last executing test programs: 8.417262982s ago: executing program 1 (id=725): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r1 = dup(0xffffffffffffffff) faccessat(r1, &(0x7f0000000200)='./file0\x00', 0x2) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r2, 0x402, 0x29) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c94a6fb08bb1fb4, &(0x7f0000000280)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r3}) io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x2}]) r4 = memfd_create(0x0, 0x0) finit_module(r4, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r5, 0x3, r0, 0x5}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x1, 0x1, 0xc, 0x2, 0x3}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) 7.547698416s ago: executing program 0 (id=727): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r0, 0x801, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "ff000000a2"}, @NL80211_KEY_IDX={0x5}]}]}, 0x40}}, 0x0) 7.457095393s ago: executing program 0 (id=730): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)='0', 0xfe64) 5.944415674s ago: executing program 1 (id=740): socket(0x10, 0x803, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) syz_open_dev$usbfs(&(0x7f00000001c0), 0xd, 0x0) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.922126379s ago: executing program 3 (id=744): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x44, r2, 0xb97534d5fe9704cf, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x44}}, 0x0) 4.809302267s ago: executing program 3 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000340)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 4.648685219s ago: executing program 3 (id=748): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6026e0000fc020000000000000000000000000000fe8000000000000000000000000000aa223427d5c9a46b9fa14172170a013589317d2af31ba554311bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c892"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = syz_io_uring_setup(0x25c, &(0x7f00000003c0)={0x0, 0xb906, 0x0, 0x3, 0x69}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) mount$afs(&(0x7f0000000540)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 4.372990469s ago: executing program 0 (id=750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8000, 0x11641e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8100c400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x17}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x4a231bf3b3ab526d}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x12, r6, 0x0, 0x0, 0x0, 0x10042, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x8aa, 0x39, 0x0, 0x0, 0x0) 4.316509133s ago: executing program 2 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getpid() r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r3, 0x6, 0x1e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvfrom$inet(r2, &(0x7f00000002c0)=""/231, 0xfffffffffffffee2, 0x40000102, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) 3.549195739s ago: executing program 3 (id=754): syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x100, 0x4}}}, 0x7) 3.497158733s ago: executing program 3 (id=755): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0xc0, 0x24, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xc}, {0xfffa, 0x10}, {0xffe0, 0x9}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x36, 0xb0, 0x0, 0x6, 0x0, 0x0, 0x40, 0x1}}, {0x6, 0x2, [0x5ae]}}, {{0x1c, 0x1, {0x8, 0x26, 0x3, 0x0, 0x1, 0x0, 0xc, 0x1}}, {0x6, 0x2, [0x400]}}]}, @qdisc_kind_options=@q_qfg={0x8}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9, "23b80e98653164d8897a7d1d6b979f4c"}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xa11e}]}}]}, 0xc0}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="040000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000f000000080003", @ANYRES32=0x0, @ANYBLOB="35000e0080000000ffffffffffff08021100000050505050505040000000000000000000640007100006020202020202250300ab4b00000005ff7f00000602020202020204002a0008000c000001000008000d"], 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f030e0033e6120306001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r5, 0x0, 0x6}, 0x18) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.44848115s ago: executing program 3 (id=756): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020400) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102385, &(0x7f0000000000)=0x18ff1) 2.373122335s ago: executing program 2 (id=757): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 2.372872426s ago: executing program 4 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000340)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 2.193052749s ago: executing program 4 (id=759): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000055c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 2.101168625s ago: executing program 4 (id=760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_inject_frame(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x61, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @broadcast, @random="a57c0398f3a0", {0x3, 0x4}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x40, @default, 0x61c, @val, @val, @void, @val={0x4, 0x6, {0x8, 0x9, 0x7fff, 0xf0}}, @val={0x6, 0x2, 0x4}, @val={0x2d, 0x1a, {0x2, 0x0, 0x7, 0x0, {0x8, 0xcd, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x4, 0x6}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x2}}}}]}, 0x94}}, 0x0) 2.059961399s ago: executing program 2 (id=761): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)=r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) membarrier(0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x64, 0x10, 0x1, 0x70bd2b, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20008}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xffff0000, @remote}}]}]}]}, 0xba}}, 0x800) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ca2000/0x4000)=nil, 0x4000}}) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0xe, &(0x7f00001c9fff)="03", 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00'}, 0x2c) 2.059044469s ago: executing program 1 (id=762): syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.63490839s ago: executing program 2 (id=763): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a6970"], 0x64}}, 0x0) 1.63455297s ago: executing program 1 (id=764): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0xffffffff, 0x4) 1.540198797s ago: executing program 0 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x44008) 1.450713643s ago: executing program 1 (id=766): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba", 0x2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r5, &(0x7f00000002c0)=ANY=[], 0x17) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) 1.321123482s ago: executing program 0 (id=767): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)={0x1c, 0x0, 0x1, 0x2000, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x2004c084) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000004c0)="c61c", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.316600073s ago: executing program 4 (id=768): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$packet_int(r0, 0x107, 0x1c, 0x0, 0x0) 1.193245412s ago: executing program 4 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000340)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 1.140823446s ago: executing program 0 (id=770): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x28380080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 327.022605ms ago: executing program 2 (id=771): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 141.494649ms ago: executing program 2 (id=772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba", 0x2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r5, &(0x7f00000002c0)=ANY=[], 0x17) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 80.046284ms ago: executing program 4 (id=773): socket(0x10, 0x803, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) syz_open_dev$usbfs(&(0x7f00000001c0), 0xd, 0x0) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=774): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x2e, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0x5749, 0x408882) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r7, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 306.517302][ T4307] cgroup: Unknown subsys name 'net' [ 306.759632][ T4307] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 307.063154][ T4307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 308.660837][ T4319] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.675273][ T4324] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.677794][ T4324] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.679995][ T4321] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.682156][ T4324] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.684941][ T4324] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.687119][ T4324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.689666][ T4324] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 308.691581][ T4324] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.693512][ T4324] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.696515][ T4324] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 308.699660][ T4324] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.742199][ T4321] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.745290][ T4321] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.747938][ T4321] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.750239][ T4321] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.752610][ T4321] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.755357][ T4321] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.757914][ T4321] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.760348][ T4321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.762417][ T4321] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.766021][ T4331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.766427][ T4321] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.770548][ T4321] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 308.772802][ T4321] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.775848][ T4321] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 308.778251][ T4321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.781350][ T4334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.785928][ T4321] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 308.788063][ T4321] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.998773][ T4322] chnl_net:caif_netlink_parms(): no params data found [ 309.014229][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 309.065377][ T4318] chnl_net:caif_netlink_parms(): no params data found [ 309.081249][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 309.134177][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.138402][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.141008][ T4328] device bridge_slave_0 entered promiscuous mode [ 309.165484][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.167438][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.170053][ T4322] device bridge_slave_0 entered promiscuous mode [ 309.172813][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.174906][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.177394][ T4328] device bridge_slave_1 entered promiscuous mode [ 309.199007][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.200894][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.203479][ T4322] device bridge_slave_1 entered promiscuous mode [ 309.217144][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.219029][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.221637][ T4318] device bridge_slave_0 entered promiscuous mode [ 309.225919][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.227960][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.230605][ T4325] device bridge_slave_0 entered promiscuous mode [ 309.243606][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.245830][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.248361][ T4318] device bridge_slave_1 entered promiscuous mode [ 309.256874][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.258946][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.261363][ T4325] device bridge_slave_1 entered promiscuous mode [ 309.265973][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 309.278644][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.288766][ T4318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.312016][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.315873][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.319609][ T4318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.328407][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.332565][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.354699][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.363324][ T4328] team0: Port device team_slave_0 added [ 309.374076][ T4318] team0: Port device team_slave_0 added [ 309.391310][ T4328] team0: Port device team_slave_1 added [ 309.395189][ T4322] team0: Port device team_slave_0 added [ 309.400623][ T4318] team0: Port device team_slave_1 added [ 309.413337][ T4322] team0: Port device team_slave_1 added [ 309.431337][ T4325] team0: Port device team_slave_0 added [ 309.434512][ T4325] team0: Port device team_slave_1 added [ 309.460591][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.462483][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.469920][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.479500][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.481546][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.484089][ T4326] device bridge_slave_0 entered promiscuous mode [ 309.487817][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.489798][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.492678][ T4326] device bridge_slave_1 entered promiscuous mode [ 309.496185][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.498185][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.505470][ T4318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.513716][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.516036][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.522663][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.530988][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.532964][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.540444][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.544122][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.550605][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.558815][ T4318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.562519][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.564737][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.571640][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.582491][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.585147][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.591770][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.598459][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.600502][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.607632][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.615924][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.641546][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.716556][ T4322] device hsr_slave_0 entered promiscuous mode [ 309.754977][ T4322] device hsr_slave_1 entered promiscuous mode [ 309.836033][ T4318] device hsr_slave_0 entered promiscuous mode [ 309.874666][ T4318] device hsr_slave_1 entered promiscuous mode [ 309.914708][ T4318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.916862][ T4318] Cannot create hsr debugfs directory [ 309.966154][ T4328] device hsr_slave_0 entered promiscuous mode [ 310.004753][ T4328] device hsr_slave_1 entered promiscuous mode [ 310.044941][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.046957][ T4328] Cannot create hsr debugfs directory [ 310.096227][ T4325] device hsr_slave_0 entered promiscuous mode [ 310.134821][ T4325] device hsr_slave_1 entered promiscuous mode [ 310.174536][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.176545][ T4325] Cannot create hsr debugfs directory [ 310.180580][ T4326] team0: Port device team_slave_0 added [ 310.213503][ T4326] team0: Port device team_slave_1 added [ 310.263326][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.265370][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.272091][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.291038][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.293454][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.304566][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.436277][ T4326] device hsr_slave_0 entered promiscuous mode [ 310.494895][ T4326] device hsr_slave_1 entered promiscuous mode [ 310.534676][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.536703][ T4326] Cannot create hsr debugfs directory [ 310.634051][ T4325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 310.690558][ T4325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 310.724826][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 310.724852][ T4324] Bluetooth: hci0: command 0x0409 tx timeout [ 310.736639][ T4325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 310.783944][ T4325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 310.804918][ T4324] Bluetooth: hci3: command 0x0409 tx timeout [ 310.806181][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 310.806747][ T4324] Bluetooth: hci4: command 0x0409 tx timeout [ 310.865094][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.909797][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.946448][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.986986][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 311.034903][ T4322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 311.069321][ T4322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 311.106748][ T4322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 311.146760][ T4322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.198077][ T4318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.233236][ T4318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.296758][ T4318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 311.336625][ T4318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 311.412803][ T4326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 311.437170][ T4326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.510854][ T4326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.559869][ T4326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.599882][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.640052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.643579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.660568][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.668658][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.681412][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 311.685454][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.688377][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.690427][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.693334][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 311.707757][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 311.711057][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.713590][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.715557][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.718900][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 311.733833][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.737865][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.751333][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 311.756191][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.777090][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 311.780337][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 311.783170][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 311.800225][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 311.802960][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 311.805758][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 311.808412][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.810968][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.812939][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.824063][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 311.826584][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 311.829352][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 311.833837][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.841148][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 311.844013][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.849469][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.851468][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.853738][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 311.857350][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 311.862348][ T4318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.880164][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 311.884779][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 311.887618][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.890056][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.901411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.903852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.907414][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 311.913670][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.920449][ T4318] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.935508][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.937558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 311.940132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.942797][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.944746][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.953102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 311.957733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.960226][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.962121][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.965593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 311.979292][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 311.982689][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 311.987233][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 311.990200][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 311.996036][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 311.999310][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.002100][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.005621][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.007687][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.013849][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.018718][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.021734][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.025205][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.028075][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.043119][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.047188][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.050305][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.053039][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.057724][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.060607][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.062587][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.066125][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.068664][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.087144][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.089857][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.092468][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.096476][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.099342][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.102591][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.105848][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.108570][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.111248][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.113921][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.116625][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.119137][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.122576][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.130696][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.139260][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.141954][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.144863][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.147440][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.150042][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 312.152229][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.156817][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 312.161511][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 312.179068][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.181682][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.184085][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.190462][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.206264][ T1605] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.208189][ T1605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.210434][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.222436][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.229851][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.232293][ T1605] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.234231][ T1605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.238829][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.243241][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 312.255917][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.259067][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.270698][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.273916][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.279535][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.294984][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.297715][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.328047][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 312.338572][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 312.341170][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.343819][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.350671][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.353732][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.358912][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 312.379883][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 312.382121][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.401944][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.405689][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.408602][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 312.413551][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 312.429793][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.433183][ T4325] device veth0_vlan entered promiscuous mode [ 312.443661][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 312.449408][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.460649][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.468574][ T4325] device veth1_vlan entered promiscuous mode [ 312.491581][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 312.494032][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 312.496974][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.499581][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.523025][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.528659][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.542146][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.545224][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.547819][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 312.549812][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.553840][ T4328] device veth0_vlan entered promiscuous mode [ 312.564967][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 312.567210][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 312.578111][ T4325] device veth0_macvtap entered promiscuous mode [ 312.588573][ T4318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.590791][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 312.594101][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.600963][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 312.612696][ T4322] device veth0_vlan entered promiscuous mode [ 312.623450][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.626639][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.629425][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 312.631786][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 312.637479][ T4325] device veth1_macvtap entered promiscuous mode [ 312.652914][ T4328] device veth1_vlan entered promiscuous mode [ 312.661062][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 312.663835][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 312.668529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 312.670697][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.678808][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.682188][ T4322] device veth1_vlan entered promiscuous mode [ 312.692287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 312.695497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 312.698029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 312.700692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.703451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 312.706273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.715693][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.722637][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.730551][ T4328] device veth0_macvtap entered promiscuous mode [ 312.734039][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 312.737153][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.739791][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.743311][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.747378][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.763740][ T4322] device veth0_macvtap entered promiscuous mode [ 312.769609][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 312.772251][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 312.776983][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.779903][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 312.785318][ T4325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.787951][ T4325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.790299][ T4325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.792481][ T4325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.804218][ T4322] device veth1_macvtap entered promiscuous mode [ 312.806365][ T4321] Bluetooth: hci1: command 0x041b tx timeout [ 312.806389][ T4324] Bluetooth: hci0: command 0x041b tx timeout [ 312.813258][ T4328] device veth1_macvtap entered promiscuous mode [ 312.850785][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.853551][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.857240][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.868996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 312.871444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 312.873875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 312.878970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.883655][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.887040][ T4324] Bluetooth: hci4: command 0x041b tx timeout [ 312.888809][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.891304][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.894093][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.897085][ T4324] Bluetooth: hci2: command 0x041b tx timeout [ 312.897120][ T4324] Bluetooth: hci3: command 0x041b tx timeout [ 312.902463][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.906891][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.909646][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.913468][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.918567][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.921082][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.923417][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.926368][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.930843][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 312.933570][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.937378][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.940436][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.967686][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.975971][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.998236][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.001108][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.003653][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.007511][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.011161][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.019892][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.022483][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.026425][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 313.029211][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 313.036393][ T4318] device veth0_vlan entered promiscuous mode [ 313.051153][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.053349][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.068218][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.079701][ T4322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.081987][ T4322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.084341][ T4322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.088932][ T4322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.107742][ T4318] device veth1_vlan entered promiscuous mode [ 313.110760][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.112285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 313.112809][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.117620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.120657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.123978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 313.162525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 313.168394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.170953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.176819][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.179579][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.185998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.189121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.191516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.201348][ T4326] device veth0_vlan entered promiscuous mode [ 313.265410][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.268061][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.277354][ T4326] device veth1_vlan entered promiscuous mode [ 313.283465][ T4318] device veth0_macvtap entered promiscuous mode [ 313.295920][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.298011][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.337536][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 313.340234][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 313.342785][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 313.371566][ T4318] device veth1_macvtap entered promiscuous mode [ 313.413136][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.425289][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.431052][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.453102][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.457412][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.505161][ T4326] device veth0_macvtap entered promiscuous mode [ 313.518645][ T4409] loop2: detected capacity change from 0 to 1024 [ 313.529958][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.532898][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.545010][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.547802][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.553982][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.564755][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.569345][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.569581][ T4409] hfsplus: bad catalog entry type [ 313.593368][ T4326] device veth1_macvtap entered promiscuous mode [ 313.597347][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 313.599950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 313.602371][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 313.628530][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.640223][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.642374][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.643911][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.649684][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.652541][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.656627][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.659346][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.662208][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.669465][ T4365] hfsplus: b-tree write err: -5, ino 4 [ 313.670145][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.693989][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 313.697171][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 313.699870][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 313.712767][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.725803][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.728352][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.731044][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.733587][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.744523][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.747085][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.749746][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.772362][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.776571][ T4418] loop1: detected capacity change from 0 to 512 [ 313.794850][ T4418] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 313.806090][ T4418] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 313.810630][ T4318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.812874][ T4318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.816474][ T4418] EXT4-fs error (device loop1): __ext4_iget:5055: inode #2: block 3072: comm syz.1.11: invalid block [ 313.820819][ T4418] EXT4-fs (loop1): get root inode failed [ 313.822307][ T4418] EXT4-fs (loop1): mount failed [ 313.828034][ T4318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.830297][ T4318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.839865][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 313.842680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.916435][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.921911][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.931891][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.935105][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.937598][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.940258][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.942926][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.952216][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.956272][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.012316][ T4326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.041318][ T4326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.043696][ T4326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.061339][ T4326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.074859][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.092851][ T4418] binder: 4417:4418 got transaction to invalid handle, 1 [ 314.093663][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.094979][ T4418] binder: 4418:4417 cannot find target node [ 314.098457][ T4418] binder: 4417:4418 transaction call to 0:0 failed 4/29201/-22, size 96-24 line 3054 [ 314.113280][ T4403] binder: undelivered TRANSACTION_ERROR: 29201 [ 314.213847][ T4429] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13'. [ 314.279185][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.281770][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.293583][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 314.361469][ T4433] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 314.392248][ T4433] loop3: detected capacity change from 0 to 16 [ 314.406109][ T4365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.416225][ T4365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.418335][ T4437] FAULT_INJECTION: forcing a failure. [ 314.418335][ T4437] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 314.418360][ T4437] CPU: 1 PID: 4437 Comm: syz.1.14 Not tainted 6.1.128-syzkaller #0 [ 314.418373][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 314.426519][ T4437] Call trace: [ 314.427559][ T4437] dump_backtrace+0x1c8/0x1f4 [ 314.428940][ T4437] show_stack+0x2c/0x3c [ 314.430159][ T4437] dump_stack_lvl+0x108/0x170 [ 314.431486][ T4437] dump_stack+0x1c/0x58 [ 314.432767][ T4437] should_fail_ex+0x3c0/0x51c [ 314.434200][ T4437] should_fail+0x14/0x24 [ 314.435408][ T4437] should_fail_usercopy+0x20/0x30 [ 314.436897][ T4437] sctp_setsockopt+0xec/0x112c [ 314.438149][ T4437] sock_common_setsockopt+0xb0/0xcc [ 314.439497][ T4437] __sys_setsockopt+0x3a8/0x70c [ 314.440879][ T4437] __arm64_sys_setsockopt+0xb8/0xd4 [ 314.442284][ T4437] invoke_syscall+0x98/0x2bc [ 314.443590][ T4437] el0_svc_common+0x138/0x258 [ 314.444893][ T4437] do_el0_svc+0x58/0x13c [ 314.446145][ T4437] el0_svc+0x58/0x168 [ 314.447288][ T4437] el0t_64_sync_handler+0x84/0xf0 [ 314.448877][ T4437] el0t_64_sync+0x18c/0x190 [ 314.475812][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 314.524203][ T4438] loop2: detected capacity change from 0 to 16 [ 314.602283][ T4438] erofs: (device loop2): mounted with root inode @ nid 36. [ 315.202125][ T4334] Bluetooth: hci0: command 0x040f tx timeout [ 315.203823][ T4334] Bluetooth: hci3: command 0x040f tx timeout [ 315.205747][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 315.207371][ T4334] Bluetooth: hci4: command 0x040f tx timeout [ 315.274576][ T4324] Bluetooth: hci1: command 0x040f tx timeout [ 315.304969][ T4310] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 315.324752][ T1605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.329334][ T1605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.344308][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 315.355294][ T1605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.357466][ T1605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.365424][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.367221][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.384113][ T4441] loop3: detected capacity change from 0 to 1024 [ 315.387231][ T4441] EXT4-fs: Ignoring removed bh option [ 315.392569][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 315.399224][ T4441] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 315.405149][ T4441] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 315.408483][ T4441] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 315.413187][ T4443] loop2: detected capacity change from 0 to 128 [ 315.516121][ T4441] EXT4-fs (loop3): failed to open journal device unknown-block(0,5) -6 [ 315.552864][ T4449] loop1: detected capacity change from 0 to 65 [ 315.582679][ T4449] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 315.646802][ T4449] BFS-fs: bfs_fill_super(): Last block not available on loop1: 262208 [ 317.287621][ T4334] Bluetooth: hci4: command 0x0419 tx timeout [ 317.287726][ T4324] Bluetooth: hci1: command 0x0419 tx timeout [ 317.289336][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 317.291231][ T4321] Bluetooth: hci3: command 0x0419 tx timeout [ 317.292508][ T4334] Bluetooth: hci0: command 0x0419 tx timeout [ 317.485675][ T4470] loop2: detected capacity change from 0 to 512 [ 317.521876][ T4470] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 317.819249][ T4462] loop3: detected capacity change from 0 to 32768 [ 317.930443][ T4470] EXT4-fs error (device loop2): __ext4_iget:5055: inode #2: block 3072: comm syz.2.22: invalid block [ 317.939119][ T4470] EXT4-fs (loop2): get root inode failed [ 317.940963][ T4470] EXT4-fs (loop2): mount failed [ 318.059767][ T4462] XFS (loop3): Mounting V5 Filesystem [ 318.118134][ T4485] netlink: 60 bytes leftover after parsing attributes in process `syz.4.25'. [ 318.672378][ T4469] binder: BINDER_SET_CONTEXT_MGR already set [ 318.674403][ T4469] binder: 4468:4469 ioctl 4018620d 400000000040 returned -16 [ 318.678031][ T4469] binder: 4468:4469 got transaction to invalid handle, 1 [ 318.680179][ T4469] binder: 4469:4468 cannot find target node [ 318.681870][ T4469] binder: 4468:4469 transaction call to 0:0 failed 7/29201/-22, size 96-24 line 3054 [ 321.977997][ T4490] loop4: detected capacity change from 0 to 16 [ 321.992205][ T4309] binder: undelivered TRANSACTION_ERROR: 29201 [ 322.018345][ T4490] erofs: (device loop4): mounted with root inode @ nid 36. [ 322.026574][ T4495] capability: warning: `syz.1.27' uses 32-bit capabilities (legacy support in use) [ 322.097326][ T4462] XFS (loop3): log mount failed [ 322.398076][ T4501] loop1: detected capacity change from 0 to 1024 [ 322.400406][ T4501] EXT4-fs: Ignoring removed bh option [ 322.434036][ T4501] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 322.486928][ T4501] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 322.504469][ T4501] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 322.733172][ T4501] EXT4-fs (loop1): failed to open journal device unknown-block(0,5) -6 [ 322.794886][ T4310] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 322.950378][ T4521] FAULT_INJECTION: forcing a failure. [ 322.950378][ T4521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.953871][ T4521] CPU: 0 PID: 4521 Comm: syz.3.37 Not tainted 6.1.128-syzkaller #0 [ 322.955956][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 322.958705][ T4521] Call trace: [ 322.959633][ T4521] dump_backtrace+0x1c8/0x1f4 [ 322.960905][ T4521] show_stack+0x2c/0x3c [ 322.962077][ T4521] dump_stack_lvl+0x108/0x170 [ 322.963341][ T4521] dump_stack+0x1c/0x58 [ 322.964563][ T4521] should_fail_ex+0x3c0/0x51c [ 322.965972][ T4521] should_fail+0x14/0x24 [ 322.967102][ T4521] should_fail_usercopy+0x20/0x30 [ 322.968570][ T4521] iovec_from_user+0xcc/0x5e0 [ 322.969916][ T4521] __import_iovec+0x84/0x448 [ 322.971200][ T4521] import_iovec+0x88/0xa4 [ 322.972377][ T4521] copy_msghdr_from_user+0x3f4/0x59c [ 322.973897][ T4521] __sys_sendmsg+0x200/0x33c [ 322.975175][ T4521] __arm64_sys_sendmsg+0x80/0x94 [ 322.976556][ T4521] invoke_syscall+0x98/0x2bc [ 322.977866][ T4521] el0_svc_common+0x138/0x258 [ 322.979182][ T4521] do_el0_svc+0x58/0x13c [ 322.980350][ T4521] el0_svc+0x58/0x168 [ 322.981502][ T4521] el0t_64_sync_handler+0x84/0xf0 [ 322.982918][ T4521] el0t_64_sync+0x18c/0x190 [ 323.256636][ T4532] syz.3.41 uses obsolete (PF_INET,SOCK_PACKET) [ 323.317611][ T4532] netlink: 32 bytes leftover after parsing attributes in process `syz.3.41'. [ 323.331087][ T4506] loop4: detected capacity change from 0 to 32768 [ 323.499087][ T4507] loop0: detected capacity change from 0 to 32768 [ 323.708775][ T4537] loop1: detected capacity change from 0 to 1024 [ 323.919012][ T4544] loop4: detected capacity change from 0 to 512 [ 323.924726][ T4544] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 323.929061][ T4544] EXT4-fs error (device loop4): __ext4_iget:5055: inode #2: block 3072: comm syz.4.43: invalid block [ 323.932612][ T4544] EXT4-fs (loop4): get root inode failed [ 323.965516][ T4544] EXT4-fs (loop4): mount failed [ 324.764818][ T4550] sch_tbf: burst 6 is lower than device lo mtu (65550) ! [ 325.097862][ T4563] capability: warning: `syz.3.49' uses deprecated v2 capabilities in a way that may be insecure [ 325.850613][ T4564] mkiss: ax0: crc mode is auto. [ 326.157611][ T4544] binder: 4543:4544 got transaction to invalid handle, 1 [ 326.170499][ T4544] binder: 4544:4543 cannot find target node [ 326.181580][ T4544] binder: 4543:4544 transaction call to 0:0 failed 11/29201/-22, size 96-24 line 3054 [ 326.201830][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 326.244077][ T4556] loop1: detected capacity change from 0 to 32768 [ 326.281330][ T4556] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.47 (4556) [ 326.315508][ T4556] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 326.318277][ T4556] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 326.320426][ T4556] BTRFS info (device loop1): using free space tree [ 326.350057][ T4581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.375053][ T4556] BTRFS error (device loop1): open_ctree failed [ 328.402710][ T4620] cgroup: name respecified [ 328.814934][ T4621] hub 2-0:1.0: USB hub found [ 328.818837][ T4621] hub 2-0:1.0: 8 ports detected [ 329.247875][ T4618] loop2: detected capacity change from 0 to 4096 [ 329.251115][ T4618] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 329.293607][ T4618] ntfs: volume version 3.1. [ 329.463245][ T4628] FAULT_INJECTION: forcing a failure. [ 329.463245][ T4628] name failslab, interval 1, probability 0, space 0, times 0 [ 329.473991][ T4628] CPU: 0 PID: 4628 Comm: syz.3.68 Not tainted 6.1.128-syzkaller #0 [ 329.476244][ T4628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 329.478895][ T4628] Call trace: [ 329.479771][ T4628] dump_backtrace+0x1c8/0x1f4 [ 329.480997][ T4628] show_stack+0x2c/0x3c [ 329.482072][ T4628] dump_stack_lvl+0x108/0x170 [ 329.483425][ T4628] dump_stack+0x1c/0x58 [ 329.484601][ T4628] should_fail_ex+0x3c0/0x51c [ 329.485933][ T4628] __should_failslab+0xc8/0x128 [ 329.487241][ T4628] should_failslab+0x10/0x28 [ 329.488643][ T4628] __kmem_cache_alloc_node+0x80/0x388 [ 329.490255][ T4628] __kmalloc+0xc4/0x1c4 [ 329.491423][ T4628] tomoyo_encode+0x270/0x4b0 [ 329.492813][ T4628] tomoyo_realpath_from_path+0x478/0x4cc [ 329.494528][ T4628] tomoyo_path_number_perm+0x1dc/0x688 [ 329.496112][ T4628] tomoyo_file_ioctl+0x2c/0x3c [ 329.497485][ T4628] security_file_ioctl+0x80/0xbc [ 329.498956][ T4628] __arm64_sys_ioctl+0xa8/0x1c8 [ 329.500389][ T4628] invoke_syscall+0x98/0x2bc [ 329.501717][ T4628] el0_svc_common+0x138/0x258 [ 329.503024][ T4628] do_el0_svc+0x58/0x13c [ 329.504243][ T4628] el0_svc+0x58/0x168 [ 329.505378][ T4628] el0t_64_sync_handler+0x84/0xf0 [ 329.506741][ T4628] el0t_64_sync+0x18c/0x190 [ 329.539135][ T4628] ERROR: Out of memory at tomoyo_realpath_from_path. [ 329.987407][ T4634] hub 2-0:1.0: USB hub found [ 329.990054][ T4634] hub 2-0:1.0: 8 ports detected [ 331.894359][ C0] sched: RT throttling activated [ 332.422291][ T4659] cgroup: name respecified [ 332.543603][ T4669] Zero length message leads to an empty skb [ 332.559652][ T4667] loop2: detected capacity change from 0 to 512 [ 332.609152][ T4667] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 332.797410][ T4683] netlink: 60 bytes leftover after parsing attributes in process `syz.2.82'. [ 332.809588][ T4675] device netdevsim0 entered promiscuous mode [ 332.820159][ T4675] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 332.846595][ T4687] netlink: 'syz.0.86': attribute type 1 has an invalid length. [ 333.158485][ T4694] loop2: detected capacity change from 0 to 16 [ 334.076338][ T4694] erofs: (device loop2): mounted with root inode @ nid 36. [ 334.566801][ T4700] loop1: detected capacity change from 0 to 4096 [ 334.642918][ T4705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.658696][ T4705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.000696][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 335.566371][ T4732] loop0: detected capacity change from 0 to 4096 [ 335.647030][ T4732] ntfs: volume version 3.1. [ 335.687828][ T4732] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 335.690441][ T4732] ntfs: (device loop0): load_and_init_quota(): Failed to find inode number for $Quota. [ 335.692969][ T4732] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 335.711515][ T4732] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 335.714286][ T4732] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 335.744590][ T4732] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 336.548350][ T4728] FAULT_INJECTION: forcing a failure. [ 336.548350][ T4728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.552275][ T4728] CPU: 1 PID: 4728 Comm: syz.4.97 Not tainted 6.1.128-syzkaller #0 [ 336.554320][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 336.556994][ T4728] Call trace: [ 336.557950][ T4728] dump_backtrace+0x1c8/0x1f4 [ 336.559326][ T4728] show_stack+0x2c/0x3c [ 336.560491][ T4728] dump_stack_lvl+0x108/0x170 [ 336.561752][ T4728] dump_stack+0x1c/0x58 [ 336.562976][ T4728] should_fail_ex+0x3c0/0x51c [ 336.564361][ T4728] should_fail+0x14/0x24 [ 336.565554][ T4728] should_fail_usercopy+0x20/0x30 [ 336.566923][ T4728] memdup_user+0xa4/0x210 [ 336.568126][ T4728] __arm64_sys_kexec_load+0x1b4/0x228 [ 336.569618][ T4728] invoke_syscall+0x98/0x2bc [ 336.570999][ T4728] el0_svc_common+0x138/0x258 [ 336.572354][ T4728] do_el0_svc+0x58/0x13c [ 336.573545][ T4728] el0_svc+0x58/0x168 [ 336.574648][ T4728] el0t_64_sync_handler+0x84/0xf0 [ 336.576173][ T4728] el0t_64_sync+0x18c/0x190 [ 336.621876][ T4740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.101'. [ 336.897433][ T4745] loop2: detected capacity change from 0 to 16 [ 336.936798][ T4745] erofs: (device loop2): mounted with root inode @ nid 36. [ 337.655642][ T4753] loop4: detected capacity change from 0 to 4096 [ 337.658475][ T4753] ntfs3: Unknown parameter '.' [ 337.946738][ T4764] FAULT_INJECTION: forcing a failure. [ 337.946738][ T4764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.962796][ T4764] CPU: 0 PID: 4764 Comm: syz.4.109 Not tainted 6.1.128-syzkaller #0 [ 337.964895][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 337.967553][ T4764] Call trace: [ 337.968446][ T4764] dump_backtrace+0x1c8/0x1f4 [ 337.969657][ T4764] show_stack+0x2c/0x3c [ 337.970784][ T4764] dump_stack_lvl+0x108/0x170 [ 337.972082][ T4764] dump_stack+0x1c/0x58 [ 337.973289][ T4764] should_fail_ex+0x3c0/0x51c [ 337.974592][ T4764] should_fail+0x14/0x24 [ 337.975851][ T4764] should_fail_usercopy+0x20/0x30 [ 337.977236][ T4764] iovec_from_user+0xcc/0x5e0 [ 337.978575][ T4764] __import_iovec+0x84/0x448 [ 337.979930][ T4764] import_iovec+0x88/0xa4 [ 337.981104][ T4764] copy_msghdr_from_user+0x3f4/0x59c [ 337.982670][ T4764] __sys_sendmsg+0x200/0x33c [ 337.983952][ T4764] __arm64_sys_sendmsg+0x80/0x94 [ 337.985272][ T4764] invoke_syscall+0x98/0x2bc [ 337.986595][ T4764] el0_svc_common+0x138/0x258 [ 337.988007][ T4764] do_el0_svc+0x58/0x13c [ 337.989178][ T4764] el0_svc+0x58/0x168 [ 337.990263][ T4764] el0t_64_sync_handler+0x84/0xf0 [ 337.991637][ T4764] el0t_64_sync+0x18c/0x190 [ 338.071759][ T4765] binder: 4762:4765 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 339.062115][ T4775] loop2: detected capacity change from 0 to 4096 [ 340.113256][ T4784] netlink: 60 bytes leftover after parsing attributes in process `syz.0.115'. [ 340.240932][ T4765] loop1: detected capacity change from 0 to 32768 [ 340.251864][ T4765] XFS: ikeep mount option is deprecated. [ 340.388487][ T4792] loop0: detected capacity change from 0 to 16 [ 340.532504][ T4792] erofs: (device loop0): mounted with root inode @ nid 36. [ 341.650498][ T4798] netlink: 52 bytes leftover after parsing attributes in process `syz.3.117'. [ 341.885212][ T4809] FAULT_INJECTION: forcing a failure. [ 341.885212][ T4809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.888713][ T4809] CPU: 1 PID: 4809 Comm: syz.0.121 Not tainted 6.1.128-syzkaller #0 [ 341.890816][ T4809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 341.893410][ T4809] Call trace: [ 341.894260][ T4809] dump_backtrace+0x1c8/0x1f4 [ 341.895555][ T4809] show_stack+0x2c/0x3c [ 341.896697][ T4809] dump_stack_lvl+0x108/0x170 [ 341.898025][ T4809] dump_stack+0x1c/0x58 [ 341.899153][ T4809] should_fail_ex+0x3c0/0x51c [ 341.900512][ T4809] should_fail+0x14/0x24 [ 341.901651][ T4809] should_fail_usercopy+0x20/0x30 [ 341.903067][ T4809] iovec_from_user+0xcc/0x5e0 [ 341.904396][ T4809] __import_iovec+0x84/0x448 [ 341.905737][ T4809] import_iovec+0x88/0xa4 [ 341.907003][ T4809] copy_msghdr_from_user+0x3f4/0x59c [ 341.908557][ T4809] __sys_sendmsg+0x200/0x33c [ 341.909858][ T4809] __arm64_sys_sendmsg+0x80/0x94 [ 341.911274][ T4809] invoke_syscall+0x98/0x2bc [ 341.912617][ T4809] el0_svc_common+0x138/0x258 [ 341.913932][ T4809] do_el0_svc+0x58/0x13c [ 341.915148][ T4809] el0_svc+0x58/0x168 [ 341.916183][ T4809] el0t_64_sync_handler+0x84/0xf0 [ 341.917529][ T4809] el0t_64_sync+0x18c/0x190 [ 342.395051][ T4816] loop2: detected capacity change from 0 to 32768 [ 344.238288][ T4816] XFS (loop2): Mounting V5 Filesystem [ 344.687407][ T4816] XFS (loop2): Ending clean mount [ 344.698230][ T4816] XFS (loop2): Quotacheck needed: Please wait. [ 344.935329][ T4816] XFS (loop2): Quotacheck: Done. [ 345.027497][ T4839] netlink: 60 bytes leftover after parsing attributes in process `syz.1.128'. [ 345.178625][ T4325] XFS (loop2): Unmounting Filesystem [ 345.204196][ T4844] loop4: detected capacity change from 0 to 256 [ 345.206760][ T4844] exfat: Deprecated parameter 'utf8' [ 345.208351][ T4844] exfat: Deprecated parameter 'utf8' [ 345.209691][ T4844] exfat: Deprecated parameter 'utf8' [ 345.300617][ T4845] loop1: detected capacity change from 0 to 16 [ 345.375154][ T4845] erofs: (device loop1): mounted with root inode @ nid 36. [ 345.882816][ T4844] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 345.910070][ T4841] loop3: detected capacity change from 0 to 4096 [ 346.607523][ T4867] loop2: detected capacity change from 0 to 8 [ 346.661546][ T4867] SQUASHFS error: zlib decompression failed, data probably corrupt [ 346.663951][ T4867] SQUASHFS error: Failed to read block 0x9b: -5 [ 346.665672][ T4867] SQUASHFS error: Unable to read metadata cache entry [99] [ 346.667628][ T4867] SQUASHFS error: Unable to read inode 0x127 [ 348.673921][ T4878] loop2: detected capacity change from 0 to 32768 [ 348.807653][ T4878] XFS (loop2): Mounting V5 Filesystem [ 348.946294][ T4885] netlink: 60 bytes leftover after parsing attributes in process `syz.4.142'. [ 348.950419][ T4878] XFS (loop2): Ending clean mount [ 348.955741][ T4878] XFS (loop2): Quotacheck needed: Please wait. [ 349.183042][ T4885] loop4: detected capacity change from 0 to 16 [ 349.196219][ T4886] loop3: detected capacity change from 0 to 2048 [ 349.220003][ T4885] erofs: (device loop4): mounted with root inode @ nid 36. [ 349.260709][ T4310] udevd[4310]: incorrect nilfs2 checksum on /dev/loop3 [ 349.328075][ T4878] XFS (loop2): Quotacheck: Done. [ 349.368892][ T4894] loop0: detected capacity change from 0 to 256 [ 349.371712][ T4894] exfat: Deprecated parameter 'utf8' [ 349.373219][ T4894] exfat: Deprecated parameter 'utf8' [ 349.391937][ T4894] exfat: Deprecated parameter 'utf8' [ 349.444234][ T4894] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 349.596081][ T4869] loop1: detected capacity change from 0 to 32768 [ 349.599179][ T4869] ======================================================= [ 349.599179][ T4869] WARNING: The mand mount option has been deprecated and [ 349.599179][ T4869] and is ignored by this kernel. Remove the mand [ 349.599179][ T4869] option from the mount to silence this warning. [ 349.599179][ T4869] ======================================================= [ 349.643015][ T4325] XFS (loop2): Unmounting Filesystem [ 349.666232][ T4869] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 349.666232][ T4869] [ 349.678090][ T4869] ERROR: (device loop1): remounting filesystem as read-only [ 349.680424][ T4869] ialloc: diAlloc returned -5! [ 349.691696][ T4869] Bluetooth: MGMT ver 1.22 [ 349.720245][ T4902] netlink: 60 bytes leftover after parsing attributes in process `syz.3.147'. [ 349.851004][ T4905] loop4: detected capacity change from 0 to 512 [ 349.889355][ T4905] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 349.892059][ T4905] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 349.900091][ T4905] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 349.912654][ T4905] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 349.914957][ T4905] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 349.918458][ T4905] EXT4-fs (loop4): failed to initialize system zone (-117) [ 350.025245][ T4908] loop3: detected capacity change from 0 to 16 [ 350.170359][ T4905] EXT4-fs (loop4): mount failed [ 350.719315][ T4908] erofs: (device loop3): mounted with root inode @ nid 36. [ 350.777984][ T4905] loop4: detected capacity change from 0 to 512 [ 350.794876][ T4905] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.149: casefold flag without casefold feature [ 350.798403][ T4905] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.149: couldn't read orphan inode 15 (err -117) [ 350.801679][ T4905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 351.075313][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 351.112758][ T4898] loop0: detected capacity change from 0 to 40427 [ 351.123228][ T4898] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 351.125876][ T4898] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 351.130666][ T4898] F2FS-fs (loop0): invalid crc value [ 351.212275][ T4921] loop2: detected capacity change from 0 to 256 [ 351.221001][ T4921] exfat: Deprecated parameter 'utf8' [ 351.222500][ T4921] exfat: Deprecated parameter 'utf8' [ 351.223840][ T4921] exfat: Deprecated parameter 'utf8' [ 351.254236][ T4921] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 352.433481][ T4898] F2FS-fs (loop0): Found nat_bits in checkpoint [ 352.549305][ T4898] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 352.551562][ T4898] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 352.672563][ T4933] random: crng reseeded on system resumption [ 352.794105][ T4935] loop3: detected capacity change from 0 to 256 [ 352.796428][ T4935] exfat: Deprecated parameter 'utf8' [ 352.797955][ T4935] exfat: Deprecated parameter 'utf8' [ 352.799368][ T4935] exfat: Deprecated parameter 'utf8' [ 352.828312][ T4935] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 352.868847][ T4937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.156'. [ 353.139227][ T4941] loop2: detected capacity change from 0 to 16 [ 353.305753][ T4941] erofs: (device loop2): mounted with root inode @ nid 36. [ 354.947431][ T4946] loop3: detected capacity change from 0 to 32768 [ 355.407428][ T4958] FAULT_INJECTION: forcing a failure. [ 355.407428][ T4958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.411300][ T4958] CPU: 1 PID: 4958 Comm: syz.2.160 Not tainted 6.1.128-syzkaller #0 [ 355.413443][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 355.416788][ T4958] Call trace: [ 355.417764][ T4958] dump_backtrace+0x1c8/0x1f4 [ 355.419073][ T4958] show_stack+0x2c/0x3c [ 355.420326][ T4958] dump_stack_lvl+0x108/0x170 [ 355.421723][ T4958] dump_stack+0x1c/0x58 [ 355.422991][ T4958] should_fail_ex+0x3c0/0x51c [ 355.424490][ T4958] should_fail+0x14/0x24 [ 355.425733][ T4958] should_fail_usercopy+0x20/0x30 [ 355.427241][ T4958] _copy_to_iter+0x1a8/0xe58 [ 355.428618][ T4958] tty_read+0x2a0/0x520 [ 355.429835][ T4958] vfs_read+0x5bc/0x8b4 [ 355.431004][ T4958] ksys_read+0x15c/0x26c [ 355.432244][ T4958] __arm64_sys_read+0x7c/0x90 [ 355.433589][ T4958] invoke_syscall+0x98/0x2bc [ 355.434929][ T4958] el0_svc_common+0x138/0x258 [ 355.436266][ T4958] do_el0_svc+0x58/0x13c [ 355.437427][ T4958] el0_svc+0x58/0x168 [ 355.438528][ T4958] el0t_64_sync_handler+0x84/0xf0 [ 355.439927][ T4958] el0t_64_sync+0x18c/0x190 [ 355.504697][ T4946] XFS (loop3): Mounting V5 Filesystem [ 355.809886][ T4946] XFS (loop3): Ending clean mount [ 355.814533][ T4946] XFS (loop3): Quotacheck needed: Please wait. [ 356.127557][ T4946] XFS (loop3): Quotacheck: Done. [ 357.396170][ T4322] XFS (loop3): Unmounting Filesystem [ 357.410234][ T4978] random: crng reseeded on system resumption [ 357.581594][ T4981] loop1: detected capacity change from 0 to 64 [ 358.660159][ T4983] hub 2-0:1.0: USB hub found [ 358.662567][ T4983] hub 2-0:1.0: 8 ports detected [ 359.347995][ T4989] loop4: detected capacity change from 0 to 256 [ 359.357090][ T4989] exfat: Deprecated parameter 'utf8' [ 359.358848][ T4989] exfat: Deprecated parameter 'utf8' [ 359.360952][ T4989] exfat: Deprecated parameter 'utf8' [ 359.366868][ T4987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.170'. [ 359.368539][ T4989] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 359.687239][ T4994] loop0: detected capacity change from 0 to 16 [ 359.795418][ T4994] erofs: (device loop0): mounted with root inode @ nid 36. [ 360.902263][ T5005] loop2: detected capacity change from 0 to 32768 [ 361.076049][ T5006] loop0: detected capacity change from 0 to 2048 [ 361.127902][ T5005] XFS (loop2): Mounting V5 Filesystem [ 361.138793][ T5006] EXT4-fs error (device loop0): __ext4_fill_super:5390: inode #2: comm syz.0.174: casefold flag without casefold feature [ 361.150194][ T5006] EXT4-fs (loop0): get root inode failed [ 361.151976][ T5006] EXT4-fs (loop0): mount failed [ 362.532083][ T5005] XFS (loop2): Ending clean mount [ 362.537940][ T5005] XFS (loop2): Quotacheck needed: Please wait. [ 362.656044][ T5005] XFS (loop2): Quotacheck: Done. [ 362.672272][ T5004] loop0: detected capacity change from 0 to 16 [ 362.691961][ T5004] erofs: (device loop0): mounted with root inode @ nid 36. [ 362.738121][ T5023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.177'. [ 362.873277][ T4325] XFS (loop2): Unmounting Filesystem [ 363.066971][ T5030] loop0: detected capacity change from 0 to 512 [ 363.070042][ T5030] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 363.223544][ T5030] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.181: bad orphan inode 131083 [ 363.226966][ T5030] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 363.554895][ T5036] hub 2-0:1.0: USB hub found [ 363.557493][ T5036] hub 2-0:1.0: 8 ports detected [ 364.167848][ T5040] loop3: detected capacity change from 0 to 256 [ 364.180424][ T5040] exfat: Deprecated parameter 'utf8' [ 364.181850][ T5040] exfat: Deprecated parameter 'utf8' [ 364.190319][ T5040] exfat: Deprecated parameter 'utf8' [ 364.227897][ T5025] loop4: detected capacity change from 0 to 40427 [ 364.240477][ T5025] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 364.242734][ T5025] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 364.246361][ T5040] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 364.361199][ T5044] random: crng reseeded on system resumption [ 364.380176][ T5042] netlink: 60 bytes leftover after parsing attributes in process `syz.1.184'. [ 364.550158][ T5025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.552619][ T5025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.662163][ T5049] loop1: detected capacity change from 0 to 16 [ 364.798153][ T5050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'. [ 365.500538][ T5049] erofs: (device loop1): mounted with root inode @ nid 36. [ 365.869603][ T4318] EXT4-fs (loop0): unmounting filesystem. [ 367.335308][ T5068] loop2: detected capacity change from 0 to 32768 [ 367.518150][ T5068] XFS (loop2): Mounting V5 Filesystem [ 367.859469][ T5068] XFS (loop2): Ending clean mount [ 367.866783][ T5068] XFS (loop2): Quotacheck needed: Please wait. [ 367.927303][ T5075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 371.189728][ T5068] XFS (loop2): Quotacheck: Done. [ 371.217033][ T5088] loop4: detected capacity change from 0 to 4096 [ 371.248403][ T4325] XFS (loop2): Unmounting Filesystem [ 371.286836][ T5091] FAULT_INJECTION: forcing a failure. [ 371.286836][ T5091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.290253][ T5091] CPU: 0 PID: 5091 Comm: syz.1.194 Not tainted 6.1.128-syzkaller #0 [ 371.292273][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 371.294923][ T5091] Call trace: [ 371.295765][ T5091] dump_backtrace+0x1c8/0x1f4 [ 371.297031][ T5091] show_stack+0x2c/0x3c [ 371.298301][ T5091] dump_stack_lvl+0x108/0x170 [ 371.299613][ T5091] dump_stack+0x1c/0x58 [ 371.300712][ T5091] should_fail_ex+0x3c0/0x51c [ 371.301921][ T5091] should_fail+0x14/0x24 [ 371.303035][ T5091] should_fail_usercopy+0x20/0x30 [ 371.304374][ T5091] iovec_from_user+0xcc/0x5e0 [ 371.305685][ T5091] __import_iovec+0x84/0x448 [ 371.306995][ T5091] import_iovec+0x88/0xa4 [ 371.308195][ T5091] copy_msghdr_from_user+0x3f4/0x59c [ 371.309657][ T5091] __sys_sendmsg+0x200/0x33c [ 371.310903][ T5091] __arm64_sys_sendmsg+0x80/0x94 [ 371.312230][ T5091] invoke_syscall+0x98/0x2bc [ 371.313486][ T5091] el0_svc_common+0x138/0x258 [ 371.314769][ T5091] do_el0_svc+0x58/0x13c [ 371.315917][ T5091] el0_svc+0x58/0x168 [ 371.317044][ T5091] el0t_64_sync_handler+0x84/0xf0 [ 371.318538][ T5091] el0t_64_sync+0x18c/0x190 [ 371.644273][ T5098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.198'. [ 373.336172][ T5111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.204'. [ 373.778027][ T5115] loop3: detected capacity change from 0 to 16 [ 373.811318][ T5115] erofs: (device loop3): mounted with root inode @ nid 36. [ 374.463807][ T5120] loop2: detected capacity change from 0 to 4096 [ 376.110016][ T4460] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 376.123478][ T4460] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 376.808032][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.810182][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.186293][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.188260][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.190104][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.193203][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.214669][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.216647][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.218489][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.220374][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.222255][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.275920][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.277883][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.279780][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.281728][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.283601][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.335834][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.337762][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 377.339716][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 377.381892][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.181912][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.183900][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 378.186168][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.188341][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.190329][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.192314][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.194321][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.196528][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.198728][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.200704][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.202732][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.204817][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.206891][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.208873][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.210883][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.212776][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.215038][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.217022][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.219044][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.221219][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.227933][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.230070][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.232141][ T4460] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 378.244218][ T4460] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 378.404464][ T4334] Bluetooth: hci2: command 0x0405 tx timeout [ 378.420813][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 378.436530][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 378.438636][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 378.441944][ T5170] device bridge_slave_0 left promiscuous mode [ 378.444849][ T5170] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.601298][ T5173] mmap: syz.2.220 (5173) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 378.754261][ T5174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.367379][ T5170] device bridge_slave_1 left promiscuous mode [ 379.369197][ T5170] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.457547][ T5170] bond0: (slave bond_slave_0): Releasing backup interface [ 379.574894][ T5170] bond0: (slave bond_slave_1): Releasing backup interface [ 379.663490][ T5170] team0: Port device team_slave_0 removed [ 379.702830][ T5170] team0: Port device team_slave_1 removed [ 379.716778][ T5170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.723787][ T5170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.738114][ T5170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.739996][ T5170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.916189][ T5181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.925944][ T5181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.309296][ T5206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 380.311747][ T5206] netlink: 34 bytes leftover after parsing attributes in process `syz.2.235'. [ 382.484539][ T4334] Bluetooth: hci2: command 0x0405 tx timeout [ 383.788600][ T5282] vxcan1: tx address claim with dlc 1 [ 383.830653][ T5284] random: crng reseeded on system resumption [ 384.462268][ T5292] device ip6tnl1 entered promiscuous mode [ 384.653259][ T112] hid-generic 0005:0458:0009.0003: item fetching failed at offset 0/4 [ 384.660754][ T112] hid-generic: probe of 0005:0458:0009.0003 failed with error -22 [ 384.866169][ T5305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.868666][ T5305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.925997][ T5308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.928408][ T5308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.931093][ T5350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.933581][ T5350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.334227][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.011762][ T5414] device ip6erspan0 entered promiscuous mode [ 389.191306][ T5422] random: crng reseeded on system resumption [ 389.279083][ T5424] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 391.180264][ T5470] tmpfs: Bad value for 'mpol' [ 391.368449][ T51] block nbd0: Send control failed (result -89) [ 391.370302][ T51] block nbd0: Request send failed, requeueing [ 391.373241][ T51] block nbd0: Dead connection, failed to find a fallback [ 391.375491][ T51] block nbd0: shutting down sockets [ 391.377041][ T51] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.400194][ T51] I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.402831][ T5478] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 391.408035][ T51] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.410767][ T5478] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 391.417842][ T79] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.424095][ T79] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.439598][ T5478] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 391.442346][ T79] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.474484][ T5478] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 391.496528][ T79] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.500564][ T79] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.503139][ T5478] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 391.509425][ T79] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.514712][ T5478] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 391.523835][ T79] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 391.527760][ T5478] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 391.531516][ T5478] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 391.539605][ T5478] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 391.881605][ T5496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 392.217634][ T5502] device bridge1 entered promiscuous mode [ 396.427627][ T5544] device wireguard0 entered promiscuous mode [ 397.225069][ T5556] netlink: 'syz.1.372': attribute type 39 has an invalid length. [ 399.235798][ T5606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 399.246770][ T5606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.262003][ T5606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.471899][ T5625] 9pnet_virtio: no channels available for device syz [ 401.013803][ T5617] [U] é [ 402.030991][ T5679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.033369][ T5679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.424992][ T5691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.424'. [ 404.238947][ T5694] netlink: 'syz.4.425': attribute type 10 has an invalid length. [ 404.315055][ T5694] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.319639][ T5694] bond0: (slave team0): Enslaving as an active interface with an up link [ 404.936023][ T5710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.197363][ T5727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.079804][ T5733] ieee802154 phy0 wpan0: encryption failed: -22 [ 409.360365][ T47] block nbd1: Receive control failed (result -32) [ 409.386748][ T5731] block nbd1: shutting down sockets [ 409.864136][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 409.870758][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 409.872560][ T5765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 409.872702][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 409.875371][ T5765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.452'. [ 410.610522][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.612791][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.615475][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.617434][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.619375][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.621335][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.623341][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.625979][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.628061][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.630138][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.632136][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.634051][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.636700][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 410.639074][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.641042][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.643131][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.645689][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 410.647636][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.649610][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.651599][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.653580][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.656209][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.658377][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.660368][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.662327][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.664188][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.698004][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.703490][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.723151][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.730740][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.732705][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.741659][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.743740][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.773775][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.779115][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.781155][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.796614][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.798634][ T3874] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 410.818720][ T3874] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 410.942591][ T5778] netlink: 36 bytes leftover after parsing attributes in process `syz.0.453'. [ 412.071593][ T5800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 412.225844][ T5808] fuse: Bad value for 'fd' [ 412.240742][ T5808] Process accounting resumed [ 412.512237][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 412.515090][ T5806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 412.651180][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 412.691445][ T5821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.693909][ T5821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.989927][ T5842] process 'syz.3.477' launched '/dev/fd/8' with NULL argv: empty string added [ 414.041167][ T47] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 414.043984][ T47] Bluetooth: hci3: Injecting HCI hardware error event [ 414.050316][ T4334] Bluetooth: hci3: hardware error 0x00 [ 415.989171][ T5883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.494'. [ 416.081510][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 416.083904][ T5887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.495'. [ 416.708706][ T27] audit: type=1326 audit(416.690:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9159a68 code=0x7ffc0000 [ 416.724663][ T4334] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 416.727755][ T27] audit: type=1326 audit(416.710:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=91 compat=0 ip=0xffffa9159a68 code=0x7ffc0000 [ 416.736117][ T27] audit: type=1326 audit(416.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5897 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9159a68 code=0x7ffc0000 [ 419.278121][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.280571][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.670704][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.673170][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.910464][ T6006] sctp: [Deprecated]: syz.3.537 (pid 6006) Use of int in maxseg socket option. [ 423.910464][ T6006] Use struct sctp_assoc_value instead [ 424.155574][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.158041][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.192591][ T4334] Bluetooth: hci2: Unknown advertising packet type: 0x21da [ 424.192656][ T4334] Bluetooth: hci2: Malformed LE Event: 0x0d [ 429.381579][ T6082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.762136][ T4334] Bluetooth: hci2: link tx timeout [ 430.764275][ T4334] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 431.074564][ T4334] Bluetooth: hci2: link tx timeout [ 431.076101][ T4334] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 431.473385][ T6132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.590960][ T6132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.668598][ T6135] tipc: Started in network mode [ 432.670147][ T6135] tipc: Node identity ac1414aa, cluster identity 4711 [ 432.672629][ T6135] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.684593][ T6135] tipc: Enabled bearer , priority 10 [ 432.806672][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.828841][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 432.954540][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.976260][ T6132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.104514][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.255237][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.258788][ T6132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.394540][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.534543][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.306490][ T4371] tipc: Node number set to 2886997162 [ 434.332240][ T6132] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.340303][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 434.365168][ T6132] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.385830][ T6132] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.394486][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.439005][ T6178] Invalid ELF header type: 3 != 1 [ 434.454994][ T6132] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.664596][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.194490][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.204901][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 435.206099][ T4334] Bluetooth: hci1: command 0x0406 tx timeout [ 435.210522][ T4319] Bluetooth: hci0: command 0x0406 tx timeout [ 437.242788][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 437.550997][ T27] audit: type=1326 audit(437.530:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.0.625" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f59a68 code=0x7fc00000 [ 438.216475][ T27] audit: type=1326 audit(438.200:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.0.625" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff97f59a68 code=0x7fc00000 [ 438.232071][ T6254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.251099][ T6254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.257926][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.259803][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.324588][ C0] net_ratelimit: 2 callbacks suppressed [ 438.324604][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 438.681738][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 438.691630][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.693743][ T6259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.745425][ T6254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.747792][ T6254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.364646][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.404526][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.444562][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.938380][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'. [ 442.433798][ T6319] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 442.435796][ T6319] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 442.447402][ T6319] vhci_hcd vhci_hcd.0: Device attached [ 442.474667][ T6320] vhci_hcd: connection closed [ 442.478449][ T4427] vhci_hcd: stop threads [ 442.482325][ T4427] vhci_hcd: release socket [ 442.483572][ T4427] vhci_hcd: disconnect device [ 442.484972][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 442.805384][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'. [ 442.807806][ T6332] netlink: 34 bytes leftover after parsing attributes in process `syz.3.657'. [ 443.529971][ T4324] Bluetooth: hci2: command 0x0411 tx timeout [ 443.683087][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.350253][ T6359] bridge0: port 1(syz_tun) entered blocking state [ 444.352608][ T6359] bridge0: port 1(syz_tun) entered disabled state [ 444.365750][ T6359] device syz_tun entered promiscuous mode [ 444.372762][ T6359] bridge0: port 1(syz_tun) entered blocking state [ 444.374647][ T6359] bridge0: port 1(syz_tun) entered forwarding state [ 444.734585][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 445.141773][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 445.171259][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.173670][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.764479][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 446.814504][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.213533][ T6386] dccp_close: ABORT with 32 bytes unread [ 447.854466][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 448.426366][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 448.760889][ T6433] netlink: 40 bytes leftover after parsing attributes in process `syz.2.696'. [ 448.795441][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.884556][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 449.924483][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 450.796384][ T4369] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 451.564790][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 451.844945][ T22] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 451.901751][ T6518] tipc: Enabling of bearer rejected, failed to enable media [ 452.644498][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 454.190358][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.204515][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.568829][ T4324] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 456.653971][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.252312][ T6593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.684489][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 458.772049][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 458.775917][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 458.850448][ T6622] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 459.379988][ T4324] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 459.383067][ T4324] CPU: 1 PID: 4324 Comm: kworker/u5:3 Not tainted 6.1.128-syzkaller #0 [ 459.385416][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 459.388174][ T4324] Workqueue: hci2 hci_rx_work [ 459.389615][ T4324] Call trace: [ 459.390463][ T4324] dump_backtrace+0x1c8/0x1f4 [ 459.391816][ T4324] show_stack+0x2c/0x3c [ 459.392987][ T4324] dump_stack_lvl+0x108/0x170 [ 459.394252][ T4324] dump_stack+0x1c/0x58 [ 459.395403][ T4324] sysfs_create_dir_ns+0x278/0x318 [ 459.396784][ T4324] kobject_add_internal+0x598/0xb14 [ 459.398317][ T4324] kobject_add+0x14c/0x21c [ 459.399570][ T4324] device_add+0x400/0xef4 [ 459.400861][ T4324] hci_conn_add_sysfs+0xc4/0x1cc [ 459.402260][ T4324] le_conn_complete_evt+0xa48/0xff4 [ 459.403794][ T4324] hci_le_conn_complete_evt+0x114/0x404 [ 459.405279][ T4324] hci_le_meta_evt+0x2b8/0x47c [ 459.406630][ T4324] hci_event_packet+0x6f8/0x109c [ 459.407971][ T4324] hci_rx_work+0x310/0xa84 [ 459.409254][ T4324] process_one_work+0x804/0x1484 [ 459.410754][ T4324] worker_thread+0x8e4/0xfec [ 459.412035][ T4324] kthread+0x250/0x2d8 [ 459.413157][ T4324] ret_from_fork+0x10/0x20 [ 459.844509][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.861404][ T4324] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 459.865384][ T4324] Bluetooth: hci2: failed to register connection device [ 459.942891][ T4324] ================================================================== [ 459.945324][ T4324] BUG: KASAN: use-after-free in l2cap_sock_new_connection_cb+0x1d0/0x298 [ 459.947659][ T4324] Read of size 8 at addr ffff0000c3fde540 by task kworker/u5:3/4324 [ 459.949791][ T4324] [ 459.950362][ T4324] CPU: 1 PID: 4324 Comm: kworker/u5:3 Not tainted 6.1.128-syzkaller #0 [ 459.952690][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 459.955526][ T4324] Workqueue: hci2 hci_rx_work [ 459.956854][ T4324] Call trace: [ 459.957828][ T4324] dump_backtrace+0x1c8/0x1f4 [ 459.959159][ T4324] show_stack+0x2c/0x3c [ 459.960335][ T4324] dump_stack_lvl+0x108/0x170 [ 459.961681][ T4324] print_report+0x174/0x4c0 [ 459.962975][ T4324] kasan_report+0xd4/0x130 [ 459.964170][ T4324] __asan_report_load8_noabort+0x2c/0x38 [ 459.965847][ T4324] l2cap_sock_new_connection_cb+0x1d0/0x298 [ 459.967547][ T4324] l2cap_connect_cfm+0x2f8/0xe10 [ 459.968881][ T4324] hci_connect_cfm+0x120/0x1d0 [ 459.970262][ T4324] le_conn_complete_evt+0xab8/0xff4 [ 459.971759][ T4324] hci_le_conn_complete_evt+0x114/0x404 [ 459.973321][ T4324] hci_le_meta_evt+0x2b8/0x47c [ 459.974751][ T4324] hci_event_packet+0x6f8/0x109c [ 459.976090][ T4324] hci_rx_work+0x310/0xa84 [ 459.977323][ T4324] process_one_work+0x804/0x1484 [ 459.978719][ T4324] worker_thread+0x8e4/0xfec [ 459.979959][ T4324] kthread+0x250/0x2d8 [ 459.981168][ T4324] ret_from_fork+0x10/0x20 [ 459.982389][ T4324] [ 459.983048][ T4324] Allocated by task 4324: [ 459.984268][ T4324] kasan_set_track+0x4c/0x80 [ 459.985569][ T4324] kasan_save_alloc_info+0x24/0x30 [ 459.987026][ T4324] __kasan_kmalloc+0xac/0xc4 [ 459.988339][ T4324] __kmalloc+0xd8/0x1c4 [ 459.989540][ T4324] sk_prot_alloc+0xc4/0x1f0 [ 459.990838][ T4324] sk_alloc+0x44/0x3e4 [ 459.991997][ T4324] bt_sock_alloc+0x4c/0x140 [ 459.993334][ T4324] l2cap_sock_new_connection_cb+0xe0/0x298 [ 459.994986][ T4324] l2cap_connect_cfm+0x2f8/0xe10 [ 459.996354][ T4324] hci_connect_cfm+0x120/0x1d0 [ 459.997680][ T4324] le_conn_complete_evt+0xab8/0xff4 [ 459.999074][ T4324] hci_le_conn_complete_evt+0x114/0x404 [ 460.000739][ T4324] hci_le_meta_evt+0x2b8/0x47c [ 460.002103][ T4324] hci_event_packet+0x6f8/0x109c [ 460.003457][ T4324] hci_rx_work+0x310/0xa84 [ 460.004793][ T4324] process_one_work+0x804/0x1484 [ 460.006207][ T4324] worker_thread+0x8e4/0xfec [ 460.007559][ T4324] kthread+0x250/0x2d8 [ 460.008770][ T4324] ret_from_fork+0x10/0x20 [ 460.010062][ T4324] [ 460.010703][ T4324] Freed by task 6627: [ 460.011753][ T4324] kasan_set_track+0x4c/0x80 [ 460.012999][ T4324] kasan_save_free_info+0x38/0x5c [ 460.014352][ T4324] ____kasan_slab_free+0x144/0x1c0 [ 460.015854][ T4324] __kasan_slab_free+0x18/0x28 [ 460.017227][ T4324] __kmem_cache_free+0x2c0/0x4b4 [ 460.018657][ T4324] kfree+0xcc/0x1b8 [ 460.019719][ T4324] __sk_destruct+0x4b8/0x75c [ 460.021046][ T4324] __sk_free+0x37c/0x4e8 [ 460.022236][ T4324] sk_free+0x60/0xc8 [ 460.023454][ T4324] l2cap_sock_kill+0x12c/0x234 [ 460.024751][ T4324] l2cap_sock_cleanup_listen+0xf8/0x290 [ 460.026317][ T4324] l2cap_sock_release+0x5c/0x1b4 [ 460.027776][ T4324] sock_close+0xb8/0x1fc [ 460.028984][ T4324] __fput+0x1c8/0x7c8 [ 460.030091][ T4324] ____fput+0x20/0x30 [ 460.031239][ T4324] task_work_run+0x240/0x2f0 [ 460.032527][ T4324] do_notify_resume+0x2080/0x2cb8 [ 460.034016][ T4324] el0_svc+0x9c/0x168 [ 460.035142][ T4324] el0t_64_sync_handler+0x84/0xf0 [ 460.036593][ T4324] el0t_64_sync+0x18c/0x190 [ 460.037877][ T4324] [ 460.038535][ T4324] The buggy address belongs to the object at ffff0000c3fde000 [ 460.038535][ T4324] which belongs to the cache kmalloc-2k of size 2048 [ 460.042424][ T4324] The buggy address is located 1344 bytes inside of [ 460.042424][ T4324] 2048-byte region [ffff0000c3fde000, ffff0000c3fde800) [ 460.046274][ T4324] [ 460.046917][ T4324] The buggy address belongs to the physical page: [ 460.048759][ T4324] page:00000000fc8f0f3c refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x103fd8 [ 460.051678][ T4324] head:00000000fc8f0f3c order:3 compound_mapcount:0 compound_pincount:0 [ 460.054085][ T4324] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 460.056419][ T4324] raw: 05ffc00000010200 fffffc0003578a00 dead000000000002 ffff0000c0002900 [ 460.058907][ T4324] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 460.061314][ T4324] page dumped because: kasan: bad access detected [ 460.063144][ T4324] [ 460.063803][ T4324] Memory state around the buggy address: [ 460.065500][ T4324] ffff0000c3fde400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 460.067746][ T4324] ffff0000c3fde480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 460.069935][ T4324] >ffff0000c3fde500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 460.072210][ T4324] ^ [ 460.073935][ T4324] ffff0000c3fde580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 460.076255][ T4324] ffff0000c3fde600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 460.078476][ T4324] ================================================================== [ 460.335674][ T4324] Disabling lock debugging due to kernel taint [ 460.337359][ T4324] ------------[ cut here ]------------ [ 460.338730][ T4324] refcount_t: addition on 0; use-after-free. [ 460.340630][ T4324] WARNING: CPU: 1 PID: 4324 at lib/refcount.c:25 refcount_warn_saturate+0x1a8/0x20c [ 460.343064][ T4324] Modules linked in: [ 460.344023][ T4324] CPU: 1 PID: 4324 Comm: kworker/u5:3 Tainted: G B 6.1.128-syzkaller #0 [ 460.346757][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 460.349590][ T4324] Workqueue: hci2 hci_rx_work [ 460.350917][ T4324] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 460.353065][ T4324] pc : refcount_warn_saturate+0x1a8/0x20c [ 460.354677][ T4324] lr : refcount_warn_saturate+0x1a8/0x20c [ 460.356191][ T4324] sp : ffff800021247480 [ 460.357456][ T4324] x29: ffff800021247480 x28: ffff0000c3fdf000 x27: ffff0000c3fd84c8 [ 460.359704][ T4324] x26: 1fffe000187fbe07 x25: 1fffe0001e6a8600 x24: dfff800000000000 [ 460.361937][ T4324] x23: ffff0000ce106014 x22: 00000000ffffffff x21: 0000000000000002 [ 460.364203][ T4324] x20: ffff0000c3fdf018 x19: ffff8000184d6000 x18: 1fffe0003679cb76 [ 460.366512][ T4324] x17: 0000000000000000 x16: ffff80001226d2c0 x15: 0000000000000002 [ 460.368846][ T4324] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000100000 [ 460.371111][ T4324] x11: 000000000004cb7f x10: ffff800032c0a000 x9 : b0eeafc1d9379100 [ 460.373361][ T4324] x8 : b0eeafc1d9379100 x7 : 0000000000000001 x6 : 0000000000000001 [ 460.375731][ T4324] x5 : ffff800021246d78 x4 : ffff800015bd5320 x3 : ffff80000834aab0 [ 460.378017][ T4324] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 460.380260][ T4324] Call trace: [ 460.381167][ T4324] refcount_warn_saturate+0x1a8/0x20c [ 460.382719][ T4324] l2cap_chan_hold+0x98/0x124 [ 460.384090][ T4324] __l2cap_chan_add+0x278/0x6d4 [ 460.385484][ T4324] l2cap_connect_cfm+0x3ac/0xe10 [ 460.386888][ T4324] hci_connect_cfm+0x120/0x1d0 [ 460.388166][ T4324] le_conn_complete_evt+0xab8/0xff4 [ 460.389597][ T4324] hci_le_conn_complete_evt+0x114/0x404 [ 460.391141][ T4324] hci_le_meta_evt+0x2b8/0x47c [ 460.392489][ T4324] hci_event_packet+0x6f8/0x109c [ 460.393874][ T4324] hci_rx_work+0x310/0xa84 [ 460.395115][ T4324] process_one_work+0x804/0x1484 [ 460.396530][ T4324] worker_thread+0x8e4/0xfec [ 460.397851][ T4324] kthread+0x250/0x2d8 [ 460.399045][ T4324] ret_from_fork+0x10/0x20 [ 460.400289][ T4324] irq event stamp: 4765 [ 460.401443][ T4324] hardirqs last enabled at (4765): [] finish_lock_switch+0xbc/0x1e8 [ 460.404139][ T4324] hardirqs last disabled at (4764): [] __schedule+0x2a4/0x1d44 [ 460.406703][ T4324] softirqs last enabled at (4456): [] release_sock+0x178/0x1cc [ 460.409241][ T4324] softirqs last disabled at (4452): [] release_sock+0x3c/0x1cc [ 460.412021][ T4324] ---[ end trace 0000000000000000 ]--- [ 460.415534][ T4324] ------------[ cut here ]------------ [ 460.417110][ T4324] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: l2cap_chan_timeout+0x0/0x288 [ 460.420796][ T4324] WARNING: CPU: 1 PID: 4324 at lib/debugobjects.c:518 debug_print_object+0x148/0x1d4 [ 460.423451][ T4324] Modules linked in: [ 460.424456][ T4324] CPU: 1 PID: 4324 Comm: kworker/u5:3 Tainted: G B W 6.1.128-syzkaller #0 [ 460.427081][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 460.429823][ T4324] Workqueue: hci2 hci_rx_work [ 460.431133][ T4324] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 460.433338][ T4324] pc : debug_print_object+0x148/0x1d4 [ 460.434847][ T4324] lr : debug_print_object+0x148/0x1d4 [ 460.436370][ T4324] sp : ffff800021247050 [ 460.437525][ T4324] x29: ffff800021247050 x28: dfff800000000000 x27: ffff700004248e18 [ 460.439777][ T4324] x26: ffff0000d243cd00 x25: ffff8000083f3268 x24: dfff800000000000 [ 460.442106][ T4324] x23: 0000000000000000 x22: ffff80001158a0f4 x21: ffff800012977980 [ 460.444327][ T4324] x20: ffff80001249b000 x19: ffff8000129774c0 x18: 1fffe0003679cb76 [ 460.446536][ T4324] x17: 203a657079742074 x16: ffff80001231f9fc x15: 0000000000000002 [ 460.448763][ T4324] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000100000 [ 460.450972][ T4324] x11: 000000000006a0e1 x10: ffff800032c0a000 x9 : b0eeafc1d9379100 [ 460.453239][ T4324] x8 : b0eeafc1d9379100 x7 : 0000000000000001 x6 : 0000000000000001 [ 460.455426][ T4324] x5 : ffff800021246938 x4 : ffff800015bd5320 x3 : ffff80000ab302f8 [ 460.457635][ T4324] x2 : ffff0001b3ce5cd0 x1 : 0000000100000000 x0 : 0000000000000000 [ 460.459916][ T4324] Call trace: [ 460.460847][ T4324] debug_print_object+0x148/0x1d4 [ 460.462220][ T4324] debug_object_assert_init+0x318/0x3c8 [ 460.463826][ T4324] timer_delete+0xa8/0x2b4 [ 460.465060][ T4324] try_to_grab_pending+0xa4/0x65c [ 460.466497][ T4324] __cancel_work+0xb0/0x2b0 [ 460.467772][ T4324] cancel_delayed_work+0x24/0x38 [ 460.469107][ T4324] l2cap_le_start+0x8e4/0x13a8 [ 460.470431][ T4324] l2cap_connect_cfm+0x5ac/0xe10 [ 460.471814][ T4324] hci_connect_cfm+0x120/0x1d0 [ 460.473122][ T4324] le_conn_complete_evt+0xab8/0xff4 [ 460.474510][ T4324] hci_le_conn_complete_evt+0x114/0x404 [ 460.476017][ T4324] hci_le_meta_evt+0x2b8/0x47c [ 460.477150][ T4324] hci_event_packet+0x6f8/0x109c [ 460.478294][ T4324] hci_rx_work+0x310/0xa84 [ 460.479316][ T4324] process_one_work+0x804/0x1484 [ 460.480547][ T4324] worker_thread+0x8e4/0xfec [ 460.481817][ T4324] kthread+0x250/0x2d8 [ 460.482906][ T4324] ret_from_fork+0x10/0x20 [ 460.484154][ T4324] irq event stamp: 4765 [ 460.485232][ T4324] hardirqs last enabled at (4765): [] finish_lock_switch+0xbc/0x1e8 [ 460.487822][ T4324] hardirqs last disabled at (4764): [] __schedule+0x2a4/0x1d44 [ 460.490267][ T4324] softirqs last enabled at (4456): [] release_sock+0x178/0x1cc [ 460.492829][ T4324] softirqs last disabled at (4452): [] release_sock+0x3c/0x1cc [ 460.495465][ T4324] ---[ end trace 0000000000000000 ]--- [ 460.497246][ T4324] Unable to handle kernel paging request at virtual address dfff800000000013 [ 460.499690][ T4324] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 460.501853][ T4324] Mem abort info: [ 460.502862][ T4324] ESR = 0x0000000096000006 [ 460.504058][ T4324] EC = 0x25: DABT (current EL), IL = 32 bits [ 460.505865][ T4324] SET = 0, FnV = 0 [ 460.506898][ T4324] EA = 0, S1PTW = 0 [ 460.507969][ T4324] FSC = 0x06: level 2 translation fault [ 460.509529][ T4324] Data abort info: [ 460.510649][ T4324] ISV = 0, ISS = 0x00000006 [ 460.511898][ T4324] CM = 0, WnR = 0 [ 460.512850][ T4324] [dfff800000000013] address between user and kernel address ranges [ 460.514988][ T4324] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 460.516750][ T4324] Modules linked in: [ 460.517736][ T4324] CPU: 1 PID: 4324 Comm: kworker/u5:3 Tainted: G B W 6.1.128-syzkaller #0 [ 460.520492][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 460.523276][ T4324] Workqueue: hci2 hci_rx_work [ 460.524564][ T4324] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 460.526755][ T4324] pc : do_raw_spin_lock+0x80/0x358 [ 460.528171][ T4324] lr : _raw_spin_lock_bh+0x5c/0x6c [ 460.529598][ T4324] sp : ffff800021247240 [ 460.530752][ T4324] x29: ffff8000212472d0 x28: ffff800021247260 x27: 1fffe000187fbe06 [ 460.533035][ T4324] x26: 1fffe000187fbe00 x25: ffff700004248e84 x24: dfff800000000000 [ 460.535276][ T4324] x23: dfff800000000000 x22: 0000000000000130 x21: 0000000000000000 [ 460.537500][ T4324] x20: 0000000000000098 x19: 000000000000009c x18: 1fffe0003679cb76 [ 460.539762][ T4324] x17: 203a657079742074 x16: ffff80000831aab8 x15: 0000000000000002 [ 460.541923][ T4324] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000100000 [ 460.544229][ T4324] x11: ffff80000831aab8 x10: 1ffff00004248e4c x9 : 0000000000000013 [ 460.546476][ T4324] x8 : f3f3f304f1f1f1f1 x7 : 0000000000000000 x6 : ffff800010594ba8 [ 460.548673][ T4324] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 460.550947][ T4324] x2 : 0000000000000000 x1 : ffff800012976ea0 x0 : 0000000000000098 [ 460.553065][ T4324] Call trace: [ 460.553949][ T4324] do_raw_spin_lock+0x80/0x358 [ 460.555387][ T4324] _raw_spin_lock_bh+0x5c/0x6c [ 460.556771][ T4324] lock_sock_nested+0x90/0x138 [ 460.558094][ T4324] l2cap_sock_ready_cb+0x4c/0x130 [ 460.559544][ T4324] l2cap_le_start+0xa80/0x13a8 [ 460.560855][ T4324] l2cap_connect_cfm+0x5ac/0xe10 [ 460.562183][ T4324] hci_connect_cfm+0x120/0x1d0 [ 460.563566][ T4324] le_conn_complete_evt+0xab8/0xff4 [ 460.565033][ T4324] hci_le_conn_complete_evt+0x114/0x404 [ 460.566478][ T4324] hci_le_meta_evt+0x2b8/0x47c [ 460.567759][ T4324] hci_event_packet+0x6f8/0x109c [ 460.569015][ T4324] hci_rx_work+0x310/0xa84 [ 460.570185][ T4324] process_one_work+0x804/0x1484 [ 460.571647][ T4324] worker_thread+0x8e4/0xfec [ 460.572901][ T4324] kthread+0x250/0x2d8 [ 460.574013][ T4324] ret_from_fork+0x10/0x20 [ 460.575261][ T4324] Code: d343fe69 f9001beb f8376948 aa0003f4 (38f76928) [ 460.577213][ T4324] ---[ end trace 0000000000000000 ]--- [ 461.067049][ T4324] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 461.069156][ T4324] SMP: stopping secondary CPUs [ 461.070457][ T4324] Kernel Offset: disabled [ 461.071594][ T4324] CPU features: 0x080000,02070084,26017203 [ 461.073110][ T4324] Memory Limit: none [ 461.526781][ T4324] Rebooting in 86400 seconds..