last executing test programs: 1m8.496051529s ago: executing program 0 (id=830): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x100000, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x5a) listen(r0, 0x0) listen(r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad014031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f00000002c0)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4004000) 1m8.444896881s ago: executing program 0 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) 1m7.2028419s ago: executing program 0 (id=838): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000)={0x0, 0x200000000}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r3 = gettid() read$FUSE(r2, &(0x7f0000001340)={0x2020}, 0x2020) tkill(r3, 0x14) 1m7.014652975s ago: executing program 0 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1008403, &(0x7f0000000300)={[{@noload}, {@nomblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noblock_validity}]}, 0x0, 0x53a, &(0x7f00000007c0)="$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") 1m6.857356438s ago: executing program 0 (id=844): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0xc) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 1m6.183282784s ago: executing program 0 (id=849): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x7fd, 0x2, 0x2, 0x2, 0x3}, 0x20) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0xa) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) capset(0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 1m6.143216185s ago: executing program 32 (id=849): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x7fd, 0x2, 0x2, 0x2, 0x3}, 0x20) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0xa) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) capset(0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 17.511295473s ago: executing program 2 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x20000000, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000, 0x3e0000}, {0x0, 0x4d, 0x0, 0x8000}], 0x0) 16.597685215s ago: executing program 2 (id=1263): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 14.933168414s ago: executing program 2 (id=1270): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)='%pK \x00'}, 0x20) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004480)={0x2020}, 0x2020) 14.69211533s ago: executing program 2 (id=1274): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) 14.339164569s ago: executing program 2 (id=1284): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 9.939035134s ago: executing program 3 (id=1319): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 9.863233425s ago: executing program 3 (id=1321): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0x6, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0x5, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 9.119048193s ago: executing program 3 (id=1324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0xffffffff, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0xa, 0xc28, 0x9, 0x8, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x6, 0x1, 0x1, 0x7, 0x40, 0x7, 0x10, 0x8000, 0x5, 0x4dc, 0x80, 0x3, 0x81, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x5, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x7, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x3, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xfffffffe, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x1, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0xb4, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x2cd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a9, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x4, 0xa, 0x0, 0x4, 0x10, 0x6, 0x5, 0x2, 0x7a, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {0x3}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x81, 0x5, 0x4, 0x9, 0x9, 0x1, 0x6, 0x3, 0xe, 0xfffffffc, 0x0, 0xe, 0x0, 0x0, 0xffffff32, 0x5, 0xf, 0x3, 0x3, 0x7, 0x80000000, 0x80, 0x8000, 0x1000, 0x7, 0x200, 0xae, 0xffff, 0x5, 0x4f67, 0x4, 0x8, 0xcd, 0xffffffff, 0x208, 0x4, 0x2, 0x9, 0x7, 0x0, 0x10000, 0xe385, 0xfd, 0x3ff, 0x7, 0x2, 0x9, 0x81, 0x6, 0x80000006, 0x9, 0xfffffffa, 0x8, 0x100, 0x4, 0xd, 0x2, 0x6, 0xffffdaac, 0xf, 0x3, 0x9, 0x8, 0xffffffff, 0x0, 0x0, 0xfc, 0x7, 0x9, 0x1, 0x0, 0x401, 0xc6cb1260, 0x8001, 0x3, 0x5, 0x480e, 0x8000, 0xb, 0x7, 0x5, 0x0, 0xfffffff9, 0x4, 0x1, 0x1, 0x9, 0x3, 0x1, 0x6, 0x1, 0x4, 0x7fff, 0x6, 0xff, 0x0, 0x9, 0x8, 0x8001, 0x101, 0x515f, 0x377, 0x4, 0x2, 0x4, 0x6b, 0x1aa13142, 0xfffffffd, 0x7, 0x0, 0x4, 0x40091e, 0xfffffff7, 0x2, 0x9, 0x6, 0x8e3, 0xd7c9, 0x2, 0x2, 0xfffffffe, 0x81, 0xa4bf, 0x2, 0x3, 0x400, 0x8, 0x1ff, 0x4, 0x7, 0x4, 0xfffffffb, 0xe3, 0x8, 0xa, 0x538, 0x37c1, 0x7, 0x9, 0x1000, 0x9, 0x631d, 0x1c, 0xa, 0x5, 0x100, 0x7, 0x81, 0x8, 0x1, 0x45, 0x1, 0x4f1, 0x8, 0x484, 0x7, 0x8, 0x14, 0x67fff, 0x5, 0xa, 0x2, 0x10001, 0x7ff, 0x2fb, 0x4, 0xfffffff8, 0x8, 0x29, 0x2, 0x1, 0x2, 0xffffd481, 0x1, 0xc7, 0x7fffffff, 0x800, 0x3, 0x1, 0xcf03, 0x7, 0xdd2, 0x2, 0xce1, 0x1, 0x2, 0x7fffffff, 0x5, 0x6, 0x10001, 0xf2d, 0x6, 0xb84, 0x80, 0x6f0ab25b, 0x10, 0xfffffbff, 0x0, 0x1, 0x4, 0xff000000, 0x8004, 0x2, 0x0, 0x2, 0xfffffffd, 0x2, 0xa1c, 0x1, 0x1, 0x203, 0xb, 0x1, 0xd67, 0x2, 0x2, 0x516, 0xfffffff3, 0x2, 0x2790, 0x5, 0xfffff23c, 0x8, 0xffff7fff, 0x3, 0x4fa, 0x401, 0x8, 0x5, 0x4, 0x7146, 0x0, 0x4, 0xc, 0x9, 0x2, 0x7, 0x6, 0x6, 0x7fffffff, 0x2eb, 0x68b0afbf, 0x15181a07, 0x54, 0x8, 0x7, 0x0, 0x9, 0x4, 0x1, 0x0, 0x43, 0x7f, 0x5, 0xf700000, 0x8]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) 8.430928699s ago: executing program 3 (id=1329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) bind$rds(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000100)=0x6, 0x4) 7.55713274s ago: executing program 3 (id=1335): munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x41}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) 7.522604831s ago: executing program 1 (id=1336): syz_open_dev$char_usb(0xc, 0xb4, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 7.177018929s ago: executing program 3 (id=1347): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x498144ee5762a149, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) 3.272154592s ago: executing program 1 (id=1338): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x60040000) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x3d) 3.164151315s ago: executing program 5 (id=1339): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3.163836775s ago: executing program 4 (id=1340): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='retrans\x00', &(0x7f0000000480)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.67681601s ago: executing program 5 (id=1341): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000000), 0x220000c, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.655524621s ago: executing program 4 (id=1342): syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f0000000c40)={[{@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x43, 0x4ee, &(0x7f0000000c80)="$eJzs3dFrJHcdAPDvTLJ3yTXtptaHtmAtbSVX9HaTxrbBh7aC6FNBre8xJpsQssmGZNO7hENy+AcIIir45NO9CP4BgtxfICIc6LvooYje6YMP6srOzuZyud1kTzeZM/l8YDK/3/xm9vv9LezMzs4vMwFcWK9GxAcRMRIRb0ZEOV+e5tN8u7LfWe/B/ZuL7SmJVuujvySR5Mu6r5Xk82c6m8RYRHz9KxHfSnpF3ltbqNdrW3mt2lzfrG7v7l1bXV9Yqa3UNmZnZ96Ze3fu7bnpwTuT9m+ajIj3vnTvB9+9/eX3fvG567+b/9PVb7fTmsjbD/djmDpdL2XvRddoRGydRrCCjGY9BADg/8ELEfGJiHgt+/5fjpHs29ylotMCAAAAhqj1/kT8M4loDei1GHxdAAAA4OmQZmNgk7SSD5+diDStVDpjeD8ZV9J6Y7v52eXGzsZSp30ySunyar02nY8VnoxS0q7P5GNsu/W3jtRnI+L5iPh+eTyrVxYb9aWif/wAAACAC+KZI+f/fy93zv9vP/oPnZuFJQgAAAAMx2TRCQAAAACnzvk/AAAAnH/O/wEAAOBc++qHH7anVvf510sf7+6sNT6+tlTbXqus7yxWFhtbm5WVRmMlu2ff+kmvV280Nj8fGzs3qs3adrO6vbs3v97Y2WjOrz7yCGwAAADgDD3/6Tu/TSJi/wvj2dT20kHr5QIzA05b+iQr/+H08gDO3kjRCQCFGS06AaAwpaITAAqXnND+XL+GXw0/FwAA4HRMvfT49f9y0UkBZ+KJrv8DAOeC6/9wcZWMAIQL77kT9gN9b97x2PX/9/us2Gr9F2kBAABDNJFNSVrJrwVORJpWKhHPZo8FGI/l1XptOh//+5ty6XK7PpNtmZw4ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6Gi1kmgBAAAA51pE+scku5t/xFT5jYmjvw9cSv5RzuYRcf3HH/3wxkKzuTXTXv7Xg+XNH+XL3yriFwwAAAC4IO4N/iS+7nl69zweAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbpwf2bi93pLOP++YsRMdkr/miMZfOxKEXElb8lMXpouyQiRoYQf/9WRLzYK37STism8yx6xR8/m/i/fBg/OdguHUJsuOjutPc/H/T6/KXxajbv/fkfzaf/Vf/9X3qw/xvps/95dsAYL9/9WbVv/FsRL4/23v904ydZtMfjvz5g/G9+Y2/vUPXy4bbWTyKmeh5/kkdiVZvrm9Xt3b1rq+sLK7WV2sbs7Mw7c+/OvT03XV1erdfyvz3jf+9TP//3cf2/0if+5EH/e7//bwzY/3/dvXH/hU6x1Cv+1dd7H39f7BM/zY99n8nL7fapbnm/Uz7slZ/++pXj+r/Up/9jx/S/fVC6OmD/3/zad34/4KoAwBnY3t1bW6jXa1sKvQsT8VSkcV4Ll7y9T2mh6D0TAAAwbA+/9BedCQAAAAAAAAAAAAAAAAAAAFxcZ3E7saMx94vpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAsf4TAAD///t60YY=") 1.613860932s ago: executing program 1 (id=1343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) 1.491865245s ago: executing program 5 (id=1344): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f00000012c0)='%*.\x00\x85\xb1_\xbf\xdf\x9a\x91\xf8\x8f\x93\x1b\xf8\xae\xd8K\xd6\xe5\x04\x9d\xd2s\xe9c\xcc\xf3;e\xdb<\xac\x1b\x89\xa7\xcd\xc7\xb8\x8ah7\xda\xa4\xe2\x16\x99q\xde\x8eg\xa4&i\xdb\xecP\xb2\x8b.I\xf1%\x9e8\xcb\xcc>\xe5\xea\xb5u\x8e\x89\x02Y{7:\xc7\x9b\xff\xe2My)\x83T\xec\xf7{\x02({\xf0:\x88\xde\x9fJp\xd5\xe9\xc2\xe3n\xfc\x1c\x8c_\xde;B\x9c\xdb\xe3G\n\x8d\xda \xad\x84\x17H\xa2\xf5\xd8s&\xa0\xe7\xaa\xc7t@\xe7\b\x86\xb99\xa2\xd4\x98-\xc6a\x01M\t\x175\xfe0O\x19\xdd\xbfBD\x89\t\xe9\xa6\x8f\xa5\t;C\x1cs~\xf0i\xd0I\x13\xff\xd7/\xc0\x00\xeb\xe9|G\x02\xca\x84\"a\x1e\x90\xf8\xbdz\xbf.DX\xb2`Af\xfcK\x8b\x9a8\xecqUy${f\xe4\x91\xc2:\x9e{Fz\x02^s\xd6\xdb\xc5\r\xfb\x1f#\xcd\xd3t\xa5\x89W\xbc\x98\xd5)6\b\xf7\xe9\x8a\x17e\xec\xbc?\x05%\b', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8\x9e\x9cY\x8e\xf8\xa4,G\xe4\xdf\xdbs\xe3\x18_\xb1\xd7C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000300)=[{{0x4, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x10) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 399.505181ms ago: executing program 1 (id=1348): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000100)='=', 0x1, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 267.178473ms ago: executing program 5 (id=1349): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 266.847824ms ago: executing program 1 (id=1350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0xd03, 0xffffffff, 0x76f1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x7, 0x0, 0x8000, 0xfffffffe}, 0x6, 0x0, 0x7c1, 0x0, 0x1, 0x15, 0x12, 0x1d, 0x87, 0x7fffffff, {0x8, 0x1, 0x6, 0x3, 0x6, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 255.029214ms ago: executing program 4 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="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", 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 117.683847ms ago: executing program 4 (id=1352): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x8, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 97.814288ms ago: executing program 2 (id=1284): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 26.366429ms ago: executing program 4 (id=1353): preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0x4e, 0x5) 17.55383ms ago: executing program 1 (id=1354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x2, 0x34005, 0x0, 0x480}, 0x0) 0s ago: executing program 5 (id=1355): pipe2$watch_queue(&(0x7f0000000240), 0x80) pipe2$watch_queue(&(0x7f0000000040), 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000003000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x3e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) kernel console output (not intermixed with test programs): th:syzkaller0> [ 43.849266][ T4953] cgroup: Setting release_agent not allowed [ 43.910040][ T4950] tipc: Disabling bearer [ 45.179497][ T4999] binder: 4998:4999 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 45.181983][ T4999] binder: 4999 RLIMIT_NICE not set [ 45.273633][ T5007] loop0: detected capacity change from 0 to 512 [ 45.309567][ T5007] EXT4-fs (loop0): 1 orphan inode deleted [ 45.310639][ T5007] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.373964][ T39] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 45.375874][ T39] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 1 [ 45.380294][ T5017] EXT4-fs error (device loop0): ext4_get_parent:1910: inode #14: comm syz.0.219: iget: bogus i_mode (0) [ 45.385705][ T5007] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 45.408446][ T4329] EXT4-fs (loop0): unmounting filesystem. [ 45.609356][ T5032] loop4: detected capacity change from 0 to 2048 [ 45.652488][ T5032] loop4: p3 < > p4 < > [ 45.653328][ T5032] loop4: partition table partially beyond EOD, truncated [ 45.655250][ T5032] loop4: p3 start 4284289 is beyond EOD, truncated [ 45.670633][ T3940] loop4: p3 < > p4 < > [ 45.671435][ T3940] loop4: partition table partially beyond EOD, truncated [ 45.672781][ T3940] loop4: p3 start 4284289 is beyond EOD, truncated [ 45.770876][ T4343] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 45.775440][ T4321] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.777389][ T4321] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.779187][ T4321] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 45.781041][ T4321] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.782871][ T4321] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 45.798070][ T4321] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.801375][ T4321] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 45.802968][ T4321] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.804415][ T4321] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 45.807031][ T4321] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 45.809455][ T4321] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 45.820931][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 45.834276][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 45.973384][ T5044] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.975229][ T5044] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.225823][ C1] vxcan1: j1939_tp_rxtimer: 0x000000006deb9b66: rx timeout, send abort [ 46.228557][ C1] vxcan1: j1939_xtp_rx_abort_one: 0x000000006deb9b66: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 46.231724][ C1] vxcan1: j1939_tp_rxtimer: 0x000000002f24d382: rx timeout, send abort [ 46.233223][ C1] vxcan1: j1939_xtp_rx_abort_one: 0x000000002f24d382: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 46.354268][ T5044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.372393][ T5044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.453085][ T5064] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 46.457675][ T5064] overlayfs: failed to set xattr on upper [ 46.463371][ T5064] overlayfs: ...falling back to index=off,metacopy=off. [ 46.737344][ T5044] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.739011][ T5044] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.740371][ T5044] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.741772][ T5044] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.906969][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 46.918046][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 46.947082][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 46.962867][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 46.964200][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 46.977185][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 46.978490][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 46.983165][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 46.985396][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 47.000513][ T5066] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 47.048660][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.055607][ T5066] device bridge_slave_1 left promiscuous mode [ 47.057463][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.080164][ T5078] Zero length message leads to an empty skb [ 47.177289][ T5087] loop4: detected capacity change from 0 to 128 [ 47.204377][ T5087] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 47.218323][ T5087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 47.701621][ T5108] loop2: detected capacity change from 0 to 1024 [ 47.712277][ T5108] hfsplus: unable to parse mount options [ 47.759118][ T5117] netlink: 'syz.4.263': attribute type 11 has an invalid length. [ 47.858808][ T5123] tipc: Cannot configure node identity twice [ 48.412132][ T5156] loop2: detected capacity change from 0 to 1024 [ 48.505570][ T5156] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.548858][ T5156] loop2: detected capacity change from 1024 to 1 [ 48.556766][ T5156] syz.2.280: attempt to access beyond end of device [ 48.556766][ T5156] loop2: rw=2049, sector=224, nr_sectors = 2 limit=1 [ 48.579497][ T5156] EXT4-fs warning (device loop2): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 112) [ 48.581610][ T5156] Buffer I/O error on device loop2, logical block 112 [ 48.583036][ T5156] syz.2.280: attempt to access beyond end of device [ 48.583036][ T5156] loop2: rw=2049, sector=230, nr_sectors = 130 limit=1 [ 48.585331][ T5156] EXT4-fs warning (device loop2): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 115) [ 48.587253][ T5156] Buffer I/O error on device loop2, logical block 115 [ 48.588376][ T5156] Buffer I/O error on device loop2, logical block 116 [ 48.589536][ T5156] Buffer I/O error on device loop2, logical block 117 [ 48.590691][ T5156] Buffer I/O error on device loop2, logical block 118 [ 48.591818][ T5156] Buffer I/O error on device loop2, logical block 119 [ 48.594378][ T5156] Buffer I/O error on device loop2, logical block 120 [ 48.595543][ T5156] Buffer I/O error on device loop2, logical block 121 [ 48.596608][ T5156] Buffer I/O error on device loop2, logical block 122 [ 48.597669][ T5156] Buffer I/O error on device loop2, logical block 123 [ 48.624458][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 48.641421][ T4330] syz-executor: attempt to access beyond end of device [ 48.641421][ T4330] loop2: rw=145409, sector=2, nr_sectors = 2 limit=1 [ 48.647080][ T4330] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 48.649221][ T4330] EXT4-fs (loop2): I/O error while writing superblock [ 48.652199][ T5160] kmmpd-loop2: attempt to access beyond end of device [ 48.652199][ T5160] loop2: rw=14337, sector=128, nr_sectors = 2 limit=1 [ 48.654516][ T5160] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 48.934925][ T5179] loop4: detected capacity change from 0 to 64 [ 49.041203][ T4343] hfs: node 4:3 still has 1 user(s)! [ 49.056945][ T5188] fuse: Bad value for 'fd' [ 49.660767][ T4346] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.663633][ T4346] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.667000][ T4346] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.673879][ T4346] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.675420][ T4346] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 49.676761][ T4346] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.732351][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.734125][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.737014][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.739915][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.741667][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 49.743053][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.813158][ T4346] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 49.819058][ T4346] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 49.822528][ T4335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 49.823962][ T4335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 49.827489][ T4335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 49.829449][ T4340] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 49.830574][ T4335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 49.832389][ T4335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.835957][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.842442][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 49.847411][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 49.849756][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 49.851056][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 49.920985][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.015848][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.044402][ T5191] chnl_net:caif_netlink_parms(): no params data found [ 50.094579][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.104919][ T5202] chnl_net:caif_netlink_parms(): no params data found [ 50.115639][ T5200] chnl_net:caif_netlink_parms(): no params data found [ 50.122292][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.123599][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.125157][ T5191] device bridge_slave_0 entered promiscuous mode [ 50.134164][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.135436][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.136904][ T5191] device bridge_slave_1 entered promiscuous mode [ 50.156762][ T5191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.192584][ T5191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.223366][ T5195] chnl_net:caif_netlink_parms(): no params data found [ 50.227885][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.232534][ T5200] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.234471][ T5200] device bridge_slave_0 entered promiscuous mode [ 50.236672][ T5202] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.237948][ T5202] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.240051][ T5202] device bridge_slave_0 entered promiscuous mode [ 50.244358][ T5191] team0: Port device team_slave_0 added [ 50.267602][ T5200] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.268841][ T5200] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.270419][ T5200] device bridge_slave_1 entered promiscuous mode [ 50.273521][ T5191] team0: Port device team_slave_1 added [ 50.279092][ T5191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.280369][ T5191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.285191][ T5191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.287507][ T5202] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.289063][ T5202] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.290647][ T5202] device bridge_slave_1 entered promiscuous mode [ 50.327170][ T5200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.331595][ T5191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.332792][ T5191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.337057][ T5191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.350963][ T5200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.358557][ T5200] team0: Port device team_slave_0 added [ 50.363953][ T5202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.366445][ T5202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.372687][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.373903][ T5195] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.375337][ T5195] device bridge_slave_0 entered promiscuous mode [ 50.410108][ T5191] device hsr_slave_0 entered promiscuous mode [ 50.438946][ T5191] device hsr_slave_1 entered promiscuous mode [ 50.488784][ T5191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.490173][ T5191] Cannot create hsr debugfs directory [ 50.491880][ T5200] team0: Port device team_slave_1 added [ 50.499063][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.500230][ T5195] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.501855][ T5195] device bridge_slave_1 entered promiscuous mode [ 50.524528][ T5200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.525836][ T5200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.542813][ T5200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.547393][ T5202] team0: Port device team_slave_0 added [ 50.569135][ T39] tipc: Left network mode [ 50.584391][ T5202] team0: Port device team_slave_1 added [ 50.585947][ T5200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.587123][ T5200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.592834][ T5200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.610350][ T5195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.616403][ T5195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.622040][ T5202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.623266][ T5202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.627606][ T5202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.680046][ T5200] device hsr_slave_0 entered promiscuous mode [ 50.713487][ T5200] device hsr_slave_1 entered promiscuous mode [ 50.758891][ T5200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.760159][ T5200] Cannot create hsr debugfs directory [ 50.765375][ T5195] team0: Port device team_slave_0 added [ 50.784627][ T5202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.785952][ T5202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.790618][ T5202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.985840][ T5195] team0: Port device team_slave_1 added [ 51.018831][ T5195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.020218][ T5195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.031327][ T5195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.066956][ T5235] loop2: detected capacity change from 0 to 262144 [ 51.076148][ T5235] BTRFS: device fsid 7960530b-0b9b-440b-9874-801ddf1f236f devid 1 transid 8 /dev/loop2 scanned by syz.2.307 (5235) [ 51.095461][ T5235] BTRFS info (device loop2): first mount of filesystem 7960530b-0b9b-440b-9874-801ddf1f236f [ 51.097307][ T5235] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 51.103554][ T5235] BTRFS info (device loop2): turning on flush-on-commit [ 51.109880][ T5235] BTRFS info (device loop2): use zlib compression, level 3 [ 51.111190][ T5235] BTRFS info (device loop2): using free space tree [ 51.124764][ T5195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.125991][ T5195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.136693][ T5195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.210968][ T5235] BTRFS info (device loop2): enabling ssd optimizations [ 51.260074][ T5202] device hsr_slave_0 entered promiscuous mode [ 51.279557][ T5202] device hsr_slave_1 entered promiscuous mode [ 51.323221][ T5202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.324665][ T5202] Cannot create hsr debugfs directory [ 51.440324][ T5195] device hsr_slave_0 entered promiscuous mode [ 51.477482][ T4330] BTRFS info (device loop2): last unmount of filesystem 7960530b-0b9b-440b-9874-801ddf1f236f [ 51.489063][ T5195] device hsr_slave_1 entered promiscuous mode [ 51.534726][ T5195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.536085][ T5195] Cannot create hsr debugfs directory [ 51.759246][ T4335] Bluetooth: hci1: command 0x0409 tx timeout [ 51.769630][ T4335] Bluetooth: hci2: command 0x0409 tx timeout [ 51.838921][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 51.918839][ T4335] Bluetooth: hci4: command 0x0409 tx timeout [ 52.100950][ T5191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.201363][ T5191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.350604][ T5200] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.354709][ T5191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.389909][ T5191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.779989][ T5200] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.892204][ T5200] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.240344][ T5200] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.287960][ T39] device hsr_slave_0 left promiscuous mode [ 53.329289][ T39] device hsr_slave_1 left promiscuous mode [ 53.399218][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.400741][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.402921][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.404305][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.407423][ T39] device bridge_slave_1 left promiscuous mode [ 53.409652][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.470078][ T39] device bridge_slave_0 left promiscuous mode [ 53.471346][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.609705][ T39] device veth1_macvtap left promiscuous mode [ 53.610841][ T39] device veth0_macvtap left promiscuous mode [ 53.611935][ T39] device veth1_vlan left promiscuous mode [ 53.612954][ T39] device veth0_vlan left promiscuous mode [ 53.838869][ T4335] Bluetooth: hci2: command 0x041b tx timeout [ 53.838904][ T4346] Bluetooth: hci1: command 0x041b tx timeout [ 53.928840][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 54.008774][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 55.721378][ T39] team0 (unregistering): Port device team_slave_1 removed [ 55.900147][ T39] team0 (unregistering): Port device team_slave_0 removed [ 55.918784][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 55.918889][ T4346] Bluetooth: hci2: command 0x040f tx timeout [ 56.008821][ T4335] Bluetooth: hci3: command 0x040f tx timeout [ 56.059162][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.078839][ T4335] Bluetooth: hci4: command 0x040f tx timeout [ 56.259772][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.759833][ T39] bond0 (unregistering): Released all slaves [ 57.998774][ T4335] Bluetooth: hci2: command 0x0419 tx timeout [ 58.008780][ T4335] Bluetooth: hci1: command 0x0419 tx timeout [ 58.073089][ T5191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.078362][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.079916][ T4335] Bluetooth: hci3: command 0x0419 tx timeout [ 58.081321][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.084265][ T5191] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.086775][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.088587][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.091070][ T1604] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.092258][ T1604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.093673][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.098179][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.100715][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.103576][ T1604] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.104823][ T1604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.108188][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.115082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.117924][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.120862][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.123057][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.125930][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.127636][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.134379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.136067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.139276][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.140917][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.148510][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.158851][ T4346] Bluetooth: hci4: command 0x0419 tx timeout [ 58.206524][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.208036][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.311929][ T5202] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.317783][ T5191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.324233][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.326082][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.332896][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.334511][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.336179][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.337674][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.344183][ T5191] device veth0_vlan entered promiscuous mode [ 58.348338][ T5191] device veth1_vlan entered promiscuous mode [ 58.355074][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.356810][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.358321][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.363486][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.395356][ T5202] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.399513][ T5191] device veth0_macvtap entered promiscuous mode [ 58.401886][ T5191] device veth1_macvtap entered promiscuous mode [ 58.406192][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.408009][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.409902][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.411523][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.413082][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.414683][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.417037][ T5191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.418478][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.420581][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.422181][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.423824][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.426595][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.428333][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.430518][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.432326][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.433977][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.435745][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.438598][ T5191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.441337][ T5191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.442800][ T5191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.444151][ T5191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.445615][ T5191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.481392][ T5202] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.483978][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.485852][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.507066][ T1604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.513812][ T1604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.517964][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.550524][ T5202] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.555897][ T1760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.557254][ T1760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.559178][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.525519][ T5200] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.573529][ T5200] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.819306][ T39] bond1: (slave ip6gretap1): Releasing backup interface [ 59.869597][ T5200] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.909980][ T5200] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.014987][ T5202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.050679][ T5202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.095285][ T5202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.184700][ T5202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.284268][ T5195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.310457][ T5195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.442935][ T5195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.480300][ T5195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.599400][ T5200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.605621][ T5202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.616718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.618322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.621332][ T5200] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.627501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.629922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.631271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.632957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.634467][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.635711][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.681772][ T5202] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.683349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.688921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.690699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.692389][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.693505][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.694934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.702252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.703961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.705519][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.706792][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.708215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.711244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.712831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.714418][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.715595][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.716995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.758385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.760902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.762528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.764090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.765876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.767600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.775455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.777207][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.779564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.781199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.782725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.784256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.785961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.788225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.790516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.797877][ T5195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.802026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.803760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.805372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.806911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.808512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.811904][ T5202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.814195][ T5200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.876076][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.877684][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.886458][ T5195] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.890955][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.892728][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.894267][ T4527] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.895520][ T4527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.897022][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.901986][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.903489][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.905018][ T1760] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.906241][ T1760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.953675][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.956913][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.965795][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.968512][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.970806][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.972863][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.977535][ T5195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.980715][ T5195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.982984][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.984633][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.986299][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.988002][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.990712][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.994700][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.999106][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.000595][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.005474][ T5202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.329366][ T5200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.333300][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.334607][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.335957][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.337592][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.356290][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.357958][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.363515][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.365026][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.367013][ T5202] device veth0_vlan entered promiscuous mode [ 61.409038][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.410666][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.413785][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.415090][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.421255][ T5202] device veth1_vlan entered promiscuous mode [ 61.425365][ T5195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.426865][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.428572][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.431183][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.432949][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.434465][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.437413][ T5200] device veth0_vlan entered promiscuous mode [ 61.451150][ T5200] device veth1_vlan entered promiscuous mode [ 61.731609][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.733282][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.737132][ T5202] device veth0_macvtap entered promiscuous mode [ 61.743309][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.745058][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.746853][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.749813][ T5202] device veth1_macvtap entered promiscuous mode [ 61.765366][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.767245][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.775022][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.777858][ T5200] device veth0_macvtap entered promiscuous mode [ 61.783658][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.785516][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.787086][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.789815][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.791437][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.793126][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.794703][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.796385][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.798995][ T5202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.855952][ T39] device hsr_slave_0 left promiscuous mode [ 61.878983][ T39] device hsr_slave_1 left promiscuous mode [ 61.958786][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.960164][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.961830][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.963085][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.964421][ T39] device bridge_slave_1 left promiscuous mode [ 61.965517][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.999550][ T39] device bridge_slave_0 left promiscuous mode [ 62.000665][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.138840][ T39] device veth1_macvtap left promiscuous mode [ 62.139968][ T39] device veth0_macvtap left promiscuous mode [ 62.141012][ T39] device veth1_vlan left promiscuous mode [ 62.142016][ T39] device veth0_vlan left promiscuous mode [ 62.194686][ T39] bond1 (unregistering): Released all slaves [ 64.314407][ T39] team0 (unregistering): Port device team_slave_1 removed [ 64.481276][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.482501][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.500421][ T39] team0 (unregistering): Port device team_slave_0 removed [ 64.659574][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.869513][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.370295][ T39] bond0 (unregistering): Released all slaves [ 66.661113][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.662918][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.664659][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.667602][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.669443][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.670927][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.672872][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.674542][ T5202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.676225][ T5202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.678579][ T5202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.686326][ T5202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.687875][ T5202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.689996][ T5202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.691513][ T5202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.695055][ T5200] device veth1_macvtap entered promiscuous mode [ 66.696778][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.698505][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.728673][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.730485][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.753633][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.755410][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.757134][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.758685][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.765213][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.766991][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.768503][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.770595][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.773121][ T5200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.787209][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.789231][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.797215][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.799284][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.800718][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.802337][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.803810][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.805391][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.806858][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.808356][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.810940][ T5200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.812099][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.813852][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.826443][ T1604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.827698][ T1604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.832583][ T5200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.833978][ T5200] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.835416][ T5200] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.836794][ T5200] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.839266][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.848442][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.850272][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.852529][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.854171][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.855741][ T5195] device veth0_vlan entered promiscuous mode [ 66.868443][ T1760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.872386][ T5195] device veth1_vlan entered promiscuous mode [ 66.873664][ T1760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.875205][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.878482][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.880847][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.904459][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.906309][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.915102][ T1604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.916539][ T1604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.921400][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.948133][ T5195] device veth0_macvtap entered promiscuous mode [ 66.952120][ T1604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.952976][ T5195] device veth1_macvtap entered promiscuous mode [ 66.953665][ T1604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.956469][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.958101][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.964639][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.971518][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.973244][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.974904][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.976559][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.978187][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.980654][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.982384][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.983998][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.985497][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.987097][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.992214][ T5195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.993681][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.995446][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.998251][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.000817][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.002497][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.004224][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.005773][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.007652][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.009721][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.011570][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.013236][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.014947][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.018143][ T5195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.023366][ T5195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.025282][ T5195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.027424][ T5195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.037352][ T5195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.042904][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.044596][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.095813][ T4530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.097248][ T4530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.108142][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.114238][ T4530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.115676][ T4530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.117103][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.184566][ T5419] loop4: detected capacity change from 0 to 512 [ 67.206223][ T5419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 67.234450][ T5195] EXT4-fs (loop4): unmounting filesystem. [ 67.414375][ T5445] loop2: detected capacity change from 0 to 2048 [ 67.483287][ T5445] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.498392][ T5452] loop0: detected capacity change from 0 to 128 [ 67.502729][ T5452] EXT4-fs: Ignoring removed nobh option [ 67.525830][ T5452] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.586306][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 67.658512][ T5452] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 67.697704][ T5191] EXT4-fs (loop0): unmounting filesystem. [ 68.084809][ T5482] loop2: detected capacity change from 0 to 32768 [ 68.093192][ T5482] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.327 (5482) [ 68.103432][ T5482] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.106517][ T5482] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 68.108297][ T5482] BTRFS info (device loop2): force clearing of disk cache [ 68.110733][ T5482] BTRFS info (device loop2): use zlib compression, level 3 [ 68.112389][ T5482] BTRFS info (device loop2): enabling ssd optimizations [ 68.113713][ T5482] BTRFS info (device loop2): using spread ssd allocation scheme [ 68.115119][ T5482] BTRFS info (device loop2): using free space tree [ 68.136939][ T5495] loop3: detected capacity change from 0 to 512 [ 68.148011][ T5495] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.172657][ T5495] EXT4-fs (loop3): 1 truncate cleaned up [ 68.173874][ T5495] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 68.186979][ T5482] BTRFS info (device loop2): rebuilding free space tree [ 68.225263][ T5482] BTRFS info (device loop2): checking UUID tree [ 68.251448][ T5495] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.328: Invalid inode table block 5 in block_group 0 [ 68.261905][ T5495] EXT4-fs (loop3): Remounting filesystem read-only [ 68.263339][ T5495] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 68.267128][ T5495] EXT4-fs (loop3): Remounting filesystem read-only [ 68.302616][ T4330] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.303437][ T5202] EXT4-fs (loop3): unmounting filesystem. ÿÿÿÿ[ 68.760193][ T5527] loop0: detected capacity change from 0 to 32768 [ 68.770397][ T5527] (syz.0.338,5527,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 68.774494][ T5527] (syz.0.338,5527,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 68.796917][ T5527] JBD2: Ignoring recovery information on journal [ 68.810420][ T5527] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 68.811651][ T5539] Illegal XDP return value 189169724 on prog (id 68) dev syz_tun, expect packet loss! [ 69.615500][ T1516] cfg80211: failed to load regulatory.db [ 69.902831][ T5586] loop1: detected capacity change from 0 to 1024 [ 69.933753][ T5586] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 69.935321][ T5586] System zones: 0-1, 3-36 [ 69.948836][ T5586] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.356: bad orphan inode 134217728 [ 69.955411][ T5586] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.079407][ T5200] EXT4-fs (loop1): unmounting filesystem. [ 70.085621][ T5590] loop2: detected capacity change from 0 to 40427 [ 70.156341][ T5191] ocfs2: Unmounting device (7,0) on (node local) [ 70.163759][ T5590] F2FS-fs (loop2): invalid crc value [ 70.198056][ T5590] F2FS-fs (loop2): Found nat_bits in checkpoint [ 70.268282][ T5590] F2FS-fs (loop2): Start checkpoint disabled! [ 70.302069][ T5590] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 70.360772][ T5590] syz.2.357: attempt to access beyond end of device [ 70.360772][ T5590] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.378226][ T5590] syz.2.357: attempt to access beyond end of device [ 70.378226][ T5590] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 70.383890][ T5590] syz.2.357: attempt to access beyond end of device [ 70.383890][ T5590] loop2: rw=2049, sector=53272, nr_sectors = 8 limit=40427 [ 70.397897][ T5590] syz.2.357: attempt to access beyond end of device [ 70.397897][ T5590] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 70.430653][ T5618] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 70.488942][ T5621] device veth0_virt_wifi entered promiscuous mode [ 70.612517][ T5627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.365'. [ 70.867076][ T5638] 9pnet_fd: Insufficient options for proto=fd [ 70.946873][ T5642] loop2: detected capacity change from 0 to 128 [ 71.132339][ T27] audit: type=1326 audit(71.110:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5648 comm="syz.2.377" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa177b0a8 code=0x7fc00000 [ 71.138814][ T27] audit: type=1326 audit(71.120:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5648 comm="syz.2.377" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa177b0a8 code=0x7fc00000 [ 71.648669][ T5663] Injecting memory failure for pfn 0x1445e8 at process virtual address 0x20001000 [ 71.656159][ T5663] Memory failure: 0x1445e8: keeping poisoned page in swap cache [ 71.658639][ T5663] Memory failure: 0x1445e8: recovery action for clean swapcache page: Recovered [ 71.663811][ T5663] Injecting memory failure for pfn 0x13a148 at process virtual address 0x20002000 [ 71.674157][ T5663] Memory failure: 0x13a148: keeping poisoned page in swap cache [ 71.678483][ T5663] Memory failure: 0x13a148: recovery action for clean swapcache page: Recovered [ 71.688560][ T5663] Injecting memory failure for pfn 0x138548 at process virtual address 0x20003000 [ 71.699758][ T5663] Memory failure: 0x138548: keeping poisoned page in swap cache [ 71.705495][ T5663] Memory failure: 0x138548: recovery action for clean swapcache page: Recovered [ 72.067540][ T5674] device gre1 entered promiscuous mode [ 72.069333][ T5674] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 72.071911][ T5674] bond2: (slave gre1): Error -95 calling set_mac_address [ 72.177647][ T5679] fuse: Bad value for 'fd' [ 72.213306][ T5677] tipc: Started in network mode [ 72.214232][ T5677] tipc: Node identity 1000001, cluster identity 4711 [ 72.215417][ T5677] tipc: Node number set to 16777217 [ 72.257347][ T5677] tipc: Enabled bearer , priority 1 [ 72.277191][ T5676] tipc: Resetting bearer [ 72.350360][ T5676] tipc: Disabling bearer [ 72.379568][ T5690] capability: warning: `syz.2.393' uses 32-bit capabilities (legacy support in use) [ 72.515684][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 72.554686][ T5706] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.400'. [ 72.613697][ T5697] mmap: syz.0.396 (5697) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.927948][ T5738] binder: 5737:5738 tried to acquire reference to desc 0, got 1 instead [ 72.938287][ T5738] binder: 5737:5738 got transaction with fd, 7, but target does not allow fds [ 72.944176][ T5738] binder: 5738:5737 translate fd failed [ 72.945220][ T5738] binder: 5737:5738 transaction async to 5737:0 failed 43/29201/-1, size 80-24 line 3432 [ 72.948506][ T5738] binder: 5737:5738 ioctl c0306201 200001c0 returned -14 [ 72.955740][ T3902] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.125459][ T5757] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 73.185463][ T5762] netlink: 'syz.1.423': attribute type 10 has an invalid length. [ 73.192929][ T5762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.423'. [ 73.194398][ T5762] device dummy0 entered promiscuous mode [ 73.358318][ T5774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.429'. [ 73.366957][ T5774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.429'. [ 73.376349][ T5774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.429'. [ 73.377930][ T5774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.429'. [ 73.388436][ T5774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.429'. [ 73.397419][ T5774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.429'. [ 73.525769][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.916622][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.947555][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.443533][ T5774] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.445132][ T5774] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.446542][ T5774] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.447975][ T5774] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.496816][ T5792] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 74.662025][ T4335] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 74.663836][ T4335] CPU: 1 PID: 4335 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 74.665118][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 74.666905][ T4335] Workqueue: hci3 hci_rx_work [ 74.667782][ T4335] Call trace: [ 74.668358][ T4335] dump_backtrace+0x1c4/0x1f0 [ 74.669181][ T4335] show_stack+0x2c/0x3c [ 74.669887][ T4335] __dump_stack+0x30/0x40 [ 74.670637][ T4335] dump_stack_lvl+0xf4/0x15c [ 74.671441][ T4335] dump_stack+0x1c/0x5c [ 74.672142][ T4335] sysfs_create_dir_ns+0x244/0x264 [ 74.672998][ T4335] kobject_add_internal+0x5a8/0xb18 [ 74.673929][ T4335] kobject_add+0x144/0x20c [ 74.674652][ T4335] device_add+0x3dc/0xe4c [ 74.675404][ T4335] hci_conn_add_sysfs+0xb8/0x1bc [ 74.676255][ T4335] le_conn_complete_evt+0xd3c/0x1300 [ 74.677199][ T4335] hci_le_conn_complete_evt+0x114/0x3b8 [ 74.678165][ T4335] hci_le_meta_evt+0x2c0/0x4a8 [ 74.678927][ T4335] hci_event_packet+0x64c/0xe60 [ 74.679732][ T4335] hci_rx_work+0x320/0xa94 [ 74.680529][ T4335] process_one_work+0x7e4/0x13bc [ 74.681431][ T4335] worker_thread+0x8cc/0xfe8 [ 74.682322][ T4335] kthread+0x254/0x2e0 [ 74.683059][ T4335] ret_from_fork+0x10/0x20 [ 74.685417][ T4335] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 74.687981][ T4335] Bluetooth: hci3: failed to register connection device [ 74.731578][ T5809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 74.740479][ T5812] bond3: (slave ip6erspan0): making interface the new active one [ 74.742963][ T5812] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 74.744888][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 75.041230][ T5833] loop3: detected capacity change from 0 to 128 [ 75.144493][ T5835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.145991][ T5835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.148057][ T5835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.149981][ T5835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.710722][ T5847] tipc: Started in network mode [ 75.711820][ T5847] tipc: Node identity 1000001, cluster identity 4369 [ 75.713086][ T5847] tipc: Node number set to 16777217 [ 75.715037][ T5847] tipc: Cannot configure node identity twice [ 75.720853][ T5847] tipc: New replicast peer: 127.0.0.1 [ 75.722974][ T5847] tipc: Enabled bearer , priority 10 [ 75.827107][ T5855] device geneve1 entered promiscuous mode [ 75.935680][ T5866] loop3: detected capacity change from 0 to 512 [ 75.947750][ T5866] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.955594][ T5866] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.968220][ T5858] loop0: detected capacity change from 0 to 8192 [ 75.998208][ T5866] EXT4-fs (loop3): 1 truncate cleaned up [ 76.001031][ T5851] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.002669][ T5866] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 76.225878][ T5822] Set syz1 is full, maxelem 65536 reached [ 76.253148][ T5202] EXT4-fs (loop3): unmounting filesystem. [ 76.355035][ T5899] binder: 5898:5899 ioctl c0306201 20000080 returned -14 [ 76.360541][ T5899] binder: 5898:5899 tried to acquire reference to desc 0, got 1 instead [ 76.362283][ T5899] binder: 5898:5899 ioctl c0306201 200003c0 returned -14 [ 76.363807][ T5899] binder: 5898:5899 not enough space to store 8 fds in buffer [ 76.365224][ T5899] binder: 5899:5898 translate fd array failed [ 76.366392][ T5899] binder: 5898:5899 transaction call to 5898:0 failed 48/29201/-22, size 112-24 line 3503 [ 76.377858][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.458156][ T5905] loop1: detected capacity change from 0 to 256 [ 76.485512][ T5905] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 76.663155][ T5922] __nla_validate_parse: 153 callbacks suppressed [ 76.663169][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.474'. [ 76.699909][ T5922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.474'. [ 77.028331][ T5929] tipc: Started in network mode [ 77.036986][ T5929] tipc: Node identity 2007ff, cluster identity 4711 [ 77.038198][ T5929] tipc: Node number set to 2099199 [ 77.072375][ T5592] tipc: Subscription rejected, illegal request [ 77.123048][ T5936] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.229701][ T5940] netlink: 'syz.1.481': attribute type 3 has an invalid length. [ 77.231256][ T5940] netlink: 'syz.1.481': attribute type 3 has an invalid length. [ 77.483231][ T5965] loop3: detected capacity change from 0 to 2048 [ 77.503566][ T5965] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 77.553142][ T5971] fuse: Bad value for 'fd' [ 77.556337][ T5965] fs-verity: sha512 using implementation "sha512-ce" [ 77.560880][ T5965] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.490: bg 0: block 345: padding at end of block bitmap is not set [ 77.565394][ T5965] fs-verity (loop3, inode 13): Error -28 writing Merkle tree block 0 [ 77.566771][ T5965] fs-verity (loop3, inode 13): Error -28 building Merkle tree [ 77.586678][ T5202] EXT4-fs (loop3): unmounting filesystem. [ 78.209585][ T4346] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 78.406122][ T5991] loop3: detected capacity change from 0 to 131072 [ 78.428412][ T5991] F2FS-fs (loop3): invalid crc value [ 78.474497][ T5991] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.488372][ T6046] sctp: [Deprecated]: syz.4.522 (pid 6046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.488372][ T6046] Use struct sctp_sack_info instead [ 78.503568][ T5991] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 78.548316][ T6051] xt_hashlimit: size too large, truncated to 1048576 [ 78.551868][ T6049] loop1: detected capacity change from 0 to 1024 [ 78.824682][ T6066] bridge0: port 2(syz_tun) entered blocking state [ 78.832430][ T6066] bridge0: port 2(syz_tun) entered disabled state [ 78.834297][ T6066] device syz_tun entered promiscuous mode [ 78.941633][ T6062] loop1: detected capacity change from 0 to 4096 [ 78.987841][ T6062] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 78.997734][ T6062] fs-verity: sha256 using implementation "sha256-ce" [ 79.030956][ T6062] fs-verity (loop1, inode 16): fs-verity keyring is empty, rejecting signed file! [ 79.170041][ T5200] EXT4-fs (loop1): unmounting filesystem. [ 79.253082][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 79.257660][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.259513][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.359089][ T4346] Bluetooth: hci2: command 0x0406 tx timeout [ 79.481366][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b3bc9c76: rx timeout, send abort [ 79.865151][ T6087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.536'. [ 79.981519][ C1] vcan0: j1939_tp_rxtimer: 0x00000000fd3c88a1: rx timeout, send abort [ 79.983108][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b3bc9c76: abort rx timeout. Force session deactivation [ 80.325233][ T6107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.382149][ T6107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.435896][ T6107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.481130][ C1] vcan0: j1939_tp_rxtimer: 0x000000002aaa63b2: rx timeout, send abort [ 80.482778][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000002aaa63b2: 0x0ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 80.485345][ C1] vcan0: j1939_tp_rxtimer: 0x00000000fd3c88a1: abort rx timeout. Force session deactivation [ 81.124547][ T6169] netlink: 47 bytes leftover after parsing attributes in process `syz.2.563'. [ 81.464064][ T5596] bond0: (slave bond_slave_0): interface is now down [ 81.465534][ T5596] bond0: (slave bond_slave_1): interface is now down [ 81.526912][ T6211] device bridge_slave_0 left promiscuous mode [ 81.528289][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.551243][ T6215] bpf getsockopt: ignoring program buffer with optlen=1869768547 (max_optlen=4096) [ 81.608831][ T4346] Bluetooth: hci3: command 0x0406 tx timeout [ 81.769612][ T6233] binder: 6232:6233 ioctl c0306201 20000080 returned -14 [ 81.772715][ T6231] binder: 6229:6231 tried to acquire reference to desc 0, got 1 instead [ 81.774056][ T6233] binder: 6232:6233 tried to acquire reference to desc 0, got 1 instead [ 81.775956][ T6233] binder: 6232:6233 ioctl c0306201 200003c0 returned -14 [ 81.778106][ T6233] binder: 6232:6233 parent offset not aligned correctly. [ 81.779619][ T6233] binder: 6233:6232 translate fd array failed [ 81.779875][ T6231] binder: 6229:6231 got transaction with unaligned buffers size, 31 [ 81.780748][ T6233] binder: 6232:6233 transaction call to 6232:0 failed 57/29201/-22, size 112-24 line 3503 [ 81.782943][ T6231] binder: 6229:6231 transaction async to 6229:0 failed 58/29201/-22, size 0-0 line 3303 [ 81.788053][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.807674][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.809215][ T6235] netlink: 'syz.1.589': attribute type 1 has an invalid length. [ 81.817141][ T6235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.836824][ T6235] bond1: (slave vlan2): making interface the new active one [ 81.839729][ T6235] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 81.841412][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 81.869603][ T6238] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.592'. [ 81.872460][ T6238] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.592'. [ 82.322856][ T6265] netlink: 'syz.2.602': attribute type 10 has an invalid length. [ 82.348273][ T6265] team0: Port device netdevsim0 added [ 82.407124][ T6274] netlink: 'syz.1.606': attribute type 1 has an invalid length. [ 82.416543][ T6272] sctp: [Deprecated]: syz.2.605 (pid 6272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.416543][ T6272] Use struct sctp_sack_info instead [ 82.434745][ T6274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.439024][ T6272] tc_dump_action: action bad kind [ 82.468034][ T6274] bond2: Error: No native XDP support for the current bonding mode [ 82.613876][ T6284] overlayfs: failed to clone upperpath [ 82.634918][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.611'. [ 82.936471][ T6310] netlink: 'syz.3.620': attribute type 10 has an invalid length. [ 82.946201][ T6310] team0: Port device netdevsim0 added [ 84.400997][ T5594] bond0: (slave bond_slave_0): interface is now down [ 84.403336][ T5594] bond0: (slave bond_slave_1): interface is now down [ 84.406850][ T5594] bond0: now running without any active interface! [ 84.431826][ T5594] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 84.433896][ T5594] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 84.438441][ T5594] bond0: active interface up! [ 84.622313][ T6341] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 84.637965][ T6341] 8021q: adding VLAN 0 to HW filter on device bond4 [ 84.681202][ T6341] bond4: (slave vlan3): Opening slave failed [ 85.254109][ T6410] device bond1 entered promiscuous mode [ 85.434776][ T6428] binder: 6427:6428 tried to acquire reference to desc 0, got 1 instead [ 85.436955][ T6428] binder: 6427:6428 got transaction with invalid offset (24, min 24 max 34) or object. [ 85.438898][ T6428] binder: 6427:6428 transaction call to 6427:0 failed 63/29201/-22, size 34-24 line 3363 [ 85.440880][ T5301] binder: undelivered TRANSACTION_ERROR: 29201 [ 86.122849][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.662'. [ 86.202795][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 86.577702][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.671'. [ 86.599985][ T6494] Bluetooth: MGMT ver 1.22 [ 86.698917][ T6501] netlink: 'syz.3.671': attribute type 1 has an invalid length. [ 86.702673][ T6491] netlink: 'syz.3.671': attribute type 1 has an invalid length. [ 86.771744][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 87.006526][ T6521] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 87.184139][ T6546] fuse: Bad value for 'fd' [ 87.815560][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'. [ 88.069003][ T6583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.695'. [ 89.377437][ T6604] netlink: 168 bytes leftover after parsing attributes in process `syz.2.704'. [ 89.443184][ T6611] loop1: detected capacity change from 0 to 4096 [ 89.563827][ T6611] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 90.110605][ T5200] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 91.529926][ T6684] device bridge1 entered promiscuous mode [ 91.540907][ T6684] bond5: (slave bridge1): making interface the new active one [ 91.542689][ T6684] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 91.544196][ T6685] netlink: 'syz.0.723': attribute type 1 has an invalid length. [ 91.601471][ T6685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.611061][ T6690] bond1: (slave veth3): Enslaving as an active interface with a down link [ 91.635627][ T6692] bond1: (slave dummy0): making interface the new active one [ 91.637607][ T6692] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 91.699790][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 91.708566][ T6697] netlink: 'syz.0.723': attribute type 10 has an invalid length. [ 91.718284][ T6697] netlink: 40 bytes leftover after parsing attributes in process `syz.0.723'. [ 91.721754][ T6697] device dummy0 entered promiscuous mode [ 91.739936][ T6697] bond1: (slave dummy0): Releasing active interface [ 93.355148][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 94.415620][ T6830] netlink: 'syz.1.773': attribute type 1 has an invalid length. [ 94.500681][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 94.508693][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.604220][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 94.608010][ T6852] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.609849][ T6852] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.611212][ T6852] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.612677][ T6852] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.623890][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 94.794440][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.798287][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.590969][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 95.613299][ T6883] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.614999][ T6883] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.616487][ T6883] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.617973][ T6883] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.628081][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 95.647374][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 95.740449][ T6896] netlink: 'syz.4.801': attribute type 1 has an invalid length. [ 96.265869][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'. [ 96.304089][ T6930] device syz_tun left promiscuous mode [ 96.305116][ T6930] bridge0: port 2(syz_tun) entered disabled state [ 96.534600][ T6967] xt_hashlimit: size too large, truncated to 1048576 [ 98.412644][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 98.586044][ T7011] loop0: detected capacity change from 0 to 512 [ 98.598429][ T7011] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.607542][ T7011] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 98.611054][ T7011] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 98.612998][ T7011] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 98.615510][ T7011] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 98.616935][ T7011] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 98.620864][ T7011] EXT4-fs (loop0): orphan cleanup on readonly fs [ 98.627245][ T7011] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.842: bg 0: block 34: padding at end of block bitmap is not set [ 98.633197][ T7011] Quota error (device loop0): write_blk: dquota write failed [ 98.634706][ T7011] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 98.636414][ T7011] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.842: Failed to acquire dquot type 1 [ 98.645420][ T7011] EXT4-fs (loop0): 1 truncate cleaned up [ 98.647854][ T7011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.684982][ T5191] EXT4-fs (loop0): unmounting filesystem. [ 99.474281][ T4335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.476992][ T4335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.488215][ T4335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.491189][ T4335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.492740][ T4335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.495555][ T4335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.568668][ T7036] device gretap0 entered promiscuous mode [ 99.571524][ T7036] device vlan2 entered promiscuous mode [ 99.724035][ T4521] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.727283][ T7046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.855'. [ 99.820087][ T4521] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.913268][ T4521] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.945212][ T7033] chnl_net:caif_netlink_parms(): no params data found [ 100.004051][ T4521] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.033408][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.036759][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.038451][ T7033] device bridge_slave_0 entered promiscuous mode [ 100.043525][ T7033] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.044844][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.046526][ T7033] device bridge_slave_1 entered promiscuous mode [ 100.061558][ T7033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.064606][ T7033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.080324][ T7033] team0: Port device team_slave_0 added [ 100.082408][ T7033] team0: Port device team_slave_1 added [ 100.088363][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.090234][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.094880][ T7033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.097550][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.099448][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.106192][ T7033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.147029][ T7068] netlink: 16158 bytes leftover after parsing attributes in process `syz.4.861'. [ 100.160169][ T7033] device hsr_slave_0 entered promiscuous mode [ 100.208977][ T7033] device hsr_slave_1 entered promiscuous mode [ 100.272563][ T4521] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.308019][ T4521] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.313144][ T4521] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.334286][ T4521] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.368938][ T4521] tipc: Disabling bearer [ 100.372360][ T4521] tipc: Left network mode [ 100.451619][ T7033] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.490294][ T7033] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.712836][ T7094] device veth0_macvtap left promiscuous mode [ 100.896248][ T7122] overlayfs: failed to clone upperpath [ 100.927050][ T7033] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.013202][ T7113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.874'. [ 101.018536][ T7033] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.160756][ T7033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.166209][ T7033] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.182743][ T7033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.194278][ T7033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.201364][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.203037][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.204613][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.206281][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.207882][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.209219][ T5597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.211041][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.212716][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.214325][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.215593][ T5597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.217044][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.219149][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.221129][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.222964][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.224635][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.226440][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.228083][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.230400][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.232408][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.243314][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.310630][ T7137] netlink: 'syz.2.883': attribute type 1 has an invalid length. [ 101.322396][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.324103][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.325741][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.440853][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 101.445448][ T7137] bond6 (unregistering): Released all slaves [ 101.519665][ T4335] Bluetooth: hci1: command 0x0409 tx timeout [ 101.534587][ T7033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.536481][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.537808][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.890856][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.892709][ T1604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.905852][ T7033] device veth0_vlan entered promiscuous mode [ 101.912764][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.914516][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.929038][ T7033] device veth1_vlan entered promiscuous mode [ 101.934087][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.935697][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.938295][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.063288][ T7174] team0 (unregistering): Port device team_slave_0 removed [ 102.070816][ T7174] team0 (unregistering): Failed to send options change via netlink (err -105) [ 102.072476][ T7174] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 102.075228][ T7174] team0 (unregistering): Port device team_slave_1 removed [ 102.421292][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.424712][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.426696][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.434516][ T7033] device veth0_macvtap entered promiscuous mode [ 102.437285][ T7033] device veth1_macvtap entered promiscuous mode [ 102.446299][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.448555][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.453280][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.456833][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.469978][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.472693][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.475777][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.483417][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.492392][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.497208][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.502960][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.504752][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.566583][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.568404][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.572665][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.575552][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.578079][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.580219][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.582061][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.584001][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.586917][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.592680][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.594436][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.903633][ T7033] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.905129][ T7033] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.906667][ T7033] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.908051][ T7033] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.026218][ T4521] device hsr_slave_0 left promiscuous mode [ 103.052370][ T4521] device hsr_slave_1 left promiscuous mode [ 103.109403][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.110796][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.112359][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.113783][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.115444][ T4521] device bridge_slave_1 left promiscuous mode [ 103.116738][ T4521] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.153235][ T4521] device bridge_slave_0 left promiscuous mode [ 103.154462][ T4521] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.258921][ T4521] device veth1_macvtap left promiscuous mode [ 103.260146][ T4521] device veth0_macvtap left promiscuous mode [ 103.261141][ T4521] device veth1_vlan left promiscuous mode [ 103.262233][ T4521] device veth0_vlan left promiscuous mode [ 103.429442][ T4521] bond1 (unregistering): (slave veth3): Releasing active interface [ 103.598816][ T4335] Bluetooth: hci1: command 0x041b tx timeout [ 104.130277][ T4521] bond1 (unregistering): Released all slaves [ 105.678765][ T4346] Bluetooth: hci1: command 0x040f tx timeout [ 106.172664][ T4521] team0 (unregistering): Port device team_slave_1 removed [ 106.340822][ T4521] team0 (unregistering): Port device team_slave_0 removed [ 106.499562][ T4521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.699255][ T4521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.768757][ T4346] Bluetooth: hci1: command 0x0419 tx timeout [ 108.039805][ T4521] bond0 (unregistering): Released all slaves [ 108.355775][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 108.380509][ T7267] device bond0 entered promiscuous mode [ 108.381592][ T7267] device bond_slave_0 entered promiscuous mode [ 108.382748][ T7267] device bond_slave_1 entered promiscuous mode [ 108.410268][ T7267] device batadv0 entered promiscuous mode [ 108.449358][ T7267] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 108.452205][ T7274] netlink: 14 bytes leftover after parsing attributes in process `syz.1.900'. [ 108.630156][ T7274] bond1: (slave vlan2): Releasing active interface [ 108.671437][ T7274] device bond0 left promiscuous mode [ 108.672412][ T7274] device bond_slave_0 left promiscuous mode [ 108.673504][ T7274] device bond_slave_1 left promiscuous mode [ 108.730617][ T7274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.774996][ T7274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.820674][ T7274] bond0 (unregistering): Released all slaves [ 108.825599][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 108.932117][ T5595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.933476][ T5595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.934727][ T5595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.952102][ T5597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.953688][ T5597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.955043][ T5597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.597027][ T7372] device gretap0 entered promiscuous mode [ 109.598082][ T7372] device vlan2 entered promiscuous mode [ 109.837809][ T3995] device veth0_macvtap entered promiscuous mode [ 109.952956][ T7394] device syzkaller0 entered promiscuous mode [ 110.630615][ T7450] team0 (unregistering): Port device team_slave_0 removed [ 110.636675][ T7450] team0 (unregistering): Failed to send options change via netlink (err -105) [ 110.642959][ T7450] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 110.645094][ T7450] team0 (unregistering): Port device team_slave_1 removed [ 110.654433][ T7450] team0 (unregistering): Failed to send options change via netlink (err -105) [ 110.656213][ T7450] team0 (unregistering): Failed to send port change of device netdevsim0 via netlink (err -105) [ 110.659163][ T7450] team0 (unregistering): Port device netdevsim0 removed [ 110.793048][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 111.471373][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.944'. [ 112.147819][ T7550] syz.4.953 sent an empty control message without MSG_MORE. [ 112.237672][ T7544] team0 (unregistering): Port device team_slave_0 removed [ 112.254221][ T7544] team0 (unregistering): Failed to send options change via netlink (err -105) [ 112.263601][ T7544] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 112.269643][ T7544] team0 (unregistering): Port device team_slave_1 removed [ 113.016791][ T7585] loop5: detected capacity change from 0 to 128 [ 113.057744][ T7585] EXT4-fs (loop5): Test dummy encryption mode enabled [ 113.092270][ T7585] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 113.210252][ T7033] EXT4-fs (loop5): unmounting filesystem. [ 114.277289][ T7648] xt_hashlimit: size too large, truncated to 1048576 [ 114.698278][ T7650] kernel profiling enabled (shift: 63) [ 114.698324][ T7650] profiling shift: 63 too large [ 114.731505][ T7659] netlink: 'syz.4.976': attribute type 10 has an invalid length. [ 114.964122][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.977'. [ 115.729643][ T7687] netlink: 'syz.4.986': attribute type 10 has an invalid length. [ 115.731594][ T7687] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.732897][ T7687] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.752391][ T7687] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.753808][ T7687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.755139][ T7687] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.756480][ T7687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.762062][ T7687] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 116.934169][ T7725] device syzkaller0 entered promiscuous mode [ 117.057063][ T7732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.060298][ T7732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.107610][ T7734] netlink: 'syz.3.1004': attribute type 10 has an invalid length. [ 117.147679][ T7738] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.1005'. [ 117.499296][ T7744] team0 (unregistering): Port device team_slave_0 removed [ 117.504932][ T7744] team0 (unregistering): Failed to send options change via netlink (err -105) [ 117.506526][ T7744] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 117.515447][ T7744] team0 (unregistering): Port device team_slave_1 removed [ 117.542456][ T7744] team0 (unregistering): Failed to send options change via netlink (err -105) [ 117.552366][ T7744] team0 (unregistering): Failed to send port change of device netdevsim0 via netlink (err -105) [ 117.564410][ T7744] team0 (unregistering): Port device netdevsim0 removed [ 117.763185][ T4378] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.898300][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1019'. [ 119.087776][ T7819] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 119.094412][ T7819] team0: Port device team_slave_0 removed [ 119.208303][ T7841] netlink: 'syz.5.1027': attribute type 10 has an invalid length. [ 119.212365][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.213768][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.225461][ T7841] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.226730][ T7841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.228097][ T7841] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.229356][ T7841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.231733][ T7841] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 119.325904][ T7845] device syzkaller0 entered promiscuous mode [ 121.678785][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.930733][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.931944][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.118811][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.419072][ T7864] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.420556][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1033'. [ 130.422177][ T7866] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 130.483409][ T7883] loop5: detected capacity change from 0 to 1024 [ 130.503027][ T7878] device vlan2 entered promiscuous mode [ 130.582981][ T7883] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 130.657431][ T7883] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Out of memory [ 130.678370][ T7883] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #15: comm syz.5.1040: mark_inode_dirty error [ 130.691404][ T7883] EXT4-fs error (device loop5): ext4_get_max_inline_size:116: inode #15: comm syz.5.1040: can't get inode location 15 [ 130.723333][ T7033] EXT4-fs (loop5): unmounting filesystem. [ 130.792875][ T7920] 9pnet: p9_errstr2errno: server reported unknown error 00000000,group_id [ 130.931082][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 131.244218][ T7944] netlink: 'syz.5.1051': attribute type 10 has an invalid length. [ 131.273429][ T7944] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 131.434858][ T7953] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.1054'. [ 131.673291][ T7976] tipc: Failed to remove unknown binding: 66,0,0/0:1770482825/1770482827 [ 131.675176][ T7976] tipc: Failed to remove unknown binding: 66,0,0/0:1770482825/1770482826 [ 131.677510][ T7976] tipc: Failed to remove unknown binding: 66,0,0/0:1770482825/1770482827 [ 131.692184][ T7976] tipc: Failed to remove unknown binding: 66,0,0/0:1770482825/1770482826 [ 133.321817][ T8027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1075'. [ 133.994632][ T8052] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1079'. [ 134.046187][ T8080] loop1: detected capacity change from 0 to 256 [ 134.060622][ T8080] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 134.102321][ T8081] netlink: 'syz.3.1083': attribute type 4 has an invalid length. [ 134.159421][ T8076] netlink: 'syz.3.1083': attribute type 4 has an invalid length. [ 134.346730][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 134.393774][ T8095] ªªªªª»: renamed from veth0_vlan [ 134.426715][ T8108] netlink: 'syz.4.1089': attribute type 1 has an invalid length. [ 134.467788][ T8111] netlink: 'syz.5.1091': attribute type 39 has an invalid length. [ 134.687366][ T8124] device bridge1 entered promiscuous mode [ 134.704338][ T8124] bond2: (slave bridge1): making interface the new active one [ 134.711928][ T8124] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 135.043259][ T8161] loop5: detected capacity change from 0 to 512 [ 135.101753][ T8165] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 135.136991][ T8161] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 135.192260][ T8172] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 135.211331][ T7033] EXT4-fs (loop5): unmounting filesystem. [ 135.474401][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 135.551943][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.590428][ T8213] bond0: (slave bond_slave_0): Releasing backup interface [ 135.630103][ T8213] bond0: (slave bond_slave_1): Releasing backup interface [ 135.670388][ T8213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.672153][ T8213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.674161][ T8213] bond1: (slave geneve2): Releasing active interface [ 135.710756][ T8213] bond3: (slave ip6erspan0): Releasing active interface [ 135.751698][ T8213] bond5: (slave bridge1): Releasing active interface [ 135.790938][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 136.673546][ T8267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1124'. [ 137.254265][ T8220] Set syz1 is full, maxelem 65536 reached [ 138.927703][ T27] audit: type=1326 audit(394.961:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.3.1144" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0f7b0a8 code=0x0 [ 138.968354][ T8333] tipc: Failed to remove unknown binding: 66,0,0/0:1275774926/1275774928 [ 138.983419][ T8333] tipc: Failed to remove unknown binding: 66,0,0/0:1275774926/1275774927 [ 138.985753][ T8333] tipc: Failed to remove unknown binding: 66,0,0/0:1275774926/1275774928 [ 138.987555][ T8333] tipc: Failed to remove unknown binding: 66,0,0/0:1275774926/1275774927 [ 140.582293][ T8361] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1155'. [ 140.632641][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1156'. [ 140.748698][ C0] sched: RT throttling activated [ 140.774527][ T8374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1159'. [ 141.341370][ T8397] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1168'. [ 141.343243][ T8397] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1168'. [ 141.471036][ T8400] netlink: 'syz.3.1169': attribute type 1 has an invalid length. [ 141.476114][ T8400] device bond1 entered promiscuous mode [ 141.477164][ T8400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.495892][ T8400] bond1: (slave bridge2): making interface the new active one [ 141.497047][ T8400] device bridge2 entered promiscuous mode [ 141.498687][ T8400] device bridge2 left promiscuous mode [ 141.654967][ T4335] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 141.656673][ T4335] CPU: 1 PID: 4335 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 141.657837][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 141.659467][ T4335] Workqueue: hci2 hci_rx_work [ 141.660253][ T4335] Call trace: [ 141.660806][ T4335] dump_backtrace+0x1c4/0x1f0 [ 141.661659][ T4335] show_stack+0x2c/0x3c [ 141.662375][ T4335] __dump_stack+0x30/0x40 [ 141.663141][ T4335] dump_stack_lvl+0xf4/0x15c [ 141.663906][ T4335] dump_stack+0x1c/0x5c [ 141.664593][ T4335] sysfs_create_dir_ns+0x244/0x264 [ 141.665464][ T4335] kobject_add_internal+0x5a8/0xb18 [ 141.666316][ T4335] kobject_add+0x144/0x20c [ 141.667124][ T4335] device_add+0x3dc/0xe4c [ 141.667884][ T4335] hci_conn_add_sysfs+0xb8/0x1bc [ 141.668733][ T4335] le_conn_complete_evt+0xd3c/0x1300 [ 141.669650][ T4335] hci_le_conn_complete_evt+0x114/0x3b8 [ 141.670608][ T4335] hci_le_meta_evt+0x2c0/0x4a8 [ 141.671390][ T4335] hci_event_packet+0x64c/0xe60 [ 141.672235][ T4335] hci_rx_work+0x320/0xa94 [ 141.672989][ T4335] process_one_work+0x7e4/0x13bc [ 141.673788][ T4335] worker_thread+0x8cc/0xfe8 [ 141.674661][ T4335] kthread+0x254/0x2e0 [ 141.675340][ T4335] ret_from_fork+0x10/0x20 [ 141.677519][ T4335] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 141.680230][ T4335] Bluetooth: hci2: failed to register connection device [ 141.713322][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 141.781268][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1173'. [ 141.873111][ T8408] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 141.893330][ T8408] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1173'. [ 141.895196][ T8408] device bond0 entered promiscuous mode [ 141.896050][ T8408] device bridge1 entered promiscuous mode [ 141.904180][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.144808][ T8436] netlink: 'syz.5.1179': attribute type 1 has an invalid length. [ 142.173177][ T8436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.307772][ T8436] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 142.322716][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 142.378412][ T8450] tipc: Failed to remove unknown binding: 66,0,0/0:614868550/614868552 [ 142.386727][ T8450] tipc: Failed to remove unknown binding: 66,0,0/0:614868550/614868551 [ 142.398086][ T8450] tipc: Failed to remove unknown binding: 66,0,0/0:614868550/614868552 [ 142.408960][ T8450] tipc: Failed to remove unknown binding: 66,0,0/0:614868550/614868551 [ 142.447981][ T8451] loop1: detected capacity change from 0 to 16 [ 142.460095][ T8451] erofs: (device loop1): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 142.659241][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1191'. [ 142.686689][ T8464] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.689502][ T8464] bond2: (slave bond3): Enslaving as an active interface with an up link [ 142.732006][ T8467] bond2 (unregistering): (slave bond3): Releasing backup interface [ 142.827326][ T8467] bond2 (unregistering): Released all slaves [ 143.134535][ T8503] netlink: 'syz.1.1208': attribute type 10 has an invalid length. [ 143.459148][ T4426] bond0: (slave bridge1): interface is now down [ 143.463353][ T4426] bond0: now running without any active interface! [ 143.476863][ T8509] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 143.480504][ T8509] batman_adv: batadv0: Adding interface: gretap1 [ 143.483733][ T8509] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.488553][ T8509] batman_adv: batadv0: Interface activated: gretap1 [ 144.478809][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.018617][ T8587] Bluetooth: (null): Invalid header checksum [ 145.040238][ T4346] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 145.042475][ T4346] Bluetooth: hci2: Injecting HCI hardware error event [ 145.045204][ T4335] Bluetooth: hci2: hardware error 0x00 [ 146.020076][ T8614] device syzkaller0 entered promiscuous mode [ 147.045033][ T112] libceph: connect (1)[c::]:6789 error -22 [ 147.046917][ T112] libceph: mon0 (1)[c::]:6789 connect error [ 147.068675][ T112] libceph: connect (1)[c::]:6789 error -22 [ 147.068860][ T112] libceph: mon0 (1)[c::]:6789 connect error [ 147.287979][ T4335] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 148.126200][ T8634] ceph: No mds server is up or the cluster is laggy [ 148.456647][ T112] libceph: connect (1)[c::]:6789 error -22 [ 148.472517][ T112] libceph: mon0 (1)[c::]:6789 connect error [ 149.567468][ T8670] loop5: detected capacity change from 0 to 1024 [ 149.589327][ T8670] EXT4-fs: Ignoring removed oldalloc option [ 149.590631][ T8670] EXT4-fs: Ignoring removed bh option [ 149.664309][ T8670] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 149.666247][ T8670] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.704256][ T7033] EXT4-fs (loop5): unmounting filesystem. [ 150.734883][ T8682] loop1: detected capacity change from 0 to 256 [ 150.743919][ T8682] exfat: Bad value for 'uid' [ 150.837710][ T7887] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 150.898036][ T8692] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1275'. [ 151.332027][ T4346] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.335191][ T4346] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.337475][ T4346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.342234][ T4346] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.343870][ T4346] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.345259][ T4346] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.893320][ T8721] chnl_net:caif_netlink_parms(): no params data found [ 151.932906][ T8721] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.934483][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.936447][ T8721] device bridge_slave_0 entered promiscuous mode [ 151.952034][ T8721] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.953432][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.955251][ T8721] device bridge_slave_1 entered promiscuous mode [ 151.964626][ T8721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.967783][ T8721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.989486][ T8721] team0: Port device team_slave_0 added [ 151.991840][ T8721] team0: Port device team_slave_1 added [ 152.000246][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.001763][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.006384][ T8721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.009229][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.010521][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.015120][ T8721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.152528][ T4346] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 153.154359][ T4346] CPU: 1 PID: 4346 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 153.155456][ T4346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 153.157079][ T4346] Workqueue: hci1 hci_rx_work [ 153.157840][ T4346] Call trace: [ 153.158317][ T4346] dump_backtrace+0x1c4/0x1f0 [ 153.159067][ T4346] show_stack+0x2c/0x3c [ 153.159785][ T4346] __dump_stack+0x30/0x40 [ 153.160533][ T4346] dump_stack_lvl+0xf4/0x15c [ 153.161338][ T4346] dump_stack+0x1c/0x5c [ 153.162072][ T4346] sysfs_create_dir_ns+0x244/0x264 [ 153.162913][ T4346] kobject_add_internal+0x5a8/0xb18 [ 153.163799][ T4346] kobject_add+0x144/0x20c [ 153.164622][ T4346] device_add+0x3dc/0xe4c [ 153.165343][ T4346] hci_conn_add_sysfs+0xb8/0x1bc [ 153.166153][ T4346] le_conn_complete_evt+0xd3c/0x1300 [ 153.167044][ T4346] hci_le_conn_complete_evt+0x114/0x3b8 [ 153.167992][ T4346] hci_le_meta_evt+0x2c0/0x4a8 [ 153.168779][ T4346] hci_event_packet+0x64c/0xe60 [ 153.169553][ T4346] hci_rx_work+0x320/0xa94 [ 153.170245][ T4346] process_one_work+0x7e4/0x13bc [ 153.171073][ T4346] worker_thread+0x8cc/0xfe8 [ 153.171851][ T4346] kthread+0x254/0x2e0 [ 153.172505][ T4346] ret_from_fork+0x10/0x20 [ 153.177476][ T4346] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 153.181292][ T4346] Bluetooth: hci1: failed to register connection device [ 153.383065][ T4346] Bluetooth: hci0: command 0x0409 tx timeout [ 153.411792][ T8721] device hsr_slave_0 entered promiscuous mode [ 153.811126][ T8721] device hsr_slave_1 entered promiscuous mode [ 154.088782][ T8721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.091377][ T8721] Cannot create hsr debugfs directory [ 154.092927][ T8753] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1295'. [ 154.237694][ T8758] device gretap2 entered promiscuous mode [ 154.454319][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1303'. [ 154.457747][ T8781] device vlan0 entered promiscuous mode [ 154.464849][ T8781] device bridge0 entered promiscuous mode [ 154.794440][ T8791] device bond_slave_0 entered promiscuous mode [ 154.795886][ T8791] device bond_slave_1 entered promiscuous mode [ 154.796934][ T8791] device bridge0 entered promiscuous mode [ 154.799948][ T8791] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.804193][ T8791] bond3: (slave macvlan2): making interface the new active one [ 154.806880][ T8791] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 154.850891][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1309'. [ 155.292003][ T8805] device bond3 entered promiscuous mode [ 155.341204][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'. [ 155.343339][ T8810] netlink: 'syz.3.1312': attribute type 1 has an invalid length. [ 155.351836][ T8810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.438865][ T4346] Bluetooth: hci0: command 0x041b tx timeout [ 155.474230][ T8810] bond2: (slave geneve2): making interface the new active one [ 155.477958][ T8810] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 155.480078][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 155.602441][ T8721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 156.261732][ T8721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 156.300343][ T8721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 156.340817][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 156.343180][ T8721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 156.469760][ T8721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.203860][ T4426] device hsr_slave_0 left promiscuous mode [ 157.226586][ T4426] device hsr_slave_1 left promiscuous mode [ 157.308811][ T4426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.310288][ T4426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.312526][ T4426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.314067][ T4426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.315706][ T4426] device bridge_slave_1 left promiscuous mode [ 157.317018][ T4426] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.349455][ T4426] device bridge_slave_0 left promiscuous mode [ 157.350709][ T4426] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.479727][ T4426] device veth1_macvtap left promiscuous mode [ 157.481974][ T4426] device veth0_macvtap left promiscuous mode [ 157.485369][ T4426] device veth1_vlan left promiscuous mode [ 157.488668][ T4426] device veth0_vlan left promiscuous mode [ 157.548774][ T4335] Bluetooth: hci0: command 0x040f tx timeout [ 159.598775][ T4346] Bluetooth: hci0: command 0x0419 tx timeout [ 159.881498][ T4426] team0 (unregistering): Port device team_slave_1 removed [ 160.060638][ T4426] team0 (unregistering): Port device team_slave_0 removed [ 160.219829][ T4426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.422248][ T4426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.949830][ T4426] bond0 (unregistering): Released all slaves [ 162.243175][ T8721] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.248526][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.250209][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.251669][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.253282][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.254851][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.256021][ T5593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.257386][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.259100][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.260761][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.261931][ T5593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.264962][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1334'. [ 162.267799][ T8884] device vlan2 entered promiscuous mode [ 162.268820][ T8884] device bridge0 entered promiscuous mode [ 162.271152][ T8896] netlink: 'syz.4.1337': attribute type 1 has an invalid length. [ 162.296467][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.298472][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.364339][ T8721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.366145][ T8721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.373696][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.375540][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.400013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.401961][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.403945][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.406067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.407642][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.410063][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.411607][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.810317][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.816451][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.987789][ T8918] overlayfs: workdir and upperdir must reside under the same mount [ 163.994040][ T8721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.021262][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.023318][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.065798][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.067613][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.071300][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.072955][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.085285][ T8721] device veth0_vlan entered promiscuous mode [ 164.919847][ T8721] device veth1_vlan entered promiscuous mode [ 164.930146][ T8721] device veth0_macvtap entered promiscuous mode [ 164.939018][ T8721] device veth1_macvtap entered promiscuous mode [ 164.948281][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.953626][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.955261][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.956945][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.958530][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.975301][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.993319][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.996008][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.997832][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.005288][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.007155][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.015419][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.017253][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.025336][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.028233][ T8721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.035129][ T8721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.036637][ T8721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.048392][ T8721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.090982][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1346'. [ 165.167319][ T8933] binder: 8930:8933 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 165.188652][ T8933] binder: 8930:8933 got transaction to invalid handle, 1 [ 165.196968][ T8937] Injecting memory failure for pfn 0x13718d at process virtual address 0x20001000 [ 165.200849][ T8933] binder: 8933:8930 cannot find target node [ 165.201785][ T8933] binder: 8930:8933 transaction call to 0:0 failed 66/29201/-22, size 72-24 line 3062 [ 165.204967][ T8937] Memory failure: 0x13718d: recovery action for clean unevictable LRU page: Recovered [ 165.206720][ T8937] Injecting memory failure for pfn 0x13e09d at process virtual address 0x20002000 [ 165.213117][ T5301] binder: undelivered TRANSACTION_ERROR: 29201 [ 165.219505][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.221564][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.223102][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.224723][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.226152][ T8937] Memory failure: 0x13e09d: recovery action for clean unevictable LRU page: Recovered [ 165.227835][ T8937] Injecting memory failure for pfn 0x11cfb7 at process virtual address 0x20003000 [ 165.228410][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.232278][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.232359][ T8937] Memory failure: 0x11cfb7: recovery action for clean unevictable LRU page: Recovered [ 165.235993][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.239675][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.242447][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.246307][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.250335][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.263075][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.311321][ T5596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.312866][ T5596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.314367][ T5596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.335570][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.336815][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.338043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.401493][ T8940] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5195] was attempted by " [ 165.612330][ T8955] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 165.628843][ T8955] Mem abort info: [ 165.629425][ T8955] ESR = 0x0000000086000006 [ 165.630153][ T8955] EC = 0x21: IABT (current EL), IL = 32 bits [ 165.631058][ T8955] SET = 0, FnV = 0 [ 165.631692][ T8955] EA = 0, S1PTW = 0 [ 165.632345][ T8955] FSC = 0x06: level 2 translation fault [ 165.633246][ T8955] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000125bf6000 [ 165.634368][ T8955] [0000000000000000] pgd=080000011eeb9003, p4d=080000011eeb9003, pud=080000011db15003, pmd=0000000000000000 [ 165.636330][ T8955] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 165.637447][ T8955] Modules linked in: [ 165.638096][ T8955] CPU: 1 PID: 8955 Comm: syz.5.1355 Not tainted syzkaller #0 [ 165.639308][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 165.641027][ T8955] pstate: 82400805 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=-c) [ 165.642405][ T8955] pc : 0x0 [ 165.642908][ T8955] lr : bond_xdp_xmit+0x284/0x480 [ 165.643728][ T8955] sp : ffff800021127220 [ 165.644430][ T8955] x29: ffff8000211272e0 x28: ffff800021127248 x27: dfff800000000000 [ 165.645720][ T8955] x26: ffff700004224e50 x25: ffff800013cf60b8 x24: ffff0000db88c000 [ 165.647020][ T8955] x23: fffffbffeffb2450 x22: ffff0000df83c000 x21: fffffbffeffb2450 [ 165.648376][ T8955] x20: 0000000000000001 x19: 0000000000000000 x18: 0000000000000000 [ 165.649687][ T8955] x17: 0000000000000000 x16: ffff8000082dbd3c x15: 0000000000000002 [ 165.650990][ T8955] x14: 0000000000000001 x13: 0000000000ff0100 x12: 0000000000080000 [ 165.652254][ T8955] x11: 0000000000002d1b x10: ffff80002ac10000 x9 : ffff800021127280 [ 165.653561][ T8955] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 165.654874][ T8955] x5 : 0000000000000000 x4 : 0000000000000008 x3 : 0000000000000001 [ 165.656163][ T8955] x2 : ffff8000211272a0 x1 : 0000000000000001 x0 : ffff0000db88c000 [ 165.657483][ T8955] Call trace: [ 165.658036][ T8955] 0x0 [ 165.658480][ T8955] bq_xmit_all+0xb0c/0xf8c [ 165.659240][ T8955] __dev_flush+0xc4/0x18c [ 165.659951][ T8955] xdp_do_flush+0x14/0x28 [ 165.660657][ T8955] bpf_test_run_xdp_live+0x11b0/0x1610 [ 165.661607][ T8955] bpf_prog_test_run_xdp+0x618/0xd10 [ 165.662621][ T8955] bpf_prog_test_run+0x2dc/0x36c [ 165.663511][ T8955] __sys_bpf+0x504/0x660 [ 165.664257][ T8955] __arm64_sys_bpf+0x80/0x98 [ 165.665064][ T8955] invoke_syscall+0x98/0x290 [ 165.665878][ T8955] el0_svc_common+0x13c/0x258 [ 165.666686][ T8955] do_el0_svc+0x5c/0x134 [ 165.667419][ T8955] el0_svc+0x58/0x128 [ 165.668109][ T8955] el0t_64_sync_handler+0x84/0xf0 [ 165.668999][ T8955] el0t_64_sync+0x18c/0x190 [ 165.669762][ T8955] Code: bad PC value [ 165.670388][ T8955] ---[ end trace 0000000000000000 ]--- [ 165.961273][ T8955] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 165.962581][ T8955] SMP: stopping secondary CPUs [ 165.963367][ T8955] Kernel Offset: disabled [ 165.964074][ T8955] CPU features: 0x0a0000,000f0097,a65bfea7 [ 165.965012][ T8955] Memory Limit: none [ 166.254107][ T8955] Rebooting in 86400 seconds..