ T6032] BTRFS info (device loop2): setting nodatasum [ 120.960640][ T6032] BTRFS info (device loop2): force zlib compression, level 3 [ 120.968111][ T6032] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 120.970275][ T6032] BTRFS info (device loop2): use lzo compression, level 0 [ 120.971627][ T6032] BTRFS info (device loop2): turning on flush-on-commit [ 120.974980][ T6032] BTRFS info (device loop2): enabling auto defrag [ 120.976931][ T6032] BTRFS info (device loop2): max_inline at 4096 [ 120.978125][ T6032] BTRFS info (device loop2): using free space tree [ 121.443857][ T6032] BTRFS info (device loop2): enabling ssd optimizations [ 121.795954][ T6070] tipc: Started in network mode [ 121.796904][ T6070] tipc: Node identity ac1414aa, cluster identity 4711 [ 121.799157][ T6070] tipc: Enabled bearer , priority 10 [ 121.827158][ T6070] tipc: Enabled bearer , priority 0 [ 121.886571][ T4289] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.026553][ T6084] fuse: Bad value for 'fd' [ 122.139505][ T6096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.196977][ T6105] xt_hashlimit: size too large, truncated to 1048576 [ 122.212546][ T6096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.268466][ T6086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.295097][ T6111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.914153][ T1516] tipc: Node number set to 2886997162 [ 123.683087][ T6150] netlink: 168 bytes leftover after parsing attributes in process `syz.2.617'. [ 123.785902][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.798091][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 123.799681][ T6153] device bridge_slave_1 left promiscuous mode [ 123.800963][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.854974][ T6153] device bridge_slave_0 left promiscuous mode [ 123.856367][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.985368][ T6153] bond0: (slave bridge0): Releasing backup interface [ 124.106640][ T6166] tipc: Enabled bearer , priority 10 [ 124.110429][ T6166] tipc: Enabled bearer , priority 0 [ 124.319596][ T6181] netlink: 'syz.2.628': attribute type 10 has an invalid length. [ 124.362634][ T6181] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 124.369023][ T6184] netlink: 120 bytes leftover after parsing attributes in process `syz.4.631'. [ 124.370837][ T6184] netlink: 88 bytes leftover after parsing attributes in process `syz.4.631'. [ 125.924872][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.926109][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.982306][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 128.988376][ T6265] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.989994][ T6265] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.991476][ T6265] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.993047][ T6265] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.000445][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 129.002970][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 129.037209][ T6267] fuse: Bad value for 'fd' [ 129.717442][ T6287] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.186232][ T6306] fuse: Bad value for 'fd' [ 131.408324][ T6336] team0: Port device bridge0 added [ 131.544280][ T6352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.545793][ T6352] IPv6: NLM_F_CREATE should be set when creating new route [ 132.222504][ T6354] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.224287][ T6354] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.225879][ T6354] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.227457][ T6354] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.429147][ T6354] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.430844][ T6354] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.432553][ T6354] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.434499][ T6354] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.488111][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.695'. [ 132.628939][ T6399] tipc: Failed to remove unknown binding: 66,0,0/0:997462613/997462615 [ 132.630640][ T6399] tipc: Failed to remove unknown binding: 66,0,0/0:997462613/997462614 [ 132.632436][ T6399] tipc: Failed to remove unknown binding: 66,0,0/0:997462613/997462615 [ 132.637324][ T6399] tipc: Failed to remove unknown binding: 66,0,0/0:997462613/997462614 [ 133.732463][ T6434] overlayfs: failed to clone upperpath [ 133.778372][ T27] audit: type=1326 audit(133.770:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.4.721" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffacb77aa8 code=0x0 [ 135.387520][ T6484] overlayfs: failed to clone upperpath [ 135.601507][ T6507] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 135.647890][ T6509] bond0: (slave bridge0): Error: Slave device does not support XDP [ 135.811475][ T6522] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 137.623875][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.774'. [ 138.394955][ T6627] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 138.399942][ T6627] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 138.749647][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.792'. [ 140.377218][ T6662] overlayfs: failed to clone upperpath [ 140.635564][ T4288] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 140.637542][ T4288] Bluetooth: hci2: Injecting HCI hardware error event [ 140.644226][ T4280] Bluetooth: hci2: hardware error 0x00 [ 142.964096][ T4280] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 143.980181][ T6743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.982197][ T6743] device batadv_slave_1 entered promiscuous mode [ 147.036291][ T4280] Bluetooth: hci1: link tx timeout [ 147.037298][ T4280] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.034018][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.858'. [ 148.766470][ T6855] netlink: 68 bytes leftover after parsing attributes in process `syz.3.866'. [ 148.787060][ T6859] netlink: 'syz.1.867': attribute type 10 has an invalid length. [ 148.789796][ T6859] team0: Port device bridge0 removed [ 148.792140][ T6859] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 148.802107][ T6859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.867'. [ 148.894701][ T6859] bond0: (slave bridge0): Releasing backup interface [ 149.634454][ T27] audit: type=1326 audit(149.620:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.875" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2777aa8 code=0x7fc00000 [ 149.639460][ T27] audit: type=1326 audit(149.630:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.1.875" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa2777aa8 code=0x7fc00000 [ 149.990757][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 150.001850][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 150.081625][ T6891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.881'. [ 150.137286][ T6897] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 150.149013][ T6897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.173982][ T6897] device macvlan2 entered promiscuous mode [ 150.176788][ T6897] device bond2 entered promiscuous mode [ 150.179410][ T6897] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 150.182565][ T6897] team0: Port device macvlan2 added [ 151.690128][ T27] audit: type=1326 audit(151.680:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.0.916" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff90377aa8 code=0x0 [ 152.127450][ T6994] VFS: Mount too revealing [ 152.176870][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 152.178507][ T7000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.179852][ T7000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.188407][ T7000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.560893][ T27] audit: type=1326 audit(152.550:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.0.931" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90377aa8 code=0x0 [ 152.677548][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.937'. [ 152.704642][ T7034] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 152.775127][ T27] audit: type=1326 audit(152.770:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.936" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2777aa8 code=0x7fc00000 [ 152.780094][ T27] audit: type=1326 audit(152.770:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.936" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa2777aa8 code=0x7fc00000 [ 153.312500][ T7061] netlink: 'syz.2.945': attribute type 4 has an invalid length. [ 153.324833][ T7061] netlink: 'syz.2.945': attribute type 4 has an invalid length. [ 153.548778][ T6656] bond0: (slave bond_slave_0): interface is now down [ 153.550171][ T6656] bond0: (slave bond_slave_1): interface is now down [ 153.557694][ T7076] netlink: 'syz.0.952': attribute type 10 has an invalid length. [ 153.564167][ T6656] bond0: (slave bond_slave_0): interface is now down [ 153.565461][ T6656] bond0: (slave bond_slave_1): interface is now down [ 153.568441][ T6656] bond0: now running without any active interface! [ 153.625542][ T4325] bond1: (slave macvlan2): link status definitely down, disabling slave [ 153.627473][ T4325] bond1: now running without any active interface! [ 154.082503][ T7081] VFS: Mount too revealing [ 154.613602][ T7103] mmap: syz.1.961 (7103) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.744282][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 154.834407][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 155.102765][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 156.476234][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 156.479100][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 156.502059][ T7164] tipc: Failed to remove unknown binding: 66,0,0/0:3637926528/3637926530 [ 156.503603][ T7164] tipc: Failed to remove unknown binding: 66,0,0/0:3637926528/3637926529 [ 156.506263][ T7164] tipc: Failed to remove unknown binding: 66,0,0/0:3637926528/3637926530 [ 156.507804][ T7164] tipc: Failed to remove unknown binding: 66,0,0/0:3637926528/3637926529 [ 157.022430][ T7175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.987'. [ 157.546248][ T7189] tipc: Started in network mode [ 157.547200][ T7189] tipc: Node identity ac14140f, cluster identity 4711 [ 157.548491][ T7189] tipc: New replicast peer: 255.255.255.255 [ 157.549867][ T7189] tipc: Enabled bearer , priority 10 [ 157.552090][ T7189] tipc: Cannot configure node identity twice [ 157.553188][ T7189] tipc: Cannot configure node identity twice [ 157.910108][ T7222] : renamed from veth0_vlan [ 158.605528][ T4332] tipc: Node number set to 2886997007 [ 158.728218][ T7242] tipc: Started in network mode [ 158.729281][ T7242] tipc: Node identity 7f000001, cluster identity 4711 [ 158.730633][ T7242] tipc: Enabling of bearer rejected, failed to enable media [ 158.733889][ T7242] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 158.736554][ T7242] tipc: Enabled bearer , priority 10 [ 158.939148][ T7262] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 159.854141][ T5946] tipc: Node number set to 2130706433 [ 159.923214][ T7294] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.1029'. [ 160.686510][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 160.918091][ T7349] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1049'. [ 160.919750][ T7349] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1049'. [ 163.023922][ T7390] fuse: Bad value for 'fd' [ 163.259839][ T7403] overlayfs: failed to clone upperpath [ 163.292085][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1070'. [ 163.596400][ T7440] netlink: 'syz.0.1083': attribute type 10 has an invalid length. [ 163.602804][ T7440] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 163.605218][ T7440] team0: Failed to send options change via netlink (err -105) [ 163.606555][ T7440] team0: Port device netdevsim0 added [ 163.608240][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.260330][ T7464] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 164.518707][ T7472] netlink: 'syz.3.1093': attribute type 11 has an invalid length. [ 164.521069][ T7472] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1093'. [ 165.443385][ T7497] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4289] was attempted by " [ 165.470114][ T7491] netlink: 'syz.1.1101': attribute type 9 has an invalid length. [ 165.491157][ T7491] netlink: 'syz.1.1101': attribute type 6 has an invalid length. [ 165.492663][ T7491] netlink: 'syz.1.1101': attribute type 7 has an invalid length. [ 165.494442][ T7491] netlink: 'syz.1.1101': attribute type 8 has an invalid length. [ 167.141835][ T22] libceph: connect (1)[c::]:6789 error -101 [ 167.143525][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 167.145026][ T22] libceph: connect (1)[c::]:6789 error -101 [ 167.146215][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 167.195457][ T7523] tipc: Failed to remove unknown binding: 66,0,0/0:1003098686/1003098688 [ 167.197308][ T7523] tipc: Failed to remove unknown binding: 66,0,0/0:1003098686/1003098687 [ 167.199302][ T7523] tipc: Failed to remove unknown binding: 66,0,0/0:1003098686/1003098688 [ 167.200904][ T7523] tipc: Failed to remove unknown binding: 66,0,0/0:1003098686/1003098687 [ 167.347908][ T7512] ceph: No mds server is up or the cluster is laggy [ 167.408701][ T4328] libceph: connect (1)[c::]:6789 error -101 [ 167.409870][ T4328] libceph: mon0 (1)[c::]:6789 connect error [ 167.524856][ T4280] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 167.526635][ T4280] Bluetooth: hci4: Injecting HCI hardware error event [ 167.530197][ T4280] Bluetooth: hci4: hardware error 0x00 [ 167.854405][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1119'. [ 168.054982][ T7564] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1121'. [ 168.121475][ T27] audit: type=1326 audit(168.110:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.1121" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff90377aa8 code=0x0 [ 169.994145][ T4280] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 170.033835][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 170.431166][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1162'. [ 173.402391][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1196'. [ 173.476609][ T7775] bridge0: port 1(dummy0) entered blocking state [ 173.478579][ T7775] bridge0: port 1(dummy0) entered disabled state [ 173.480269][ T7775] device dummy0 entered promiscuous mode [ 173.489989][ T7780] netlink: 'syz.0.1196': attribute type 10 has an invalid length. [ 173.491578][ T7780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1196'. [ 173.495132][ T7780] bridge0: port 1(dummy0) entered disabled state [ 173.655586][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1207'. [ 174.156206][ T7811] netlink: 'syz.4.1211': attribute type 1 has an invalid length. [ 174.163371][ T7811] device bond3 entered promiscuous mode [ 174.165227][ T7811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.173109][ T7811] device bridge2 entered promiscuous mode [ 174.175999][ T7811] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 174.182158][ T7811] device veth7 entered promiscuous mode [ 174.185059][ T7811] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 174.276119][ T11] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 174.279079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 174.703595][ T55] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 174.991810][ T7843] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 175.001862][ T7843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.024736][ T7843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.026476][ T7843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.028134][ T7843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.030074][ T7843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.033734][ T7843] bond1: (slave geneve2): making interface the new active one [ 175.037216][ T7843] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 175.039055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 175.187592][ T7846] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1222'. [ 175.223104][ T7860] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 175.788685][ T7870] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.1226'. [ 176.743719][ T7886] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 176.797409][ T7886] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 176.799410][ T7886] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 176.802913][ T7886] bond3: (slave vxcan3): making interface the new active one [ 176.804888][ T7886] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 177.181736][ T27] audit: type=1326 audit(177.170:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.3.1241" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc377aa8 code=0x7fc00000 [ 177.190385][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'. [ 177.209853][ T7886] bond3 (unregistering): (slave vxcan3): Releasing backup interface [ 177.212143][ T27] audit: type=1326 audit(177.200:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.3.1241" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffbc377aa8 code=0x7fc00000 [ 177.247235][ T7886] bond3 (unregistering): Released all slaves [ 178.465512][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 178.468789][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'. [ 178.541979][ T7950] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 182.763985][ T8006] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.1276'. [ 182.872200][ T8009] VFS: Mount too revealing [ 182.898355][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1282'. [ 182.907523][ T8016] netlink: 'syz.1.1282': attribute type 10 has an invalid length. [ 182.908993][ T8016] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1282'. [ 183.333957][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 184.315378][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 184.318493][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 184.738650][ T8057] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4292] was attempted by " [ 185.146514][ T8063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.565721][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1299'. [ 185.616755][ T8071] bridge3: port 1(dummy0) entered blocking state [ 185.618200][ T8071] bridge3: port 1(dummy0) entered disabled state [ 185.619818][ T8071] device dummy0 entered promiscuous mode [ 185.629302][ T8071] netlink: 'syz.4.1299': attribute type 10 has an invalid length. [ 185.630922][ T8071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1299'. [ 185.633367][ T8071] bridge3: port 1(dummy0) entered blocking state [ 185.634600][ T8071] bridge3: port 1(dummy0) entered forwarding state [ 185.636688][ T8071] bridge3: port 1(dummy0) entered disabled state [ 185.964665][ T8070] netlink: 'syz.1.1300': attribute type 4 has an invalid length. [ 185.966206][ T8070] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1300'. [ 186.105309][ T8089] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 186.107708][ T8089] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 186.109713][ T8089] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 186.111679][ T8089] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 186.113523][ T8089] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 186.130836][ T8084] : renamed from veth0_vlan [ 186.136794][ T8089] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 186.138747][ T8089] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 186.140763][ T8089] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 186.142664][ T8089] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 186.144993][ T8089] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 187.044257][ T8107] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4278] was attempted by " [ 187.354373][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.375952][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.539330][ T8116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.632675][ T8119] netlink: 'syz.2.1316': attribute type 4 has an invalid length. [ 187.636275][ T8119] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1316'. [ 187.688512][ T8124] capability: warning: `syz.2.1318' uses deprecated v2 capabilities in a way that may be insecure [ 190.926302][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1338'. [ 191.027782][ T8177] device bridge_slave_0 entered promiscuous mode [ 191.029040][ T8177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.072975][ T8188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1340'. [ 192.127900][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1341'. [ 192.129867][ T8193] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1341'. [ 192.132176][ T8198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.182540][ T8191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.650767][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 193.830257][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1351'. [ 193.896519][ T8230] 8021q: adding VLAN 0 to HW filter on device team1 [ 194.922278][ T8263] No such timeout policy "syz1" [ 195.189949][ T27] audit: type=1326 audit(195.180:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.3.1363" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc377aa8 code=0x0 [ 195.929229][ T8281] set match dimension is over the limit! [ 197.251741][ T8300] Invalid option length (57448) for dns_resolver key [ 197.718209][ T8304] netlink: 'syz.1.1373': attribute type 10 has an invalid length. [ 197.721578][ T8304] device syz_tun entered promiscuous mode [ 197.732337][ T8304] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 197.738859][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'. [ 199.535648][ T8337] tipc: Started in network mode [ 199.536611][ T8337] tipc: Node identity 080211000001, cluster identity 4711 [ 199.538984][ T8337] tipc: Enabled bearer , priority 0 [ 199.889906][ T8349] No such timeout policy "syz1" [ 200.367961][ T8361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1391'. [ 200.689340][ T5948] tipc: Node number set to 134418688 [ 202.177988][ T8403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1400'. [ 202.186551][ T8403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1400'. [ 205.299985][ T8442] tipc: Enabling of bearer rejected, failed to enable media [ 207.187060][ T8478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1421'. [ 207.192460][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1423'. [ 207.198350][ T8478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1421'. [ 207.207268][ T8479] device ip6gre2 entered promiscuous mode [ 207.290984][ T8480] netlink: 'syz.4.1423': attribute type 6 has an invalid length. [ 207.301360][ T8480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1423'. [ 208.227164][ T8495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.233415][ T8495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.952629][ T8513] No such timeout policy "syz1" [ 209.215936][ T8509] tipc: Enabled bearer , priority 0 [ 211.030697][ T8553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.034503][ T8553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.517848][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1465'. [ 214.828185][ T8614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.837116][ T8614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.383910][ T8629] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1472'. [ 215.477990][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1475'. [ 215.516573][ T8636] net_ratelimit: 12146 callbacks suppressed [ 215.516582][ T8636] Set syz1 is full, maxelem 65536 reached [ 215.865169][ T8656] netlink: 'syz.3.1485': attribute type 4 has an invalid length. [ 220.554809][ T8766] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1518'. [ 221.486646][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 222.496861][ T8792] netlink: 'syz.3.1528': attribute type 2 has an invalid length. [ 222.498224][ T8792] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1528'. [ 223.977816][ T8843] overlayfs: failed to clone lowerpath [ 223.981907][ T8843] overlayfs: failed to clone lowerpath [ 224.330266][ T8860] netlink: 'syz.2.1549': attribute type 11 has an invalid length. [ 224.758841][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.760385][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.449724][ T8865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.042560][ T8865] tipc: Resetting bearer [ 226.387866][ T8865] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.389752][ T8865] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.393753][ T8865] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.395314][ T8865] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.799727][ T8865] device bond2 left promiscuous mode [ 226.889268][ T8866] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1551'. [ 226.931256][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1563'. [ 226.941411][ T8913] bridge4: port 1(veth7) entered blocking state [ 226.942708][ T8913] bridge4: port 1(veth7) entered disabled state [ 226.947614][ T8913] device veth7 entered promiscuous mode [ 226.951193][ T8913] bridge4: port 2(veth0_to_bond) entered blocking state [ 226.952786][ T8913] bridge4: port 2(veth0_to_bond) entered disabled state [ 226.954875][ T8913] device veth0_to_bond entered promiscuous mode [ 226.999868][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1567'. [ 231.296532][ T8962] netlink: 'syz.4.1576': attribute type 3 has an invalid length. [ 232.616786][ T8969] tipc: Enabling of bearer rejected, already enabled [ 233.404107][ T9004] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1595'. [ 233.452205][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.454787][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.456888][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.482263][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.484080][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.486150][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.567426][ T9007] chnl_net:caif_netlink_parms(): no params data found [ 234.315161][ T9007] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.320990][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.323927][ T9007] device bridge_slave_0 entered promiscuous mode [ 234.327239][ T9007] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.328692][ T9007] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.330657][ T9007] device bridge_slave_1 entered promiscuous mode [ 234.393481][ T9037] dns_resolver: Unsupported server list version (6) [ 234.602728][ T9007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.605667][ T9007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.615194][ T9007] team0: Port device team_slave_0 added [ 234.617345][ T9007] team0: Port device team_slave_1 added [ 234.623652][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.625158][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.630407][ T9007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.632676][ T9035] netlink: 'syz.0.1604': attribute type 4 has an invalid length. [ 234.642328][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.648053][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.655322][ T9007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.662698][ T9035] netlink: 'syz.0.1604': attribute type 4 has an invalid length. [ 234.672540][ T9035] netlink: 'syz.0.1604': attribute type 4 has an invalid length. [ 234.707792][ T9007] device hsr_slave_0 entered promiscuous mode [ 234.726170][ T9007] device hsr_slave_1 entered promiscuous mode [ 234.763312][ T9007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.764640][ T9007] Cannot create hsr debugfs directory [ 235.401204][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 237.111394][ T9007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 237.145411][ T9007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 237.184030][ T9007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 237.212448][ T9007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 237.269772][ T9007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.273689][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.275595][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.281607][ T9007] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.284165][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.286166][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.288809][ T4503] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.290267][ T4503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.292140][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.295255][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.297598][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.299438][ T4503] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.300646][ T4503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.303965][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.308636][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.318955][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.321200][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.323213][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.329050][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.331366][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.334454][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.336507][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.339665][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.341558][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.344711][ T9007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.382405][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 237.400958][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.402695][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.406634][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.415702][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.417792][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.425375][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.427360][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.429260][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.431504][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.434099][ T9007] device veth0_vlan entered promiscuous mode [ 237.438129][ T9007] device veth1_vlan entered promiscuous mode [ 237.444873][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.446791][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.448618][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.450828][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.453818][ T9007] device veth0_macvtap entered promiscuous mode [ 237.456270][ T9007] device veth1_macvtap entered promiscuous mode [ 237.462989][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.464821][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.467126][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.469034][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.471128][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.507078][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.513588][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.518897][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.520715][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.527217][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.528620][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.530590][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.533531][ T9007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.537095][ T9007] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.540731][ T9007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.542750][ T9007] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.641682][ T8965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.643275][ T8965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.644721][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.662484][ T8965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.663905][ T8965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.665331][ T6261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.613092][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 241.514298][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'. [ 241.557105][ T9181] netlink: 'syz.2.1646': attribute type 1 has an invalid length. [ 241.563325][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.566665][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.569536][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.572637][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.574803][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 241.578915][ T9181] batman_adv: batadv0: Adding interface: ipvlan2 [ 241.581174][ T9181] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.588023][ T9181] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 241.615271][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.617228][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.619029][ T9181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.622621][ T9181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.625203][ T9181] batman_adv: batadv0: Adding interface: ipvlan3 [ 241.626341][ T9181] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.633172][ T9181] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 241.644472][ T9184] netlink: 'syz.3.1645': attribute type 10 has an invalid length. [ 241.652941][ T9184] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 241.948890][ T9188] netem: change failed [ 242.033080][ T9194] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 242.042194][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 243.366299][ T9212] Invalid ELF header magic: != ELF [ 244.658701][ T9240] netlink: 'syz.3.1661': attribute type 1 has an invalid length. [ 244.668534][ T9240] 8021q: adding VLAN 0 to HW filter on device bond3 [ 244.676716][ T9240] bond3: (slave vlan2): making interface the new active one [ 244.679273][ T9240] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 244.720455][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 246.368617][ T9290] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 246.374547][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 246.375811][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 246.397892][ T9293] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1680'. [ 246.417863][ T9293] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1680'. [ 250.930072][ T9366] netlink: 'syz.1.1703': attribute type 4 has an invalid length. [ 251.000845][ T9366] netlink: 'syz.1.1703': attribute type 17 has an invalid length. [ 252.030546][ T9383] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 252.589228][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 252.593859][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 252.595887][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 252.598253][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 252.600321][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 253.650266][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 253.656359][ T9404] device team1 entered promiscuous mode [ 253.657542][ T9407] netlink: 'syz.4.1714': attribute type 1 has an invalid length. [ 253.663637][ T9407] device bond4 entered promiscuous mode [ 253.664768][ T9407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.670550][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 253.678119][ T9404] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 253.685595][ T9404] device team2 entered promiscuous mode [ 253.706822][ T9407] bond4: (slave bridge4): making interface the new active one [ 253.708619][ T9407] device bridge4 entered promiscuous mode [ 253.710722][ T9407] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 253.712337][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 254.631680][ T9436] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.633171][ T9436] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.647493][ T9436] device bridge_slave_1 left promiscuous mode [ 254.649808][ T9436] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.694160][ T9436] device bridge_slave_0 left promiscuous mode [ 254.695502][ T9436] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.107190][ T9442] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 255.197088][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1725'. [ 256.542879][ T9459] loop2: detected capacity change from 0 to 40427 [ 256.556304][ T9459] F2FS-fs (loop2): invalid crc value [ 256.562116][ T9459] F2FS-fs (loop2): Found nat_bits in checkpoint [ 256.581311][ T9459] F2FS-fs (loop2): Start checkpoint disabled! [ 256.594314][ T9459] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 257.163364][ T6656] kworker/u4:13: attempt to access beyond end of device [ 257.163364][ T6656] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 258.682092][ T9511] 9pnet_fd: Insufficient options for proto=fd [ 258.703015][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1747'. [ 258.722632][ T9513] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 258.724392][ T9513] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 258.726101][ T9513] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 258.727849][ T9513] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 258.730205][ T9513] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 258.749716][ T9513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1747'. [ 258.752076][ T9513] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.503196][ T9532] tipc: Enabling of bearer rejected, already enabled [ 259.506159][ T9532] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1754'. [ 259.509852][ T9532] tipc: Enabling of bearer rejected, failed to enable media [ 259.828609][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 260.124961][ T9542] loop2: detected capacity change from 0 to 32768 [ 260.156015][ T9542] XFS (loop2): Mounting V5 Filesystem [ 260.181146][ T9542] XFS (loop2): Ending clean mount [ 260.358894][ T9007] XFS (loop2): Unmounting Filesystem [ 260.624805][ T9570] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1763'. [ 265.850431][ T9660] overlayfs: unrecognized mount option "\']*=[\1\" or missing value [ 266.862165][ T9661] loop2: detected capacity change from 0 to 40427 [ 266.873348][ T9661] F2FS-fs (loop2): Invalid Fs Meta Ino: node(2305) meta(2) root(3) [ 266.875000][ T9661] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 266.877001][ T9661] F2FS-fs (loop2): invalid crc value [ 267.021695][ T9661] F2FS-fs (loop2): Found nat_bits in checkpoint [ 267.051686][ T9661] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 267.053004][ T9661] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 267.393830][ T9661] syz.2.1781: attempt to access beyond end of device [ 267.393830][ T9661] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 267.483311][ T9688] xt_CT: No such helper "pptp" [ 267.491828][ T9007] syz-executor: attempt to access beyond end of device [ 267.491828][ T9007] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 269.040004][ T9725] 0x0000fffffffd-0x00010000fffd : "" [ 269.041502][ T9725] mtd: partition "" is out of reach -- disabled [ 269.054790][ T9725] ftl_cs: FTL header not found. [ 269.372962][ T9733] Removing MTD device #1 () with use count 1 [ 270.011312][ T9750] fuse: Invalid group_id [ 272.786547][ T9796] sctp: [Deprecated]: syz.1.1824 (pid 9796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.786547][ T9796] Use struct sctp_sack_info instead [ 272.880435][ T9804] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1830'. [ 272.973457][ T9814] device syzkaller0 entered promiscuous mode [ 273.081708][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'. [ 275.161325][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 275.544398][ T9863] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 275.544398][ T9863] The task syz.3.1846 (9863) triggered the difference, watch for misbehavior. [ 276.054920][ T9879] netlink: 'syz.4.1853': attribute type 1 has an invalid length. [ 276.116431][ T9882] bond5: (slave gretap1): making interface the new active one [ 276.118656][ T9882] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 276.436325][ T9879] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 277.509006][ T9913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.571470][ T9913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.574090][ T9913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.663779][ T9915] loop2: detected capacity change from 0 to 512 [ 277.669050][ T9915] EXT4-fs: Ignoring removed oldalloc option [ 277.670439][ T9915] EXT4-fs: Ignoring removed bh option [ 277.682298][ T9915] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 277.870034][ T9915] EXT4-fs (loop2): 1 truncate cleaned up [ 277.871072][ T9915] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 277.999844][ T9929] netlink: 'syz.1.1866': attribute type 1 has an invalid length. [ 278.022665][ T9929] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.051697][ T9929] bond3: (slave veth11): Enslaving as an active interface with a down link [ 278.061507][ T9929] bond3: (slave vlan3): Opening slave failed [ 278.311748][ T9007] EXT4-fs (loop2): unmounting filesystem. [ 278.679283][ T9951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1874'. [ 281.191019][ T9976] loop2: detected capacity change from 0 to 764 [ 282.589270][T10002] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4279] was attempted by " [ 283.377816][T10020] 9pnet: p9_errstr2errno: server reported unknown error VmIL◅N [ 283.482370][T10025] netlink: 'syz.3.1896': attribute type 2 has an invalid length. [ 283.485974][T10025] netlink: 'syz.3.1896': attribute type 2 has an invalid length. [ 283.487552][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 286.418252][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1909'. [ 287.417169][ T27] audit: type=1326 audit(2000000030.309:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.1.1915" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2777aa8 code=0x7fc00000 [ 287.423155][ T27] audit: type=1326 audit(2000000030.309:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.1.1915" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa2777aa8 code=0x7fc00000 [ 287.428363][T10090] loop2: detected capacity change from 0 to 40427 [ 287.443326][T10090] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 287.445111][T10090] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 287.460775][T10090] F2FS-fs (loop2): Found nat_bits in checkpoint [ 287.473425][T10090] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 287.474966][T10090] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 288.478443][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 288.736970][T10135] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1928'. [ 288.939299][T10144] bond2: option mode: unable to set because the bond device is up [ 288.957893][T10144] device veth0 entered promiscuous mode [ 288.967256][T10144] bond2: (slave macvlan2): making interface the new active one [ 288.973450][T10144] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 288.975355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 289.015594][T10146] device syzkaller0 entered promiscuous mode [ 290.478199][T10173] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 290.480087][T10173] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 290.481532][T10173] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 290.483082][T10173] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 290.484623][T10173] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 290.486006][T10173] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 290.487448][T10173] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 290.488847][T10173] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 290.490334][T10173] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 290.491750][T10173] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 291.548847][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 291.575357][T10195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.577409][T10195] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.647850][ T5318] bond3: (slave bridge2): link status up again after 0 ms [ 291.686941][T10204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1946'. [ 292.162948][T10215] device syzkaller0 entered promiscuous mode [ 293.027904][T10229] loop2: detected capacity change from 0 to 512 [ 293.032931][T10229] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 293.046068][T10229] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 293.050386][T10229] EXT4-fs (loop2): 1 truncate cleaned up [ 293.051610][T10229] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 293.088915][ T9007] EXT4-fs (loop2): unmounting filesystem. [ 293.897960][T10243] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 293.901129][T10243] lo: Caught tx_queue_len zero misconfig [ 294.784827][T10263] loop2: detected capacity change from 0 to 2048 [ 294.836754][T10263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.839343][T10263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.843269][T10263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.844829][T10263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.859824][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 294.916467][T10266] 8021q: adding VLAN 0 to HW filter on device bond5 [ 294.927566][T10266] bond4: (slave bond5): Enslaving as an active interface with an up link [ 294.943984][T10266] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 294.955126][T10266] bond4: (slave gretap1): Error: Slave device does not support XDP [ 295.333455][ T5318] net_ratelimit: 5290 callbacks suppressed [ 295.333510][ T5318] bond3: (slave bridge2): failed to get link speed/duplex [ 295.437110][ T5318] bond3: (slave bridge2): failed to get link speed/duplex [ 295.543190][ T5318] bond3: (slave bridge2): failed to get link speed/duplex [ 295.664512][ T8940] bond3: (slave bridge2): failed to get link speed/duplex [ 295.820114][ T4325] bond3: (slave bridge2): failed to get link speed/duplex [ 296.027150][ T4325] bond3: (slave bridge2): failed to get link speed/duplex [ 296.151156][ T4325] bond3: (slave bridge2): failed to get link speed/duplex [ 296.265356][ T4325] bond3: (slave bridge2): failed to get link speed/duplex [ 296.379609][ T39] bond3: (slave bridge2): failed to get link speed/duplex [ 296.493959][ T8940] bond3: (slave bridge2): failed to get link speed/duplex [ 296.974999][T10285] sched: RT throttling activated [ 297.099596][T10303] device syzkaller0 entered promiscuous mode [ 298.369660][T10328] netlink: 'syz.3.1985': attribute type 12 has an invalid length. [ 298.510976][T10331] loop2: detected capacity change from 0 to 512 [ 298.569436][T10331] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 298.653275][T10331] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 299.119546][T10348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1990'. [ 299.135480][T10348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1990'. [ 300.353559][ T4325] net_ratelimit: 27 callbacks suppressed [ 300.353573][ T4325] bond3: (slave bridge2): failed to get link speed/duplex [ 300.518744][ T9] bond3: (slave bridge2): failed to get link speed/duplex [ 300.620071][ T9] bond3: (slave bridge2): failed to get link speed/duplex [ 300.723515][ T9] bond3: (slave bridge2): failed to get link speed/duplex [ 353.664351][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 55s! [ 353.666272][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 55s! [ 353.667783][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 55s! [ 353.669399][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 55s! [ 353.670966][ C0] Showing busy workqueues and worker pools: [ 353.671982][ C0] workqueue events: flags=0x0 [ 353.672835][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=10/256 refcnt=11 [ 353.672858][ C0] pending: psi_avgs_work, nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, psi_avgs_work, kfree_rcu_monitor, psi_avgs_work, psi_avgs_work, psi_avgs_work, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance [ 353.672926][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=11/256 refcnt=12 [ 353.672936][ C0] pending: nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, nsim_dev_hwstats_traffic_work, vmstat_shepherd, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, ovs_dp_masks_rebalance, psi_avgs_work, kfree_rcu_monitor [ 353.672990][ C0] workqueue events_long: flags=0x0 [ 353.685355][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 353.685380][ C0] pending: defense_work_handler, defense_work_handler [ 353.685401][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 353.685412][ C0] pending: defense_work_handler, defense_work_handler, defense_work_handler, defense_work_handler, defense_work_handler [ 353.685441][ C0] workqueue events_unbound: flags=0x2 [ 353.692998][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=10/512 refcnt=12 [ 353.693011][ C0] pending: toggle_allocation_gate, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, cfg80211_wiphy_work, flush_memcg_stats_dwork, macvlan_process_broadcast, macvlan_process_broadcast [ 353.693066][ C0] workqueue events_power_efficient: flags=0x82 [ 353.699900][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=7/256 refcnt=9 [ 353.699924][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_periodic_work, neigh_managed_work, hash_ipport4_gc, do_cache_clean, gc_worker [ 353.699963][ C0] workqueue mm_percpu_wq: flags=0x8 [ 353.704935][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 353.704956][ C0] pending: vmstat_update [ 353.704967][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 353.704977][ C0] pending: vmstat_update [ 353.704987][ C0] workqueue writeback: flags=0x4a [ 353.710227][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 353.710251][ C0] pending: wb_workfn [ 353.710263][ C0] workqueue kblockd: flags=0x18 [ 353.713089][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 353.713116][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 353.713166][ C0] workqueue dm_bufio_cache: flags=0x8 [ 353.716819][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 353.716843][ C0] pending: work_fn [ 353.716863][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 353.719948][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 353.719970][ C0] pending: addrconf_verify_work [ 353.719986][ C0] workqueue krxrpcd: flags=0x0 [ 353.723231][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=7 [ 353.723253][ C0] pending: rxrpc_peer_keepalive_worker [ 353.723263][ C0] inactive: rxrpc_peer_keepalive_worker, rxrpc_peer_keepalive_worker, rxrpc_peer_keepalive_worker, rxrpc_peer_keepalive_worker, rxrpc_peer_keepalive_worker [ 353.723293][ C0] workqueue krdsd: flags=0xe000a [ 353.729367][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 [ 353.729386][ C0] pending: rds_connect_worker [ 353.729395][ C0] inactive: rds_connect_worker [ 353.729406][ C0] workqueue bat_events: flags=0xe000a [ 353.733417][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=52 [ 353.733445][ C0] pending: batadv_nc_worker [ 353.733459][ C0] inactive: batadv_nc_worker, batadv_nc_worker, batadv_nc_worker, batadv_nc_worker, batadv_nc_worker, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_purge_orig, batadv_purge_orig, batadv_purge_orig, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet [ 353.733578][ C0] , batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge, batadv_tt_purge, batadv_tt_purge, batadv_tt_purge, batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_tt_purge [ 353.733656][ C0] workqueue bond0: flags=0xa000a [ 353.760200][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=3 [ 353.760220][ C0] pending: bond_arp_monitor [ 353.760238][ C0] workqueue wg-kex-wg0: flags=0x6 [ 353.763201][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 353.763222][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 353.763240][ C0] workqueue wg-kex-wg1: flags=0x6 [ 353.766931][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 353.766954][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 353.766971][ C0] workqueue wg-kex-wg2: flags=0x6 [ 353.770862][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 353.770887][ C0] pending: wg_packet_handshake_send_worker [ 353.770901][ C0] workqueue wg-kex-wg0: flags=0x6 [ 353.774100][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 353.774122][ C0] pending: wg_packet_handshake_send_worker [ 353.774133][ C0] workqueue wg-kex-wg1: flags=0x6 [ 353.777450][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 353.777473][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 353.777493][ C0] workqueue bond1: flags=0xa000a [ 353.781386][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 [ 353.781408][ C0] pending: bond_mii_monitor [ 353.781416][ C0] inactive: bond_alb_monitor [ 353.781428][ C0] workqueue bond2: flags=0xa000a [ 353.785158][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 [ 353.785183][ C0] pending: bond_mii_monitor [ 353.785196][ C0] inactive: bond_alb_monitor [ 353.785205][ C0] workqueue bond1: flags=0xa000a [ 353.789214][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 [ 353.789236][ C0] pending: bond_mii_monitor [ 353.789250][ C0] inactive: bond_alb_monitor [ 353.789259][ C0] workqueue bond3: flags=0xa000a [ 353.793202][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 [ 353.793226][ C0] pending: bond_3ad_state_machine_handler [ 353.793234][ C0] inactive: bond_mii_monitor [ 353.793243][ C0] workqueue bond1: flags=0xa000a [ 353.797445][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 [ 353.797464][ C0] pending: bond_alb_monitor [ 353.797471][ C0] inactive: bond_mii_monitor [ 353.797480][ C0] workqueue hci3: flags=0xa0012 [ 353.801295][ C0] pwq 5: cpus=0-1 flags=0x4 nice=-20 active=1/1 refcnt=3 [ 353.801318][ C0] pending: hci_conn_timeout [ 353.801329][ C0] workqueue wg-kex-wg0: flags=0x6 [ 353.804331][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 353.804355][ C0] pending: wg_packet_handshake_send_worker [ 353.804369][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 353.807804][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 353.807822][ C0] pending: wg_packet_encrypt_worker [ 353.807831][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 353.807841][ C0] pending: wg_packet_encrypt_worker [ 353.807849][ C0] workqueue wg-kex-wg1: flags=0x6 [ 353.813463][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 353.813483][ C0] pending: wg_packet_handshake_send_worker [ 353.813493][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 353.816860][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 353.816875][ C0] pending: wg_packet_encrypt_worker [ 353.816884][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 353.816894][ C0] pending: wg_packet_encrypt_worker [ 353.816902][ C0] workqueue wg-kex-wg2: flags=0x6 [ 353.822534][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 353.822559][ C0] pending: wg_packet_handshake_send_worker [ 353.822569][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 353.825979][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 353.825999][ C0] pending: wg_packet_encrypt_worker [ 353.826009][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 353.826020][ C0] pending: wg_packet_encrypt_worker [ 353.826029][ C0] workqueue bond3: flags=0xa000a [ 353.831680][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 [ 353.831704][ C0] pending: bond_mii_monitor [ 353.831713][ C0] inactive: bond_alb_monitor [ 353.831721][ C0] workqueue bond3: flags=0xa000a [ 353.835653][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 [ 353.835667][ C0] pending: bond_alb_monitor [ 353.835674][ C0] inactive: bond_mii_monitor