last executing test programs: 22.611271424s ago: executing program 1 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x3, 0x3, 0x801, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4881}, 0x4024000) 22.425453609s ago: executing program 1 (id=146): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mysys/module/xhci_hcd/parameters/quirks\x00', 0x0, 0x0) read(r0, &(0x7f0000000600), 0x40) 22.218600535s ago: executing program 1 (id=150): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000800)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9cd699b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 22.044102679s ago: executing program 1 (id=154): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) 21.747841896s ago: executing program 1 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) fcntl$addseals(r2, 0x409, 0x3) close(0x3) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000140)='log\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f00000001c0), 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="780000000006000000000000141a000002000010240001801400018008000100e00000019c498a8ae000e1f4eaa5cf648b310100000000002400028014000180082b8e5ba435778f8aea033604b1000100ac80050001000000000008000740000000011400000000008287cf4c502e74c3cb6a035068b0650002000000030000000800000006c46e1e8747043abfd806a91ad9e6193a9f572613b310d7b34b54986975d0f72d5796c5960b2a5f1760d78b879869d51a3cab0cf9e391305d3a6ce3b463f80f3de884a0cb5c94dd7dd2a057549604c243e88a6b9d125620f0e1d1c81becc4a4748307e66ec7471e741ca7410be5496c60b27c4b9bb1cf545487bb2007f754d509b888cc94a60b643288b8dff74b7c8e8da9da6cd37ab84b54585ef4bb782841b72a971264ff2d24b254c99d3cec0a98bbf45512b49ff0c1dc36e9"], 0x78}, 0x1, 0x0, 0x0, 0xc011}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 21.282500788s ago: executing program 1 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=t']) bpf$PROG_LOAD(0x5, 0x0, 0x0) 20.86072163s ago: executing program 32 (id=168): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=t']) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.990496462s ago: executing program 0 (id=295): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x64, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 2.763148028s ago: executing program 0 (id=298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031612d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.663803771s ago: executing program 2 (id=299): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x210000, &(0x7f00000000c0), 0x3, 0x594, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x65) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x84fed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x202, 0x20) 2.589020403s ago: executing program 3 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100', 0x3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) socket(0x2b, 0x1, 0x0) 1.790029244s ago: executing program 4 (id=301): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x20000022, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x3, r1, 0x0}]) 1.696239856s ago: executing program 2 (id=302): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be171", 0x1c) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/81, 0x51}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8810) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000002300)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x20041000) 1.52050698s ago: executing program 0 (id=303): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503001800"], 0x78}, 0x1, 0x7}, 0x0) 1.481585772s ago: executing program 2 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020303000000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x3, 0x3, 0x801, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4881}, 0x4024000) 1.427914463s ago: executing program 4 (id=305): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.397805754s ago: executing program 3 (id=306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 1.244524028s ago: executing program 0 (id=307): socket$packet(0x11, 0x2, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494961172959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 1.193805969s ago: executing program 2 (id=308): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r1, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 1.17493038s ago: executing program 4 (id=309): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000140)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r1 = inotify_init() r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000100)="64b6365de974de7a040000000000000000000000496e9000", 0x0, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) 1.124256151s ago: executing program 3 (id=310): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/81, 0x51}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8810) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x20041000) 1.013695194s ago: executing program 0 (id=311): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="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", 0x2e8}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.007215434s ago: executing program 3 (id=312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000140)='log\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f00000001c0), 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0xc011}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 945.662956ms ago: executing program 2 (id=313): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8", 0x1e) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/81, 0x51}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8810) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000002300)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x20041000) 907.804447ms ago: executing program 4 (id=314): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x20000022, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x3, r1, 0x0}]) 780.43381ms ago: executing program 3 (id=315): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xa00}]) 780.15061ms ago: executing program 2 (id=316): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100', 0x3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) socket(0x2b, 0x1, 0x0) 162.982166ms ago: executing program 4 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020303000000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x3, 0x3, 0x801, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4881}, 0x4024000) 138.385456ms ago: executing program 3 (id=318): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000240), &(0x7f00000002c0)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r5, r3, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x22, &(0x7f0000000600)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x3, 0x14, 0x68, 0x0, 0x5, 0x5e, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) 589.43µs ago: executing program 0 (id=319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000003800)=""/4085, 0xffffffb6, 0x100, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000440)="63e7", 0x2}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 419.92µs ago: executing program 5 (id=170): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) 0s ago: executing program 4 (id=320): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 44.332850][ T3934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.342261][ T3934] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. syzkaller login: [ 67.388083][ T4260] cgroup: Unknown subsys name 'net' [ 67.515764][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.793235][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.107361][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.115540][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.120350][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.123486][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.130730][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.139047][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.144747][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.151735][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.161492][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.165485][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.172216][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.179400][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.186320][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.200777][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.200922][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.209833][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.216214][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.222383][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.230362][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.237656][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.250202][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.257733][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.265090][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.271097][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.272441][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.279596][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.286822][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.331868][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.339140][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.360153][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.668473][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 70.723488][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 70.759489][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 70.878704][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 70.892417][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 70.909518][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.917232][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.925400][ T4273] device bridge_slave_0 entered promiscuous mode [ 70.938830][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.946123][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.954415][ T4273] device bridge_slave_1 entered promiscuous mode [ 71.003449][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.010543][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.018518][ T4272] device bridge_slave_0 entered promiscuous mode [ 71.026601][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.034010][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.042257][ T4274] device bridge_slave_0 entered promiscuous mode [ 71.056796][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.064681][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.072677][ T4274] device bridge_slave_1 entered promiscuous mode [ 71.093205][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.100421][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.111104][ T4272] device bridge_slave_1 entered promiscuous mode [ 71.137254][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.149460][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.186383][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.198035][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.212201][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.254011][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.277580][ T4273] team0: Port device team_slave_0 added [ 71.288393][ T4272] team0: Port device team_slave_0 added [ 71.304123][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.310570][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.328452][ T4274] team0: Port device team_slave_0 added [ 71.336043][ T4273] team0: Port device team_slave_1 added [ 71.343137][ T4272] team0: Port device team_slave_1 added [ 71.349010][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.356218][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.363997][ T4282] device bridge_slave_0 entered promiscuous mode [ 71.371711][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.378812][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.386747][ T4281] device bridge_slave_0 entered promiscuous mode [ 71.395513][ T4274] team0: Port device team_slave_1 added [ 71.430720][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.438044][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.446268][ T4282] device bridge_slave_1 entered promiscuous mode [ 71.453418][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.460504][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.471737][ T4281] device bridge_slave_1 entered promiscuous mode [ 71.479517][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.486696][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.512700][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.530549][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.537668][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.563938][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.575990][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.585624][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.611881][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.635700][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.642738][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.668908][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.692626][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.699613][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.725583][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.750124][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.761562][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.768547][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.794876][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.818925][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.829668][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.855033][ T4282] team0: Port device team_slave_0 added [ 71.875091][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.904503][ T4281] team0: Port device team_slave_0 added [ 71.911888][ T4282] team0: Port device team_slave_1 added [ 71.936035][ T4281] team0: Port device team_slave_1 added [ 71.958177][ T4273] device hsr_slave_0 entered promiscuous mode [ 71.965001][ T4273] device hsr_slave_1 entered promiscuous mode [ 71.975225][ T4274] device hsr_slave_0 entered promiscuous mode [ 71.985015][ T4274] device hsr_slave_1 entered promiscuous mode [ 71.991822][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.999536][ T4274] Cannot create hsr debugfs directory [ 72.021543][ T4272] device hsr_slave_0 entered promiscuous mode [ 72.028307][ T4272] device hsr_slave_1 entered promiscuous mode [ 72.036450][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.044094][ T4272] Cannot create hsr debugfs directory [ 72.073952][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.081202][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.107894][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.125811][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.132912][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.159430][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.193832][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.202155][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.231296][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.257188][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.266355][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.293085][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.341706][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 72.405423][ T4282] device hsr_slave_0 entered promiscuous mode [ 72.412453][ T4282] device hsr_slave_1 entered promiscuous mode [ 72.418985][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.421341][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 72.427154][ T4282] Cannot create hsr debugfs directory [ 72.432850][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 72.438256][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 72.444241][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 72.463127][ T4281] device hsr_slave_0 entered promiscuous mode [ 72.470341][ T4281] device hsr_slave_1 entered promiscuous mode [ 72.477279][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.484943][ T4281] Cannot create hsr debugfs directory [ 72.695225][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.708918][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.723229][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.734785][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.764760][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.784341][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.794822][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.809529][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.888686][ T4281] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.920036][ T4281] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.929719][ T4281] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.949377][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.956411][ T4281] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.004767][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.016375][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.033867][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.044620][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.057183][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.066500][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.095014][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.116340][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.143233][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.155528][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.164713][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.171984][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.182642][ T4282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.197362][ T4282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.213852][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.221055][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.229674][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.242699][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.252496][ T4282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.263864][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.274190][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.284253][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.291403][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.316481][ T4282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.325818][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.337439][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.348167][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.355703][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.364206][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.373165][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.381872][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.388939][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.396847][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.406544][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.428647][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.437986][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.447211][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.459302][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.479844][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.489372][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.498285][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.534698][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.545632][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.555108][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.565941][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.575435][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.584154][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.592979][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.601989][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.616455][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.635650][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.672637][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.698519][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.707407][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.717503][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.726990][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.735932][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.745210][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.764310][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.776505][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.786976][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.807661][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.828553][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.841951][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.852571][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.866500][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.873677][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.883589][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.891767][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.957232][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.976803][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.986275][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.000144][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.007331][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.016804][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.027333][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.036763][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.052527][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.066532][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.076121][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.084914][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.092064][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.099874][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.109313][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.118022][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.125125][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.134500][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.142793][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.178769][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.189723][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.198547][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.214596][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.227475][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.237554][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.249864][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.260254][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.269603][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.277737][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.286482][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.295936][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.305116][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.321539][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.329514][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.340458][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.354956][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.366929][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.377714][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.389714][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.412480][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.424863][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 74.431189][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.439404][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.448569][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.457145][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.466127][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.476934][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.497385][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.501285][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 74.510725][ T4291] Bluetooth: hci3: command 0x041b tx timeout [ 74.513361][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.517453][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 74.525049][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 74.550697][ T4272] device veth0_vlan entered promiscuous mode [ 74.565040][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.575657][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.586842][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.602925][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.610446][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.624120][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.633277][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.642266][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.649469][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.657781][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.666235][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.674631][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.689292][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.739822][ T4272] device veth1_vlan entered promiscuous mode [ 74.752686][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.771168][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.780641][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.791548][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.798756][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.807056][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.869450][ T4282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.883115][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.899922][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.909812][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.919471][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.930287][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.940549][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.949732][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.959224][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.968318][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.977274][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.994887][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.003954][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.012693][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.049680][ T4272] device veth0_macvtap entered promiscuous mode [ 75.083169][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.090262][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.105792][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.116565][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.128588][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.140109][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.154323][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.165853][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.176657][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.195885][ T4274] device veth0_vlan entered promiscuous mode [ 75.213045][ T4272] device veth1_macvtap entered promiscuous mode [ 75.220620][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.237253][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.246531][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.260403][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.298172][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.319379][ T4274] device veth1_vlan entered promiscuous mode [ 75.328064][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.343520][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.351506][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.359015][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.368378][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.380391][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.408817][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.424650][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.437635][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.448797][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.472590][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.482663][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.493721][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.504665][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.559035][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.578126][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.590063][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.605785][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.625115][ T4274] device veth0_macvtap entered promiscuous mode [ 75.692665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.726792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.735453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.778548][ T4274] device veth1_macvtap entered promiscuous mode [ 75.787650][ T4273] device veth0_vlan entered promiscuous mode [ 75.810327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.819075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.828325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.857334][ T4273] device veth1_vlan entered promiscuous mode [ 75.878720][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.889888][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.902749][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.923731][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.930318][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.939109][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.962332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.972453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.980557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.988667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.997637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.006790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.015652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.025695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.037050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.062780][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.075039][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.078973][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.084458][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.099873][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.118642][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.128157][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.137677][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.147368][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.166521][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.174820][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.184861][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.194413][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.203159][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.212399][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.221743][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.231238][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.239222][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.258431][ T4273] device veth0_macvtap entered promiscuous mode [ 76.269755][ T4273] device veth1_macvtap entered promiscuous mode [ 76.279758][ T4281] device veth0_vlan entered promiscuous mode [ 76.359519][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.409066][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.423035][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.434016][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.446657][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.462506][ T4281] device veth1_vlan entered promiscuous mode [ 76.500048][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.507826][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 76.525545][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.534202][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.542655][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.554460][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.577128][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.585509][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 76.585540][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 76.591950][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 76.591984][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 76.613565][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.634864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.644449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.662810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.671051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.679821][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.692526][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.703193][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.714264][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.726519][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.753251][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.758770][ T4364] device syzkaller0 entered promiscuous mode [ 76.767149][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.780477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.790215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.799176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.808059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.817410][ T4282] device veth0_vlan entered promiscuous mode [ 76.832488][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.841402][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.850120][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.859631][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.903428][ T4282] device veth1_vlan entered promiscuous mode [ 76.909734][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.935192][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.935739][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.952746][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.960542][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.970131][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.006779][ T4281] device veth0_macvtap entered promiscuous mode [ 77.016432][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.029840][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.064516][ T4281] device veth1_macvtap entered promiscuous mode [ 77.122245][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.139870][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.153474][ T4282] device veth0_macvtap entered promiscuous mode [ 77.195792][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.221735][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.251091][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.268086][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.278171][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.289432][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.309233][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.322736][ T4282] device veth1_macvtap entered promiscuous mode [ 77.359999][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.370624][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.406125][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.417025][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.439649][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.448698][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.465526][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.470317][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.489055][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.511486][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.525277][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.566202][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.592473][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.626559][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.640635][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.657935][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.669035][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.679089][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.694151][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.704899][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.715744][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.727712][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.742482][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.750516][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.759434][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.770296][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.783104][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.810226][ T4281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.819306][ T4281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.829285][ T4281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.838163][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.851112][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.852438][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.868970][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.880302][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.901365][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.915787][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.920867][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.926607][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.947562][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.988694][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.002205][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.030561][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.046487][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.057687][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.072324][ T4282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.086905][ T4282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.096761][ T4282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.107276][ T4282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.250532][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.272414][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.280191][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.348159][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.362784][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.384240][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.418687][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.455505][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.465295][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.542662][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.560411][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.581725][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 78.619485][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.661494][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 78.667582][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 78.675931][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 78.675952][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 79.481766][ T4418] syz.0.21 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 79.530926][ T4425] Zero length message leads to an empty skb [ 79.548213][ T4418] CPU: 0 PID: 4418 Comm: syz.0.21 Not tainted syzkaller #0 [ 79.555470][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.565558][ T4418] Call Trace: [ 79.568859][ T4418] [ 79.571815][ T4418] dump_stack_lvl+0x188/0x24e [ 79.576547][ T4418] ? ___ratelimit+0x14e/0x610 [ 79.581257][ T4418] ? show_regs_print_info+0x12/0x12 [ 79.586488][ T4418] ? load_image+0x410/0x410 [ 79.591018][ T4418] ? ___ratelimit+0x474/0x610 [ 79.595727][ T4418] ? radix_tree_cpu_dead+0x160/0x160 [ 79.601040][ T4418] dump_header+0xd8/0x820 [ 79.605399][ T4418] oom_kill_process+0x361/0x550 [ 79.610276][ T4418] out_of_memory+0xe25/0x1220 [ 79.614989][ T4418] ? mutex_lock_nested+0x10/0x10 [ 79.619959][ T4418] ? unregister_oom_notifier+0x20/0x20 [ 79.625453][ T4418] mem_cgroup_out_of_memory+0x2c0/0x390 [ 79.631031][ T4418] ? mem_cgroup_oom_trylock+0x210/0x210 [ 79.636614][ T4418] ? do_raw_spin_unlock+0x11d/0x230 [ 79.641836][ T4418] try_charge_memcg+0xc9d/0x17c0 [ 79.646834][ T4418] ? percpu_ref_put+0x180/0x180 [ 79.651718][ T4418] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 79.657474][ T4418] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.663483][ T4418] ? percpu_ref_tryget+0x15/0x180 [ 79.668548][ T4418] ? percpu_ref_tryget+0x15/0x180 [ 79.673637][ T4418] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 79.679387][ T4418] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 79.685137][ T4418] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 79.690975][ T4418] obj_cgroup_charge+0x36a/0x620 [ 79.695948][ T4418] ? obj_cgroup_charge+0xe9/0x620 [ 79.701009][ T4418] ? mod_objcg_mlstate+0x320/0x320 [ 79.706231][ T4418] ? percpu_ref_tryget+0x15/0x180 [ 79.711285][ T4418] ? percpu_ref_tryget+0x15/0x180 [ 79.716357][ T4418] ? get_obj_cgroup_from_current+0xd0/0x280 [ 79.722282][ T4418] slab_pre_alloc_hook+0x2e2/0x300 [ 79.727422][ T4418] kmem_cache_alloc+0x56/0x2f0 [ 79.732201][ T4418] ? sk_prot_alloc+0x57/0x210 [ 79.736949][ T4418] sk_prot_alloc+0x57/0x210 [ 79.741492][ T4418] ? sk_alloc+0x20/0x330 [ 79.745763][ T4418] sk_alloc+0x36/0x330 [ 79.749862][ T4418] inet_create+0x759/0xf60 [ 79.754299][ T4418] ? inet_create+0x9e/0xf60 [ 79.758832][ T4418] __sock_create+0x49a/0x940 [ 79.763468][ T4418] smc_create+0x186/0x290 [ 79.767833][ T4418] __sock_create+0x49a/0x940 [ 79.772461][ T4418] __sys_socket+0xc4/0x190 [ 79.776905][ T4418] __x64_sys_socket+0x76/0x80 [ 79.781609][ T4418] do_syscall_64+0x4c/0xa0 [ 79.786050][ T4418] ? clear_bhb_loop+0x60/0xb0 [ 79.790751][ T4418] ? clear_bhb_loop+0x60/0xb0 [ 79.795451][ T4418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.801364][ T4418] RIP: 0033:0x7f9b0139e019 [ 79.805898][ T4418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.825613][ T4418] RSP: 002b:00007f9b0230e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 79.834056][ T4418] RAX: ffffffffffffffda RBX: 00007f9b01625fa0 RCX: 00007f9b0139e019 [ 79.842053][ T4418] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 79.850052][ T4418] RBP: 00007f9b0143500c R08: 0000000000000000 R09: 0000000000000000 [ 79.858035][ T4418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.866007][ T4418] R13: 00007f9b01626038 R14: 00007f9b01625fa0 R15: 00007ffe69574838 [ 79.874004][ T4418] [ 79.899123][ T4430] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 79.900233][ T4418] memory: usage 8kB, limit 8kB, failcnt 21 [ 79.913291][ T4418] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 79.921761][ T4418] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 79.928748][ T4418] Memory cgroup stats for /syz0/test: [ 79.929451][ T4418] anon 0 [ 79.929451][ T4418] file 0 [ 79.929451][ T4418] kernel 8192 [ 79.929451][ T4418] kernel_stack 0 [ 79.929451][ T4418] pagetables 0 [ 79.929451][ T4418] sec_pagetables 0 [ 79.929451][ T4418] percpu 0 [ 79.929451][ T4418] sock 0 [ 79.929451][ T4418] vmalloc 0 [ 79.929451][ T4418] shmem 0 [ 79.929451][ T4418] zswap 0 [ 79.929451][ T4418] zswapped 0 [ 79.929451][ T4418] file_mapped 0 [ 79.929451][ T4418] file_dirty 0 [ 79.929451][ T4418] file_writeback 0 [ 79.929451][ T4418] swapcached 0 [ 79.929451][ T4418] anon_thp 0 [ 79.929451][ T4418] file_thp 0 [ 79.929451][ T4418] shmem_thp 0 [ 79.929451][ T4418] inactive_anon 0 [ 79.929451][ T4418] active_anon 0 [ 79.929451][ T4418] inactive_file 0 [ 79.929451][ T4418] active_file 0 [ 79.929451][ T4418] unevictable 0 [ 79.929451][ T4418] slab_reclaimable 3088 [ 79.929451][ T4418] slab_unreclaimable 2888 [ 79.929451][ T4418] slab 5976 [ 79.929451][ T4418] workingset_refault_anon 0 [ 80.042985][ T4418] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.21,pid=4417,uid=0 [ 80.062720][ T4418] Memory cgroup out of memory: Killed process 4417 (syz.0.21) total-vm:102172kB, anon-rss:1396kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 80.102586][ T4318] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 80.121146][ T4320] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.322326][ T4318] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 80.330653][ T4318] usb 2-1: config 0 has no interface number 0 [ 80.346435][ T4320] usb 5-1: Using ep0 maxpacket: 32 [ 80.350956][ T4318] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 80.361541][ T4320] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 80.390962][ T4318] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 80.409585][ T4320] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 80.410639][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 80.468560][ T4318] usb 2-1: Product: syz [ 80.472469][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 80.486147][ T4318] usb 2-1: SerialNumber: syz [ 80.506392][ T4320] usb 5-1: Product: syz [ 80.510605][ T4320] usb 5-1: Manufacturer: syz [ 80.516797][ T4318] usb 2-1: config 0 descriptor?? [ 80.522113][ T4320] usb 5-1: SerialNumber: syz [ 80.528600][ T4320] usb 5-1: config 0 descriptor?? [ 80.541605][ T4424] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 80.554562][ T4320] hub 5-1:0.0: bad descriptor, ignoring hub [ 80.568074][ T4318] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 80.570911][ T4320] hub: probe of 5-1:0.0 failed with error -5 [ 81.125161][ T4469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 81.188366][ T4469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.311353][ T4424] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 81.356709][ T4475] device syzkaller0 entered promiscuous mode [ 81.366665][ T4275] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.511990][ T4470] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 81.571293][ T4275] usb 4-1: Using ep0 maxpacket: 8 [ 81.578431][ T4275] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 81.604108][ T4275] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.635798][ T4275] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.683776][ T4275] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.735769][ T4275] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.752948][ T4275] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.765883][ T4275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.998453][ T4275] usb 4-1: usb_control_msg returned -32 [ 82.004885][ T4275] usbtmc 4-1:16.0: can't read capabilities [ 82.206012][ T4487] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.688736][ T4501] device syzkaller0 entered promiscuous mode [ 82.844717][ T33] usb 2-1: USB disconnect, device number 2 [ 82.967370][ T4506] device syzkaller0 entered promiscuous mode [ 83.051628][ T4275] usb 5-1: USB disconnect, device number 2 [ 83.245636][ T4517] loop5: detected capacity change from 0 to 7 [ 83.287646][ T4517] loop5: p1 < > p3 p4 [ 83.307987][ T4517] loop5: partition table partially beyond EOD, truncated [ 83.359479][ T4517] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 83.438726][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 83.458951][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 83.486474][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 83.538138][ T4526] device syzkaller0 entered promiscuous mode [ 83.621791][ T4532] Bluetooth: MGMT ver 1.22 [ 83.626856][ T4531] loop2: detected capacity change from 0 to 512 [ 83.645989][ T4531] EXT4-fs: Ignoring removed bh option [ 83.766686][ T4531] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.821520][ T4531] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.874905][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 84.149350][ T4318] usb 4-1: USB disconnect, device number 2 [ 84.246776][ T4557] devpts: called with bogus options [ 84.367013][ T4562] device syzkaller0 entered promiscuous mode [ 84.646622][ T4571] tc action pedit offset must be on 32 bit boundaries [ 85.156001][ T4588] loop2: detected capacity change from 0 to 8192 [ 85.182590][ T4588] ======================================================= [ 85.182590][ T4588] WARNING: The mand mount option has been deprecated and [ 85.182590][ T4588] and is ignored by this kernel. Remove the mand [ 85.182590][ T4588] option from the mount to silence this warning. [ 85.182590][ T4588] ======================================================= [ 85.217442][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.245998][ T4585] device syzkaller1 entered promiscuous mode [ 85.285459][ T4594] device bond0 entered promiscuous mode [ 85.292202][ T4594] device bond_slave_0 entered promiscuous mode [ 85.303683][ T4594] device bond_slave_1 entered promiscuous mode [ 85.330055][ T4594] device batadv0 entered promiscuous mode [ 85.391106][ T4594] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 85.414970][ T4282] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 85.430421][ T4282] FAT-fs (loop2): Filesystem has been set read-only [ 85.458926][ T4594] device bond0 left promiscuous mode [ 85.465775][ T4594] device bond_slave_0 left promiscuous mode [ 85.482849][ T4594] device bond_slave_1 left promiscuous mode [ 85.587395][ T4594] device batadv0 left promiscuous mode [ 85.902341][ T4602] netlink: 48 bytes leftover after parsing attributes in process `syz.2.97'. [ 86.666649][ T130] cfg80211: failed to load regulatory.db [ 86.865830][ T4646] device batadv2 entered promiscuous mode [ 86.882197][ T4646] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 87.251174][ T4637] loop1: detected capacity change from 0 to 8192 [ 88.014631][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.023215][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.400246][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.449591][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.937702][ T4649] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.958850][ T4649] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.969070][ T4649] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.990967][ T4649] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.354047][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.122843][ T4740] loop0: detected capacity change from 0 to 256 [ 91.304319][ T4746] loop1: detected capacity change from 0 to 256 [ 91.484379][ T4272] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 91.521647][ T4272] FAT-fs (loop1): Filesystem has been set read-only [ 91.529380][ T4272] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 92.088842][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.131789][ T4771] tipc: Started in network mode [ 92.136847][ T4771] tipc: Node identity 565fe4043b2f, cluster identity 4711 [ 92.170467][ T4771] tipc: Enabled bearer , priority 0 [ 92.249393][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.280751][ T4773] device syzkaller0 entered promiscuous mode [ 92.291639][ T4772] device syzkaller0 entered promiscuous mode [ 92.445870][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.474184][ T4768] tipc: Resetting bearer [ 92.527142][ T4768] tipc: Disabling bearer [ 92.628012][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.212011][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.220687][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.229817][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.237724][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.251132][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.261880][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.146859][ T4818] device syzkaller0 entered promiscuous mode [ 94.391088][ T4797] chnl_net:caif_netlink_parms(): no params data found [ 94.677100][ T4797] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.684428][ T4797] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.693095][ T4797] device bridge_slave_0 entered promiscuous mode [ 94.871798][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.878958][ T4797] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.903997][ T4797] device bridge_slave_1 entered promiscuous mode [ 94.938756][ T4857] device syzkaller0 entered promiscuous mode [ 95.258433][ T4797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.285006][ T4797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.311002][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 95.484486][ T4870] device syzkaller0 entered promiscuous mode [ 97.153960][ T9] device hsr_slave_0 left promiscuous mode [ 97.160299][ T9] device hsr_slave_1 left promiscuous mode [ 97.167399][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.175148][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.183605][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.191309][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.198944][ T9] device bridge_slave_1 left promiscuous mode [ 97.206620][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.218367][ T9] device bridge_slave_0 left promiscuous mode [ 97.225989][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.247832][ T9] device veth1_macvtap left promiscuous mode [ 97.254929][ T9] device veth0_macvtap left promiscuous mode [ 97.261096][ T9] device veth1_vlan left promiscuous mode [ 97.267029][ T9] device veth0_vlan left promiscuous mode [ 97.391675][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 97.660359][ T9] team0 (unregistering): Port device team_slave_1 removed [ 97.701999][ T9] team0 (unregistering): Port device team_slave_0 removed [ 97.732494][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.766578][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.992664][ T9] bond0 (unregistering): Released all slaves [ 98.096066][ T4797] team0: Port device team_slave_0 added [ 98.105448][ T4884] device bond0 entered promiscuous mode [ 98.118496][ T4884] device bond_slave_0 entered promiscuous mode [ 98.124952][ T4884] device bond_slave_1 entered promiscuous mode [ 98.142286][ T4884] device batadv0 entered promiscuous mode [ 98.149321][ T4884] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 98.157476][ T4884] device bond0 left promiscuous mode [ 98.162997][ T4884] device bond_slave_0 left promiscuous mode [ 98.169220][ T4884] device bond_slave_1 left promiscuous mode [ 98.176930][ T4884] device batadv0 left promiscuous mode [ 98.211718][ T4797] team0: Port device team_slave_1 added [ 98.291700][ T4797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.354688][ T4797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.479034][ T4797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.535413][ T4797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.597153][ T4797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.660518][ T4797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.780163][ T4912] device syzkaller0 entered promiscuous mode [ 98.802078][ T4919] tipc: Started in network mode [ 98.831224][ T4919] tipc: Node identity 86158561fc9c, cluster identity 4711 [ 98.867050][ T4919] tipc: Enabled bearer , priority 0 [ 98.957251][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 98.975057][ T4797] device hsr_slave_0 entered promiscuous mode [ 98.998761][ T4797] device hsr_slave_1 entered promiscuous mode [ 99.007606][ T4797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.019448][ T4797] Cannot create hsr debugfs directory [ 99.048216][ T4912] tipc: Resetting bearer [ 99.130493][ T4909] tipc: Resetting bearer [ 99.187904][ T4909] tipc: Disabling bearer [ 99.440144][ T4946] device syzkaller0 entered promiscuous mode [ 99.462240][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 100.235337][ T4979] syz.2.234 uses obsolete (PF_INET,SOCK_PACKET) [ 101.471556][ T4954] device syzkaller0 entered promiscuous mode [ 101.540966][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 101.980410][ T4797] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.023884][ T4797] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.078975][ T4797] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.137461][ T4797] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.367060][ T5014] loop4: detected capacity change from 0 to 8192 [ 102.556547][ T5025] device syzkaller0 entered promiscuous mode [ 103.855929][ T94] device offline error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 103.866677][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 102438) [ 103.881175][ T94] Buffer I/O error on device sda1, logical block 102400 [ 103.888790][ T94] device offline error, dev sda, sector 827694 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 103.899864][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 103461) [ 103.912385][ T94] Buffer I/O error on device sda1, logical block 103423 [ 103.919399][ T94] device offline error, dev sda, sector 831694 op 0x1:(WRITE) flags 0x0 phys_seg 12 prio class 2 [ 103.930259][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 103961) [ 103.943114][ T94] Buffer I/O error on device sda1, logical block 103923 [ 103.950336][ T94] Buffer I/O error on device sda1, logical block 103924 [ 103.957615][ T94] Buffer I/O error on device sda1, logical block 103925 [ 103.965582][ T94] Buffer I/O error on device sda1, logical block 103926 [ 103.972732][ T94] Buffer I/O error on device sda1, logical block 103927 [ 103.979790][ T94] Buffer I/O error on device sda1, logical block 103928 [ 103.987078][ T94] Buffer I/O error on device sda1, logical block 103929 [ 103.994128][ T94] Buffer I/O error on device sda1, logical block 103930 [ 104.002165][ T94] device offline error, dev sda, sector 790838 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 104.013158][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2034 starting block 98854) [ 104.025115][ T94] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 104.035710][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 100390) [ 104.047668][ T94] device offline error, dev sda, sector 811294 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 104.058505][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2032 starting block 101411) [ 104.070220][ T94] device offline error, dev sda, sector 721718 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 104.080759][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90214) [ 104.092442][ T94] device offline error, dev sda, sector 721926 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 104.098376][ T4327] device offline error, dev sda, sector 722150 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 104.102895][ T94] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90240) [ 104.134827][ T4327] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90268) [ 104.147321][ T4327] device offline error, dev sda, sector 722430 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 104.157955][ T4327] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90303) [ 104.178097][ T3601] Aborting journal on device sda1-8. [ 104.208331][ T53] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 104.219774][ T3601] JBD2: I/O error when updating journal superblock for sda1-8. [ 104.240663][ T5065] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 104.250523][ T5065] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 104.260244][ T5065] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 104.269536][ T5065] Buffer I/O error on dev sda1, logical block 5752, lost async page write [ 104.278603][ T5065] Buffer I/O error on dev sda1, logical block 5753, lost async page write [ 104.287655][ T5065] Buffer I/O error on dev sda1, logical block 5754, lost async page write [ 104.297649][ T5065] Buffer I/O error on dev sda1, logical block 5755, lost async page write [ 104.306711][ T5065] Buffer I/O error on dev sda1, logical block 5756, lost async page write [ 104.315764][ T5065] Buffer I/O error on dev sda1, logical block 5757, lost async page write [ 104.511606][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 104.548237][ T4318] EXT4-fs (sda1): I/O error while writing superblock [ 104.563995][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 104.592423][ T5063] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.258: Detected aborted journal [ 104.613668][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 104.632210][ T5063] EXT4-fs (sda1): Remounting filesystem read-only [ 104.634693][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 104.640486][ T5063] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.258: Detected aborted journal [ 104.662434][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 104.678641][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 104.773568][ T5063] EXT4-fs (sda1): Remounting filesystem read-only [ 104.780244][ T5067] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.260: Detected aborted journal [ 104.800097][ T5067] EXT4-fs (sda1): Remounting filesystem read-only [ 104.815710][ T5065] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 104.822125][ T5067] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.260: Detected aborted journal [ 104.822153][ T5067] EXT4-fs (sda1): Remounting filesystem read-only [ 104.937941][ T5067] EXT4-fs (sda1): Remounting filesystem read-only [ 104.955562][ T5067] EXT4-fs (sda1): Remounting filesystem read-only [ 104.975347][ T5067] EXT4-fs (sda1): Remounting filesystem read-only [ 105.030098][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 105.039985][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 106.125820][ T5031] device syzkaller0 entered promiscuous mode [ 106.165429][ T5074] bridge0: port 3(batadv1) entered blocking state [ 106.173070][ T5074] bridge0: port 3(batadv1) entered disabled state [ 106.180726][ T5074] device batadv1 entered promiscuous mode [ 106.198026][ T5091] device syzkaller0 entered promiscuous mode [ 106.250617][ T5094] tipc: Started in network mode [ 106.271077][ T5094] tipc: Node identity 7aa5749775a5, cluster identity 4711 [ 106.303711][ T5094] tipc: Enabled bearer , priority 0 [ 106.337247][ T5084] tipc: Resetting bearer [ 106.390772][ T5084] tipc: Disabling bearer [ 106.477427][ T4797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.538409][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.549617][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.574721][ T4797] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.610432][ T5109] syz.0.273 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 106.635667][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.653379][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.657835][ T5109] CPU: 1 PID: 5109 Comm: syz.0.273 Not tainted syzkaller #0 [ 106.668699][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.679124][ T5109] Call Trace: [ 106.682419][ T5109] [ 106.685361][ T5109] dump_stack_lvl+0x188/0x24e [ 106.688280][ T4673] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.690044][ T5109] ? ___ratelimit+0x14e/0x610 [ 106.697170][ T4673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.701726][ T5109] ? show_regs_print_info+0x12/0x12 [ 106.701755][ T5109] ? load_image+0x410/0x410 [ 106.718675][ T5109] ? ___ratelimit+0x474/0x610 [ 106.723385][ T5109] ? radix_tree_cpu_dead+0x160/0x160 [ 106.728704][ T5109] dump_header+0xd8/0x820 [ 106.731626][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.733039][ T5109] oom_kill_process+0x361/0x550 [ 106.745098][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.745225][ T5109] out_of_memory+0xe25/0x1220 [ 106.754018][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.757930][ T5109] ? print_unlock_imbalance_bug+0x160/0x160 [ 106.767441][ T4673] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.771758][ T5109] ? mutex_lock_nested+0x10/0x10 [ 106.771790][ T5109] ? unregister_oom_notifier+0x20/0x20 [ 106.771816][ T5109] mem_cgroup_out_of_memory+0x2c0/0x390 [ 106.778925][ T4673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.783738][ T5109] ? mem_cgroup_oom_trylock+0x210/0x210 [ 106.783774][ T5109] ? do_raw_spin_unlock+0x11d/0x230 [ 106.790857][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.794746][ T5109] try_charge_memcg+0xc9d/0x17c0 [ 106.802951][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.807472][ T5109] ? percpu_ref_put+0x180/0x180 [ 106.820968][ T4327] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 106.825446][ T5109] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 106.825485][ T5109] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.825507][ T5109] ? percpu_ref_tryget+0x15/0x180 [ 106.833694][ T4327] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 106.838512][ T5109] ? percpu_ref_tryget+0x15/0x180 [ 106.878671][ T5109] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 106.884403][ T5109] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 106.890141][ T5109] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 106.895967][ T5109] obj_cgroup_charge+0x36a/0x620 [ 106.900915][ T5109] ? obj_cgroup_charge+0xe9/0x620 [ 106.905944][ T5109] ? mod_objcg_mlstate+0x320/0x320 [ 106.911139][ T5109] ? percpu_ref_tryget+0x15/0x180 [ 106.916161][ T5109] ? percpu_ref_tryget+0x15/0x180 [ 106.921186][ T5109] ? get_obj_cgroup_from_current+0xd0/0x280 [ 106.927088][ T5109] slab_pre_alloc_hook+0x2e2/0x300 [ 106.932199][ T5109] kmem_cache_alloc+0x56/0x2f0 [ 106.936967][ T5109] ? sk_prot_alloc+0x57/0x210 [ 106.941658][ T5109] sk_prot_alloc+0x57/0x210 [ 106.946153][ T5109] ? sk_alloc+0x20/0x330 [ 106.950389][ T5109] sk_alloc+0x36/0x330 [ 106.954460][ T5109] inet_create+0x759/0xf60 [ 106.958870][ T5109] ? inet_create+0x9e/0xf60 [ 106.963368][ T5109] __sock_create+0x49a/0x940 [ 106.967963][ T5109] smc_create+0x186/0x290 [ 106.972298][ T5109] __sock_create+0x49a/0x940 [ 106.976898][ T5109] __sys_socket+0xc4/0x190 [ 106.981318][ T5109] __x64_sys_socket+0x76/0x80 [ 106.985991][ T5109] do_syscall_64+0x4c/0xa0 [ 106.990404][ T5109] ? clear_bhb_loop+0x60/0xb0 [ 106.995083][ T5109] ? clear_bhb_loop+0x60/0xb0 [ 106.999758][ T5109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.005648][ T5109] RIP: 0033:0x7f9b0139e019 [ 107.010062][ T5109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.029675][ T5109] RSP: 002b:00007f9b0230e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 107.038128][ T5109] RAX: ffffffffffffffda RBX: 00007f9b01625fa0 RCX: 00007f9b0139e019 [ 107.046098][ T5109] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 107.054067][ T5109] RBP: 00007f9b0143500c R08: 0000000000000000 R09: 0000000000000000 [ 107.062126][ T5109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.070115][ T5109] R13: 00007f9b01626038 R14: 00007f9b01625fa0 R15: 00007ffe69574838 [ 107.078092][ T5109] [ 107.081191][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.106140][ T5116] loop2: detected capacity change from 0 to 512 [ 107.132596][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.146563][ T5116] EXT4-fs: Ignoring removed oldalloc option [ 107.173215][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.205851][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.241331][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.254167][ T5116] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 107.262047][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.263496][ T5109] memory: usage 8kB, limit 8kB, failcnt 59 [ 107.291099][ T5109] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 107.291226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.298813][ T5109] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 107.314039][ T5109] Memory cgroup stats for /syz0/test: [ 107.314225][ T5109] anon 0 [ 107.314225][ T5109] file 0 [ 107.314225][ T5109] kernel 8192 [ 107.314225][ T5109] kernel_stack 0 [ 107.314225][ T5109] pagetables 0 [ 107.314225][ T5109] sec_pagetables 0 [ 107.314225][ T5109] percpu 0 [ 107.314225][ T5109] sock 0 [ 107.314225][ T5109] vmalloc 0 [ 107.314225][ T5109] shmem 0 [ 107.314225][ T5109] zswap 0 [ 107.314225][ T5109] zswapped 0 [ 107.314225][ T5109] file_mapped 0 [ 107.314225][ T5109] file_dirty 0 [ 107.314225][ T5109] file_writeback 0 [ 107.314225][ T5109] swapcached 0 [ 107.314225][ T5109] anon_thp 0 [ 107.314225][ T5109] file_thp 0 [ 107.314225][ T5109] shmem_thp 0 [ 107.314225][ T5109] inactive_anon 0 [ 107.314225][ T5109] active_anon 0 [ 107.314225][ T5109] inactive_file 0 [ 107.314225][ T5109] active_file 0 [ 107.314225][ T5109] unevictable 0 [ 107.314225][ T5109] slab_reclaimable 3088 [ 107.314225][ T5109] slab_unreclaimable 2888 [ 107.314225][ T5109] slab 5976 [ 107.314225][ T5109] workingset_refault_anon 0 [ 107.352842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.425140][ T5109] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.273,pid=5107,uid=0 [ 107.451324][ T5109] Memory cgroup out of memory: Killed process 5109 (syz.0.273) total-vm:102244kB, anon-rss:1424kB, file-rss:22356kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 107.455332][ T4797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.481993][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.506408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.529416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.623207][ T5127] device syzkaller0 entered promiscuous mode [ 107.739435][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 109.170344][ T4797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.182072][ T5138] device syzkaller0 entered promiscuous mode [ 109.189263][ T5147] netlink: 1371 bytes leftover after parsing attributes in process `syz.2.284'. [ 109.201438][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.219468][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.416684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.472370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.529266][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.548756][ T5171] EXT4-fs error: 112 callbacks suppressed [ 109.548770][ T5171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.289: Detected aborted journal [ 109.552257][ T5167] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.288: Detected aborted journal [ 109.555425][ T5171] EXT4-fs: 78 callbacks suppressed [ 109.555444][ T5171] EXT4-fs (sda1): Remounting filesystem read-only [ 109.570086][ T5168] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.287: Detected aborted journal [ 109.581453][ T5171] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.289: Detected aborted journal [ 109.586340][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.588419][ T5171] EXT4-fs (sda1): Remounting filesystem read-only [ 109.610074][ T5167] EXT4-fs (sda1): Remounting filesystem read-only [ 109.642700][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.652411][ T5168] EXT4-fs (sda1): Remounting filesystem read-only [ 109.661244][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.683169][ T4797] device veth0_vlan entered promiscuous mode [ 109.695543][ T5168] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.287: Detected aborted journal [ 109.733743][ T4797] device veth1_vlan entered promiscuous mode [ 109.741874][ T5168] EXT4-fs (sda1): Remounting filesystem read-only [ 109.751209][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0 [ 109.808368][ T5174] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 109.818607][ T5168] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.287: Detected aborted journal [ 109.853887][ T5175] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 109.880271][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.884301][ T5176] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.291: Detected aborted journal [ 109.901281][ T5168] EXT4-fs (sda1): Remounting filesystem read-only [ 109.902279][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.916160][ T5168] EXT4-fs (sda1): Remounting filesystem read-only [ 109.935636][ T5177] EXT4-fs (sda1): Remounting filesystem read-only [ 109.938124][ T5178] EXT4-fs (sda1): Remounting filesystem read-only [ 109.942394][ T5176] EXT4-fs (sda1): Remounting filesystem read-only [ 109.957992][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.975593][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.987988][ T4797] device veth0_macvtap entered promiscuous mode [ 110.028491][ T4797] device veth1_macvtap entered promiscuous mode [ 110.038752][ T5170] Cannot find del_set index 0 as target [ 110.103958][ T5170] netlink: 'syz.3.287': attribute type 10 has an invalid length. [ 110.147974][ T5170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.149644][ T5193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 110.178743][ T5170] team0: Port device bond0 added [ 110.206651][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.227815][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.262678][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.298835][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.319993][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.366757][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.405164][ T4797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.438064][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.464837][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.490537][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.528829][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.558132][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.586357][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.610285][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.649124][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.669075][ T4797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.676593][ T5235] loop2: detected capacity change from 0 to 1024 [ 110.705461][ T4797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.729949][ T4797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.745007][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.759592][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.788322][ T5245] syz.3.300 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 110.839311][ T5245] CPU: 1 PID: 5245 Comm: syz.3.300 Not tainted syzkaller #0 [ 110.846651][ T5245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.856727][ T5245] Call Trace: [ 110.860030][ T5245] [ 110.862981][ T5245] dump_stack_lvl+0x188/0x24e [ 110.867686][ T5245] ? ___ratelimit+0x14e/0x610 [ 110.872395][ T5245] ? show_regs_print_info+0x12/0x12 [ 110.877625][ T5245] ? load_image+0x410/0x410 [ 110.882148][ T5245] ? ___ratelimit+0x474/0x610 [ 110.887113][ T5245] ? radix_tree_cpu_dead+0x160/0x160 [ 110.892431][ T5245] dump_header+0xd8/0x820 [ 110.896788][ T5245] oom_kill_process+0x361/0x550 [ 110.901668][ T5245] out_of_memory+0xe25/0x1220 [ 110.906415][ T5245] ? print_unlock_imbalance_bug+0x160/0x160 [ 110.912337][ T5245] ? mutex_lock_nested+0x10/0x10 [ 110.917304][ T5245] ? unregister_oom_notifier+0x20/0x20 [ 110.922801][ T5245] mem_cgroup_out_of_memory+0x2c0/0x390 [ 110.928376][ T5245] ? mem_cgroup_oom_trylock+0x210/0x210 [ 110.933948][ T5245] ? do_raw_spin_unlock+0x11d/0x230 [ 110.939174][ T5245] try_charge_memcg+0xc9d/0x17c0 [ 110.944214][ T5245] ? percpu_ref_put+0x180/0x180 [ 110.949068][ T5245] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 110.954790][ T5245] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.960767][ T5245] ? percpu_ref_tryget+0x15/0x180 [ 110.965792][ T5245] ? percpu_ref_tryget+0x15/0x180 [ 110.970813][ T5245] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 110.976533][ T5245] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 110.982252][ T5245] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 110.988053][ T5245] obj_cgroup_charge+0x36a/0x620 [ 110.992991][ T5245] ? obj_cgroup_charge+0xe9/0x620 [ 110.998006][ T5245] ? mod_objcg_mlstate+0x320/0x320 [ 111.003115][ T5245] ? percpu_ref_put+0x12/0x100 [ 111.007871][ T5245] ? percpu_ref_put+0x12/0x100 [ 111.012633][ T5245] slab_pre_alloc_hook+0x2e2/0x300 [ 111.017737][ T5245] ? slab_pre_alloc_hook+0xb1/0x300 [ 111.022928][ T5245] kmem_cache_alloc_lru+0x49/0x2e0 [ 111.028028][ T5245] ? sock_alloc_inode+0x24/0xc0 [ 111.032873][ T5245] sock_alloc_inode+0x24/0xc0 [ 111.037537][ T5245] ? sockfs_init_fs_context+0xa0/0xa0 [ 111.042898][ T5245] new_inode_pseudo+0x5f/0x1c0 [ 111.047663][ T5245] __sock_create+0x129/0x940 [ 111.052265][ T5245] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 111.058256][ T5245] __sys_socket+0xc4/0x190 [ 111.062677][ T5245] __x64_sys_socket+0x76/0x80 [ 111.067360][ T5245] do_syscall_64+0x4c/0xa0 [ 111.071781][ T5245] ? clear_bhb_loop+0x60/0xb0 [ 111.076464][ T5245] ? clear_bhb_loop+0x60/0xb0 [ 111.081159][ T5245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.087052][ T5245] RIP: 0033:0x7fcd40f9e019 [ 111.091462][ T5245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.111066][ T5245] RSP: 002b:00007fcd41eae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 111.119473][ T5245] RAX: ffffffffffffffda RBX: 00007fcd41225fa0 RCX: 00007fcd40f9e019 [ 111.127435][ T5245] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 111.135401][ T5245] RBP: 00007fcd4103500c R08: 0000000000000000 R09: 0000000000000000 [ 111.143366][ T5245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.151327][ T5245] R13: 00007fcd41226038 R14: 00007fcd41225fa0 R15: 00007ffef99a99e8 [ 111.159300][ T5245] [ 111.165138][ T4797] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.190697][ T4797] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.200745][ T4797] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.210835][ T5235] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 111.234829][ T4797] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.245728][ T5245] memory: usage 0kB, limit 0kB, failcnt 19 [ 111.250105][ T5235] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 111.287201][ T5250] device syzkaller0 entered promiscuous mode [ 111.289158][ T5235] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8511 with max blocks 1 with error 28 [ 111.311386][ T5235] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.311386][ T5235] [ 111.321305][ T5235] EXT4-fs (loop2): Total free blocks count 0 [ 111.327693][ T5235] EXT4-fs (loop2): Free/Dirty block details [ 111.335330][ T5235] EXT4-fs (loop2): free_blocks=20480 [ 111.342095][ T5235] EXT4-fs (loop2): dirty_blocks=32 [ 111.347366][ T5235] EXT4-fs (loop2): Block reservation details [ 111.353451][ T5235] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 111.361346][ T5245] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 111.368833][ T5245] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 111.401145][ T5245] Memory cgroup stats for /syz3/test: [ 111.401319][ T5245] anon 0 [ 111.401319][ T5245] file 0 [ 111.401319][ T5245] kernel 0 [ 111.401319][ T5245] kernel_stack 0 [ 111.401319][ T5245] pagetables 0 [ 111.401319][ T5245] sec_pagetables 0 [ 111.401319][ T5245] percpu 0 [ 111.401319][ T5245] sock 0 [ 111.401319][ T5245] vmalloc 0 [ 111.401319][ T5245] shmem 0 [ 111.401319][ T5245] zswap 0 [ 111.401319][ T5245] zswapped 0 [ 111.401319][ T5245] file_mapped 0 [ 111.401319][ T5245] file_dirty 0 [ 111.401319][ T5245] file_writeback 0 [ 111.401319][ T5245] swapcached 0 [ 111.401319][ T5245] anon_thp 0 [ 111.401319][ T5245] file_thp 0 [ 111.401319][ T5245] shmem_thp 0 [ 111.401319][ T5245] inactive_anon 0 [ 111.401319][ T5245] active_anon 0 [ 111.401319][ T5245] inactive_file 0 [ 111.401319][ T5245] active_file 0 [ 111.401319][ T5245] unevictable 0 [ 111.401319][ T5245] slab_reclaimable 0 [ 111.401319][ T5245] slab_unreclaimable 0 [ 111.401319][ T5245] slab 0 [ 111.401319][ T5245] workingset_refault_anon 0 [ 111.496697][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.541416][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 111.573622][ T5245] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.300,pid=5242,uid=0 [ 111.653826][ T5245] Memory cgroup out of memory: Killed process 5245 (syz.3.300) total-vm:102244kB, anon-rss:1424kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 111.681842][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.692514][ T5245] socket: no more sockets [ 111.695862][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.733284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.815101][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.875257][ T5275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 111.878728][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.930319][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.548093][ T5307] syz.2.316 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 112.567382][ T5307] CPU: 1 PID: 5307 Comm: syz.2.316 Not tainted syzkaller #0 [ 112.574718][ T5307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.579485][ T5305] loop3: detected capacity change from 0 to 8192 [ 112.584770][ T5307] Call Trace: [ 112.584779][ T5307] [ 112.584787][ T5307] dump_stack_lvl+0x188/0x24e [ 112.584814][ T5307] ? ___ratelimit+0x14e/0x610 [ 112.606718][ T5307] ? show_regs_print_info+0x12/0x12 [ 112.611948][ T5307] ? load_image+0x410/0x410 [ 112.616464][ T5307] ? ___ratelimit+0x474/0x610 [ 112.621144][ T5307] ? radix_tree_cpu_dead+0x160/0x160 [ 112.626430][ T5307] dump_header+0xd8/0x820 [ 112.630846][ T5307] oom_kill_process+0x361/0x550 [ 112.635693][ T5307] out_of_memory+0xe25/0x1220 [ 112.640365][ T5307] ? print_unlock_imbalance_bug+0x160/0x160 [ 112.646258][ T5307] ? mutex_lock_nested+0x10/0x10 [ 112.651194][ T5307] ? unregister_oom_notifier+0x20/0x20 [ 112.656649][ T5307] mem_cgroup_out_of_memory+0x2c0/0x390 [ 112.662194][ T5307] ? mem_cgroup_oom_trylock+0x210/0x210 [ 112.667742][ T5307] ? do_raw_spin_unlock+0x11d/0x230 [ 112.672935][ T5307] try_charge_memcg+0xc9d/0x17c0 [ 112.677885][ T5307] ? percpu_ref_put+0x180/0x180 [ 112.682729][ T5307] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 112.688447][ T5307] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 112.694421][ T5307] ? percpu_ref_tryget+0x15/0x180 [ 112.699441][ T5307] ? percpu_ref_tryget+0x15/0x180 [ 112.704461][ T5307] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 112.710203][ T5307] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 112.715919][ T5307] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 112.721726][ T5307] obj_cgroup_charge+0x36a/0x620 [ 112.726662][ T5307] ? obj_cgroup_charge+0xe9/0x620 [ 112.731681][ T5307] ? mod_objcg_mlstate+0x320/0x320 [ 112.736881][ T5307] ? percpu_ref_put+0x12/0x100 [ 112.741646][ T5307] ? percpu_ref_put+0x12/0x100 [ 112.746406][ T5307] slab_pre_alloc_hook+0x2e2/0x300 [ 112.751509][ T5307] ? slab_pre_alloc_hook+0xb1/0x300 [ 112.756704][ T5307] kmem_cache_alloc_lru+0x49/0x2e0 [ 112.761818][ T5307] ? sock_alloc_inode+0x24/0xc0 [ 112.766666][ T5307] sock_alloc_inode+0x24/0xc0 [ 112.771334][ T5307] ? sockfs_init_fs_context+0xa0/0xa0 [ 112.776695][ T5307] new_inode_pseudo+0x5f/0x1c0 [ 112.781451][ T5307] __sock_create+0x129/0x940 [ 112.786032][ T5307] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 112.792019][ T5307] __sys_socket+0xc4/0x190 [ 112.796439][ T5307] __x64_sys_socket+0x76/0x80 [ 112.801203][ T5307] do_syscall_64+0x4c/0xa0 [ 112.805619][ T5307] ? clear_bhb_loop+0x60/0xb0 [ 112.810289][ T5307] ? clear_bhb_loop+0x60/0xb0 [ 112.814959][ T5307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.820851][ T5307] RIP: 0033:0x7f2c1559e019 [ 112.825260][ T5307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.844871][ T5307] RSP: 002b:00007f2c1642f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 112.853290][ T5307] RAX: ffffffffffffffda RBX: 00007f2c15825fa0 RCX: 00007f2c1559e019 [ 112.861349][ T5307] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 112.869315][ T5307] RBP: 00007f2c1563500c R08: 0000000000000000 R09: 0000000000000000 [ 112.877280][ T5307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.885242][ T5307] R13: 00007f2c15826038 R14: 00007f2c15825fa0 R15: 00007ffe483225d8 [ 112.893217][ T5307] [ 112.902521][ T5307] memory: usage 0kB, limit 0kB, failcnt 19 [ 112.952992][ T5307] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 112.969362][ T5307] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 112.990490][ T5307] Memory cgroup stats for /syz2/test: [ 112.990670][ T5307] anon 0 [ 112.990670][ T5307] file 0 [ 112.990670][ T5307] kernel 0 [ 112.990670][ T5307] kernel_stack 0 [ 112.990670][ T5307] pagetables 0 [ 112.990670][ T5307] sec_pagetables 0 [ 112.990670][ T5307] percpu 0 [ 112.990670][ T5307] sock 0 [ 112.990670][ T5307] vmalloc 0 [ 112.990670][ T5307] shmem 0 [ 112.990670][ T5307] zswap 0 [ 112.990670][ T5307] zswapped 0 [ 112.990670][ T5307] file_mapped 0 [ 112.990670][ T5307] file_dirty 0 [ 112.990670][ T5307] file_writeback 0 [ 112.990670][ T5307] swapcached 0 [ 112.990670][ T5307] anon_thp 0 [ 112.990670][ T5307] file_thp 0 [ 112.990670][ T5307] shmem_thp 0 [ 112.990670][ T5307] inactive_anon 0 [ 112.990670][ T5307] active_anon 0 [ 112.990670][ T5307] inactive_file 0 [ 112.990670][ T5307] active_file 0 [ 112.990670][ T5307] unevictable 0 [ 112.990670][ T5307] slab_reclaimable 0 [ 112.990670][ T5307] slab_unreclaimable 0 [ 112.990670][ T5307] slab 0 [ 112.990670][ T5307] workingset_refault_anon 0 [ 113.034684][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.317'. [ 113.111390][ T5307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.316,pid=5306,uid=0 [ 113.128562][ T5307] Memory cgroup out of memory: Killed process 5306 (syz.2.316) total-vm:102244kB, anon-rss:1404kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 113.240580][ T5307] socket: no more sockets [ 113.349982][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.379959][ T5322] loop4: detected capacity change from 0 to 512 [ 113.511723][ T5322] [ 113.514102][ T5322] ====================================================== [ 113.521122][ T5322] WARNING: possible circular locking dependency detected [ 113.528147][ T5322] syzkaller #0 Not tainted [ 113.532553][ T5322] ------------------------------------------------------ [ 113.539564][ T5322] syz.4.320/5322 is trying to acquire lock: [ 113.545473][ T5322] ffff8880270ecc18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2e70 [ 113.555560][ T5322] [ 113.555560][ T5322] but task is already holding lock: [ 113.562995][ T5322] ffff88805559d108 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3f6/0x760 [ 113.572821][ T5322] [ 113.572821][ T5322] which lock already depends on the new lock. [ 113.572821][ T5322] [ 113.583209][ T5322] [ 113.583209][ T5322] the existing dependency chain (in reverse order) is: [ 113.592209][ T5322] [ 113.592209][ T5322] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 113.599775][ T5322] down_write+0x36/0x60 [ 113.604445][ T5322] ext4_destroy_inline_data+0x24/0xe0 [ 113.610334][ T5322] ext4_writepages+0x599/0x2e70 [ 113.615707][ T5322] do_writepages+0x3c6/0x640 [ 113.620981][ T5322] filemap_fdatawrite_wbc+0x11e/0x180 [ 113.626869][ T5322] file_write_and_wait_range+0x159/0x230 [ 113.633007][ T5322] ext4_sync_file+0x22a/0xc30 [ 113.638195][ T5322] ext4_buffered_write_iter+0x2de/0x380 [ 113.644254][ T5322] ext4_file_write_iter+0x1e3/0x17d0 [ 113.650047][ T5322] vfs_write+0x482/0x9a0 [ 113.654799][ T5322] __x64_sys_pwrite64+0x194/0x220 [ 113.660332][ T5322] do_syscall_64+0x4c/0xa0 [ 113.665258][ T5322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.671747][ T5322] [ 113.671747][ T5322] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 113.680162][ T5322] __lock_acquire+0x2d18/0x7c40 [ 113.685526][ T5322] lock_acquire+0x1bb/0x4a0 [ 113.690537][ T5322] percpu_down_read+0x44/0x1a0 [ 113.695806][ T5322] ext4_writepages+0x213/0x2e70 [ 113.701187][ T5322] do_writepages+0x3c6/0x640 [ 113.706285][ T5322] __writeback_single_inode+0x153/0x1170 [ 113.712431][ T5322] writeback_single_inode+0x3d2/0x8e0 [ 113.718323][ T5322] write_inode_now+0x17f/0x210 [ 113.723596][ T5322] iput+0x643/0x9c0 [ 113.727915][ T5322] ext4_xattr_block_set+0x2487/0x2fe0 [ 113.733795][ T5322] ext4_expand_extra_isize_ea+0xfca/0x1d40 [ 113.740114][ T5322] __ext4_expand_extra_isize+0x301/0x3e0 [ 113.746260][ T5322] __ext4_mark_inode_dirty+0x478/0x760 [ 113.752232][ T5322] ext4_evict_inode+0xa67/0x10e0 [ 113.757688][ T5322] evict+0x4b6/0x8b0 [ 113.762089][ T5322] ext4_orphan_cleanup+0xc32/0x1470 [ 113.767797][ T5322] ext4_fill_super+0x6f0c/0x78f0 [ 113.773244][ T5322] get_tree_bdev+0x3e6/0x610 [ 113.778345][ T5322] vfs_get_tree+0x88/0x270 [ 113.783272][ T5322] do_new_mount+0x247/0xa40 [ 113.788302][ T5322] __se_sys_mount+0x2e3/0x3d0 [ 113.793487][ T5322] do_syscall_64+0x4c/0xa0 [ 113.798414][ T5322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.804820][ T5322] [ 113.804820][ T5322] other info that might help us debug this: [ 113.804820][ T5322] [ 113.815033][ T5322] Possible unsafe locking scenario: [ 113.815033][ T5322] [ 113.822465][ T5322] CPU0 CPU1 [ 113.827817][ T5322] ---- ---- [ 113.833169][ T5322] lock(&ei->xattr_sem); [ 113.837499][ T5322] lock(&sbi->s_writepages_rwsem); [ 113.845199][ T5322] lock(&ei->xattr_sem); [ 113.852126][ T5322] lock(&sbi->s_writepages_rwsem); [ 113.857309][ T5322] [ 113.857309][ T5322] *** DEADLOCK *** [ 113.857309][ T5322] [ 113.865449][ T5322] 3 locks held by syz.4.320/5322: [ 113.870467][ T5322] #0: ffff8880270ea0e0 (&type->s_umount_key#27/1){+.+.}-{3:3}, at: alloc_super+0x1fb/0x930 [ 113.880657][ T5322] #1: ffff8880270ea650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x431/0x10e0 [ 113.890133][ T5322] #2: ffff88805559d108 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3f6/0x760 [ 113.900390][ T5322] [ 113.900390][ T5322] stack backtrace: [ 113.906258][ T5322] CPU: 1 PID: 5322 Comm: syz.4.320 Not tainted syzkaller #0 [ 113.913530][ T5322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.923572][ T5322] Call Trace: [ 113.926841][ T5322] [ 113.929760][ T5322] dump_stack_lvl+0x188/0x24e [ 113.934433][ T5322] ? load_image+0x410/0x410 [ 113.938922][ T5322] ? show_regs_print_info+0x12/0x12 [ 113.944110][ T5322] ? print_circular_bug+0x12b/0x1a0 [ 113.949304][ T5322] check_noncircular+0x296/0x330 [ 113.954238][ T5322] ? look_up_lock_class+0x75/0x140 [ 113.959342][ T5322] ? add_chain_block+0x9b0/0x9b0 [ 113.964271][ T5322] ? lockdep_lock+0xf1/0x1f0 [ 113.968854][ T5322] ? _find_first_zero_bit+0xd2/0x100 [ 113.974130][ T5322] __lock_acquire+0x2d18/0x7c40 [ 113.978981][ T5322] ? verify_lock_unused+0x140/0x140 [ 113.984170][ T5322] ? mark_lock+0x94/0x320 [ 113.988489][ T5322] ? __lock_acquire+0x1465/0x7c40 [ 113.993541][ T5322] lock_acquire+0x1bb/0x4a0 [ 113.998036][ T5322] ? ext4_writepages+0x213/0x2e70 [ 114.003048][ T5322] ? __lock_acquire+0x138a/0x7c40 [ 114.008067][ T5322] ? __might_sleep+0xd0/0xd0 [ 114.012643][ T5322] ? read_lock_is_recursive+0x10/0x10 [ 114.018010][ T5322] ? mark_lock+0x94/0x320 [ 114.022334][ T5322] percpu_down_read+0x44/0x1a0 [ 114.027087][ T5322] ? ext4_writepages+0x213/0x2e70 [ 114.032100][ T5322] ext4_writepages+0x213/0x2e70 [ 114.036946][ T5322] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 114.042919][ T5322] ? verify_lock_unused+0x140/0x140 [ 114.048110][ T5322] ? ext4_read_folio+0x370/0x370 [ 114.053036][ T5322] ? mark_lock+0x94/0x320 [ 114.057402][ T5322] ? __lock_acquire+0x1465/0x7c40 [ 114.062447][ T5322] ? __lock_acquire+0x7c40/0x7c40 [ 114.067473][ T5322] ? do_raw_spin_lock+0x128/0x2f0 [ 114.072492][ T5322] ? do_raw_spin_unlock+0x11d/0x230 [ 114.077771][ T5322] ? ext4_read_folio+0x370/0x370 [ 114.082706][ T5322] do_writepages+0x3c6/0x640 [ 114.087295][ T5322] ? __writepage+0x130/0x130 [ 114.091875][ T5322] ? writeback_single_inode+0x3c7/0x8e0 [ 114.097415][ T5322] ? __lock_acquire+0x7c40/0x7c40 [ 114.102433][ T5322] ? do_raw_spin_lock+0x128/0x2f0 [ 114.107447][ T5322] __writeback_single_inode+0x153/0x1170 [ 114.113079][ T5322] writeback_single_inode+0x3d2/0x8e0 [ 114.118446][ T5322] ? write_inode_now+0x210/0x210 [ 114.123386][ T5322] write_inode_now+0x17f/0x210 [ 114.128144][ T5322] ? bdi_split_work_to_wbs+0x8f0/0x8f0 [ 114.133600][ T5322] ? rcu_is_watching+0x11/0xa0 [ 114.138355][ T5322] ? do_raw_spin_unlock+0x11d/0x230 [ 114.143543][ T5322] iput+0x643/0x9c0 [ 114.147347][ T5322] ext4_xattr_block_set+0x2487/0x2fe0 [ 114.152715][ T5322] ? __might_sleep+0xd0/0xd0 [ 114.157304][ T5322] ? ext4_xattr_block_find+0x2c0/0x2c0 [ 114.162755][ T5322] ? ext4_xattr_block_find+0x24a/0x2c0 [ 114.168211][ T5322] ext4_expand_extra_isize_ea+0xfca/0x1d40 [ 114.174019][ T5322] __ext4_expand_extra_isize+0x301/0x3e0 [ 114.179736][ T5322] __ext4_mark_inode_dirty+0x478/0x760 [ 114.185206][ T5322] ext4_evict_inode+0xa67/0x10e0 [ 114.190141][ T5322] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 114.196036][ T5322] ? do_raw_spin_unlock+0x11d/0x230 [ 114.201226][ T5322] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 114.207130][ T5322] evict+0x4b6/0x8b0 [ 114.211021][ T5322] ? proc_nr_inodes+0x2f0/0x2f0 [ 114.215861][ T5322] ? do_raw_spin_unlock+0x11d/0x230 [ 114.221050][ T5322] ? _raw_spin_unlock+0x24/0x40 [ 114.225913][ T5322] ? iput+0x79f/0x9c0 [ 114.229888][ T5322] ext4_orphan_cleanup+0xc32/0x1470 [ 114.235083][ T5322] ? ext4_orphan_del+0xc90/0xc90 [ 114.240016][ T5322] ? ext4_register_sysfs+0x27e/0x2c0 [ 114.245292][ T5322] ? errseq_check_and_advance+0x62/0x120 [ 114.250916][ T5322] ext4_fill_super+0x6f0c/0x78f0 [ 114.255881][ T5322] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 114.262136][ T5322] ? set_blocksize+0x1d0/0x470 [ 114.266891][ T5322] ? sb_set_blocksize+0xa5/0xe0 [ 114.271729][ T5322] get_tree_bdev+0x3e6/0x610 [ 114.276309][ T5322] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 114.282542][ T5322] vfs_get_tree+0x88/0x270 [ 114.286970][ T5322] do_new_mount+0x247/0xa40 [ 114.291474][ T5322] __se_sys_mount+0x2e3/0x3d0 [ 114.296141][ T5322] ? __x64_sys_mount+0xc0/0xc0 [ 114.300895][ T5322] ? lockdep_hardirqs_on+0x94/0x140 [ 114.306083][ T5322] ? __x64_sys_mount+0x1c/0xc0 [ 114.310843][ T5322] do_syscall_64+0x4c/0xa0 [ 114.315255][ T5322] ? clear_bhb_loop+0x60/0xb0 [ 114.319922][ T5322] ? clear_bhb_loop+0x60/0xb0 [ 114.324589][ T5322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.330474][ T5322] RIP: 0033:0x7f0ba2b9f28a [ 114.334964][ T5322] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.354581][ T5322] RSP: 002b:00007f0ba3a34e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 114.362984][ T5322] RAX: ffffffffffffffda RBX: 00007f0ba3a34ee0 RCX: 00007f0ba2b9f28a [ 114.371033][ T5322] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 00007f0ba3a34ea0 [ 114.378995][ T5322] RBP: 0000200000000240 R08: 00007f0ba3a34ee0 R09: 0000000000000000 [ 114.386951][ T5322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 114.394934][ T5322] R13: 00007f0ba3a34ea0 R14: 000000000000047a R15: 000000000000002c [ 114.402903][ T5322] [ 114.523269][ T5322] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.320: iget: bad extra_isize 90 (inode size 256) [ 114.551128][ T5322] EXT4-fs (loop4): Remounting filesystem read-only [ 114.558574][ T5324] EXT4-fs error: 165 callbacks suppressed [ 114.558591][ T5324] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 114.578965][ T5322] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.320: error while reading EA inode 11 err=-117 [ 114.592466][ T5324] EXT4-fs: 87 callbacks suppressed [ 114.592477][ T5324] EXT4-fs (sda1): Remounting filesystem read-only [ 114.604243][ T5322] EXT4-fs (loop4): Remounting filesystem read-only [ 114.610930][ T5322] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.618492][ T4012] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #121: comm crond: reading directory lblock 0 [ 114.624000][ T5324] EXT4-fs error (device sda1) in ext4_evict_inode:256: Journal has aborted [ 114.631024][ T5322] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.320: iget: bad extra_isize 90 (inode size 256) [ 114.660287][ T5324] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 114.671893][ T5324] EXT4-fs (sda1): Remounting filesystem read-only [ 114.678322][ T5324] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 114.681069][ T4012] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm crond: reading directory lblock 0 [ 114.693203][ T5324] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 114.709597][ T5322] EXT4-fs (loop4): Remounting filesystem read-only [ 114.716207][ T5322] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.320: error while reading EA inode 11 err=-117 [ 114.728505][ T5324] EXT4-fs (sda1): Remounting filesystem read-only [ 114.735211][ T5324] EXT4-fs error (device sda1) in ext4_evict_inode:256: Journal has aborted [ 114.743852][ T5322] EXT4-fs (loop4): Remounting filesystem read-only [ 114.750431][ T5322] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.320: iget: bad extra_isize 90 (inode size 256) [ 114.764993][ T5324] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 114.776525][ T5324] EXT4-fs (sda1): Remounting filesystem read-only [ 114.783073][ T5322] EXT4-fs (loop4): Remounting filesystem read-only [ 114.789705][ T5322] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.320: error while reading EA inode 18 err=-117 [ 114.790600][ T4269] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 114.820466][ T5322] EXT4-fs (loop4): Remounting filesystem read-only [ 114.821967][ T4269] EXT4-fs (sda1): Remounting filesystem read-only [ 114.827595][ T5322] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.320: iget: bad extra_isize 90 (inode size 256) [ 114.834507][ T4269] EXT4-fs (sda1): Remounting filesystem read-only [ 114.871338][ T5322] EXT4-fs (loop4): Remounting filesystem read-only [ 114.877921][ T5322] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.320: error while reading EA inode 18 err=-117 [ 114.893609][ T5322] EXT4-fs (loop4): Remounting filesystem read-only [ 114.900230][ T5322] EXT4-fs (loop4): 1 orphan inode deleted [ 114.906210][ T5322] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 114.982842][ T5322] EXT4-fs (loop4): unmounting filesystem. [ 115.122926][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.161358][ T5320] EXT4-fs (sda1): Remounting filesystem read-only [ 115.168915][ T5320] EXT4-fs (sda1): Remounting filesystem read-only [ 115.235041][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.322708][ T5322] EXT4-fs (sda1): Remounting filesystem read-only [ 115.330087][ T5322] EXT4-fs (sda1): Remounting filesystem read-only [ 115.341428][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.012794][ T9] device hsr_slave_0 left promiscuous mode [ 116.018961][ T9] device hsr_slave_1 left promiscuous mode [ 116.025226][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.032695][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.040184][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.047758][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.055758][ T9] device bridge_slave_1 left promiscuous mode [ 116.062567][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.070370][ T9] device bridge_slave_0 left promiscuous mode [ 116.076714][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.085881][ T9] device veth1_macvtap left promiscuous mode [ 116.091939][ T9] device veth0_macvtap left promiscuous mode [ 116.098148][ T9] device veth1_vlan left promiscuous mode [ 116.104238][ T9] device veth0_vlan left promiscuous mode [ 116.224297][ T9] team0 (unregistering): Port device team_slave_1 removed [ 116.234797][ T9] team0 (unregistering): Port device team_slave_0 removed [ 116.256223][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.277304][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.325423][ T9] bond0 (unregistering): Released all slaves [ 116.705457][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.745628][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.783934][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.834345][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.910675][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.964261][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.005533][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.044705][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.322708][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.374831][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.416149][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.454153][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.537848][ T9] tipc: Left network mode [ 117.543447][ T9] tipc: Left network mode [ 117.549027][ T9] tipc: Left network mode [ 118.552055][ T9] device hsr_slave_0 left promiscuous mode [ 118.558186][ T9] device hsr_slave_1 left promiscuous mode [ 118.564771][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.572250][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.579681][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.587204][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.594880][ T9] device bridge_slave_1 left promiscuous mode [ 118.601243][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.609169][ T9] device bridge_slave_0 left promiscuous mode [ 118.615747][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.628140][ T9] device hsr_slave_0 left promiscuous mode [ 118.637272][ T9] device hsr_slave_1 left promiscuous mode [ 118.643954][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.651605][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.659066][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.666628][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.676691][ T9] device bridge_slave_1 left promiscuous mode [ 118.682993][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.691315][ T9] device bridge_slave_0 left promiscuous mode [ 118.697508][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.707290][ T9] device hsr_slave_0 left promiscuous mode [ 118.713510][ T9] device hsr_slave_1 left promiscuous mode [ 118.719610][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.727158][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.734963][ T9] device bridge_slave_1 left promiscuous mode [ 118.741471][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.749445][ T9] device bridge_slave_0 left promiscuous mode [ 118.755713][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.765144][ T9] device hsr_slave_0 left promiscuous mode [ 118.771335][ T9] device hsr_slave_1 left promiscuous mode [ 118.777434][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.784954][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.792503][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.799891][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.807527][ T9] device batadv1 left promiscuous mode [ 118.813302][ T9] bridge0: port 3(batadv1) entered disabled state [ 118.820434][ T9] device bridge_slave_1 left promiscuous mode [ 118.826985][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.835152][ T9] device bridge_slave_0 left promiscuous mode [ 118.841515][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.854019][ T9] device veth1_macvtap left promiscuous mode [ 118.860019][ T9] device veth0_macvtap left promiscuous mode [ 118.866148][ T9] device veth1_vlan left promiscuous mode [ 118.872058][ T9] device veth0_vlan left promiscuous mode [ 118.878374][ T9] device veth1_macvtap left promiscuous mode [ 118.884517][ T9] device veth0_macvtap left promiscuous mode [ 118.890551][ T9] device veth1_vlan left promiscuous mode [ 118.896554][ T9] device veth0_vlan left promiscuous mode [ 118.903335][ T9] device veth1_macvtap left promiscuous mode [ 118.909326][ T9] device veth0_macvtap left promiscuous mode [ 118.915494][ T9] device veth1_vlan left promiscuous mode [ 118.921428][ T9] device veth0_vlan left promiscuous mode [ 119.112731][ T9] team0 (unregistering): Port device team_slave_1 removed [ 119.133339][ T9] team0 (unregistering): Port device team_slave_0 removed [ 119.153008][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.169367][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.225177][ T9] bond0 (unregistering): Released all slaves [ 119.339586][ T9] bond1 (unregistering): Released all slaves [ 119.417418][ T9] team0 (unregistering): Port device team_slave_1 removed [ 119.442224][ T9] team0 (unregistering): Port device team_slave_0 removed [ 119.464948][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.485827][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.545246][ T9] bond0 (unregistering): Released all slaves [ 119.681197][ T3934] EXT4-fs error: 300 callbacks suppressed [ 119.681210][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 119.709462][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 119.734194][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 119.778386][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 119.793096][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 119.813665][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 119.828469][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 119.901303][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm dhcpcd: reading directory lblock 0 [ 119.937582][ T9] team0 (unregistering): Port device team_slave_1 removed [ 119.965839][ T9] team0 (unregistering): Port device team_slave_0 removed [ 119.992972][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.023200][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.197571][ T9] bond0 (unregistering): Released all slaves [ 120.329891][ T9] team0 (unregistering): Port device team_slave_1 removed [ 120.349377][ T9] team0 (unregistering): Port device team_slave_0 removed [ 120.369020][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.389115][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.421957][ T9] team0 (unregistering): Port device bond0 removed [ 120.444563][ T9] bond0 (unregistering): Released all slaves [ 120.499411][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 120.510977][ T3639] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0