last executing test programs: 49.098252017s ago: executing program 4 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000001800010027bd7000fedbdf2502201000fd00fe020000000008000400", @ANYBLOB='\b\x00\a'], 0x2c}, 0x1, 0x0, 0x0, 0xe005}, 0x20004090) 49.08549913s ago: executing program 4 (id=460): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[], 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0x3, "0affff"}}, 0x9) 42.672591223s ago: executing program 4 (id=577): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f656", 0x3}], 0x1}}], 0x1, 0x4000000) write(r0, &(0x7f0000001f00)="ef97646110265cf65eda0c997a00976ca6b72e643a4d71f06f4e112955fa9b595e718de352b21791dd333109ee5f4b0fb02caaf507c2e7aaf9adb3662a145451969da96427a09e58c069ef95473af4dfefeed6e3ecc1e724936fecd6c2d606b30eeb8c15e39738cf1338fc4643c5a3f0b5775b1834a7dd01e491668a1139efd38a9f014a061561e5bbde8983024934a37349907a9629c8e7ed11c31f288d48baed9dfb44bd33dba6bd292aad455d53d0c6f09126918f54e663d71c3506756e3eca40c1c7d2b3173d11d86322843bc6ee4beeff184bfeb2f15cfd1ae189bb68995feab724d720656d528d8b67823c02941343f1f478e74a152bdc0a55b2ce0c3dfb338c25e4b63a3a3063c240ea4a0712507fad227c65b7da6ed66f943a61c724a0db0d774b994b4fc8ddc44a10c32f59e555e5d1b07195df685079189c3140956b641b5617e9bab446bc57bd614e99827f8e1797ec6d59fc7cf1057bd947f233de2e12d217aa517da60e38a648e3a3ef7359bacef04e583e430786d6606bc06d8d48297e76deaecc592b98ff4c4024f7cbb9ab9b3d0c5aa08e940fdc7462fd7e92632f3a36576d83088a30f960b69d972c263d6d5a21f4f69b131f762326bddbcc121602419c39bd32a198a9996df6e84f9f09ffe48c3c9581158c0fdeca83338d36f6e5665f090a667d0c62c967a87b6099f4c03c87ee4c09d2d47724f7b7a69d7c1f06936eb49bb92dd9ff83859c3a0218d618a8831666d7060ef6f39af904daf0bf662f7ae82b1527f3251dbebded35df44065981f486bfff3a3493e6b5c9eaef877d7a74356b1d83a0d65df13789ad181270d98d1f09a9e021354910cf891ae4f027bd4864b8d6888b807b70b499eb0d934c1f899ac1cbb8378da0e43c0161003d0d8107e0367174107436ab7b7199373d30415d89a77a0c91c313a191bb95751ed33cdb641b0a7d2a57166941ec6d68461cfc1d7b01f3f560f2d06669ac83b83c210593f1072f985a623cc7167353272b4aa91e9d1d4f992ba9e38841818850e90f144671f7730a998f58136ef67d1eb18d0f2e46f71c2a9d34f0122295185bdeb2f4172dac7534801ad577c77e962fa2b195e7541772d563df75f2c4667bc4dfa8cbbfc0283e3a299232ba8945f2da080b64e26c44292f097ce185571cd8ed031b26bfef46134a66bd71967bc90cdbe3ff65c589604727d952a46a2f32bc393ef72713c84f6d6b200b8050232009c7066c8c7523d28e451dc6e243955474f885dee66ad9639e90034751cf3d225646d2ed7e16e74887eb8dada57640e6d5b58e5419fb11cf63d1caf311ad24114aac0c0a4095d8e10c0ff9039f099d201b7f3a5ec74d9b220f2b9ba9d67456dd053d872c6f5dd1340fb56fbacefd34a4bc7ca6a12957ebf648e79878e908800c3b33eb271c6fe6008b83e70ef156910059ad58e7e47db24f824c23feeb8da94ebc56c938d3e80dc9bf95aba44093529390ad31e44dcea486b90b7ffc4d6cda130584c3c4340754423dcb4a075db5ee177be9bf6e6a6eecd3c23592d2e48901b8b5cdad3fa3140bf819e8c28bb4293c18452be2766d1960438e21275dd840a4314a9251e67b3d799f567b6114a67955fe10c82e36e775a039fa826b3b849f30ca34b9ffdf5fdaf19862d9c5962e07992711dec34d61b48104cc27c1eb9eddffeeffe82567e23905bab084071304e1373ef53bd3ca53a44eaf699890757453a2882eaecc59e7610e66db46b93c8d1376b7dd424a08344f9443a92029a566496ecedbf9ace7ffb2ff6503daabac197bc4158159062703818af07db6dbfd773342ff68a0ca5504607ea545e33ff46454392c07f878cecbc4f03c611af8e76b5706a5bbbcf7db03eaebf41fe5b562848eed6264ef94d80aa6fec84dd75aa31accac6b352d77cf9db16609fd606982e4061e1a14947fa257d1c1812c990297027ba7d247e8dc775dc231d318f1019c4f9da720f52a3b1da63b66b8da7f0e93cf2fbe48d818d3921854bac96903ff4cc1dcbc09b737d4259e4e2104e3c996362ca9d0a503f4de2912eb14c92ca57a6655ce0fbc283de04d7aaa887226d090886427024006fca8603f7777ddf5875e72b809a81781b48cb2c4c1c5adf7de8e0a0cca35cdfdb030c91f1b981b2e36cdcf1ba6304483694ec6e310816237cdcebd593e8c0ec18d6446bddb62970077b97a0715545e7ea2fe91a29f828dd1e18c1668bb313f6a8e25e72c9df900f1d0d4c6e4a0fbc222615d2033eee134dcb85d9e6b059b28964f17b048f1a78a4c34e54cf9accd06198e145c4c4f01e856215e55108e55db71ddcc538a649a8016d73d422a550f377f79cc2a460249eade98ed4e082ab1ada4b9ee7024fb", 0x696) 42.607003912s ago: executing program 4 (id=580): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000020c0)={&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000001340)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x3}, 0x0, 0x0, 0x7, 0x1000, 0xef, 0x3, 0xc, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0x7, 0x4}, {0x0, 0xf7}, &(0x7f0000001300)=[{&(0x7f0000001200)=""/247, 0xf7}], 0x1, 0xc, 0x400}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x6}, {0x0}, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/10, 0xa}], 0x1, 0x6, 0x10001}}], 0xe8, 0x4008090}, 0x0) 42.50264871s ago: executing program 4 (id=583): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 42.426695728s ago: executing program 4 (id=587): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 34.683885127s ago: executing program 3 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_USERDATA={0x9, 0xd, 0x1, 0x0, "0a3bbaa1e7"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000014}, 0x40) 34.598695278s ago: executing program 3 (id=847): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x5, @loopback, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x20040004) 34.598240718s ago: executing program 3 (id=849): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) 34.577843131s ago: executing program 3 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x101899, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) 34.48666125s ago: executing program 3 (id=852): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 33.775978195s ago: executing program 3 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000200080006"], 0x4c}}, 0x0) 33.714958308s ago: executing program 32 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000200080006"], 0x4c}}, 0x0) 27.310526982s ago: executing program 33 (id=587): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 15.706435269s ago: executing program 2 (id=1266): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000697000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000817000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000696000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) 15.706206869s ago: executing program 2 (id=1267): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendto$phonet(r0, &(0x7f0000000700)='b0', 0x2, 0x48800, 0x0, 0x0) 15.675723954s ago: executing program 2 (id=1271): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x22020400) r0 = socket(0x40000000015, 0x5, 0x0) bind$rds(r0, &(0x7f0000000140)={0x2, 0x4a27, @empty}, 0x5) 15.618524794s ago: executing program 2 (id=1273): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x0) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/trace_pipe\x00', 0x800, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 15.567858958s ago: executing program 2 (id=1278): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 13.950517098s ago: executing program 2 (id=1300): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)="0b467ad1009c03745f6b815f3be51270aea754f89352207a71e2d18106b9a5ca0ce6d47fda5768d8f90d92fe8d2fa386c4cf6600eb4825a6dbdd83b490c276d688928882143b5950783ec82bf5f5cbbaca94827b0952039a60e007d77a83b970ebb88b6be62e4a8ecc1c861542cfe4e3ebb7c0ee246d43434c4f8a92bef73efa567c0d66550e37706daaaf9443fcf8bcd3af74502b20ce8f49af1af4c655777ade1bd2e205893dcebf0597c312678019bfc77964480dcbbcf39ecf876cff3737ee89878ae875a3ef7864d9495cb867e2e55e8a582f4716c772880b782e2ce5", 0xdf}], 0x1}}], 0x1, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) 13.930491723s ago: executing program 34 (id=1300): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)="0b467ad1009c03745f6b815f3be51270aea754f89352207a71e2d18106b9a5ca0ce6d47fda5768d8f90d92fe8d2fa386c4cf6600eb4825a6dbdd83b490c276d688928882143b5950783ec82bf5f5cbbaca94827b0952039a60e007d77a83b970ebb88b6be62e4a8ecc1c861542cfe4e3ebb7c0ee246d43434c4f8a92bef73efa567c0d66550e37706daaaf9443fcf8bcd3af74502b20ce8f49af1af4c655777ade1bd2e205893dcebf0597c312678019bfc77964480dcbbcf39ecf876cff3737ee89878ae875a3ef7864d9495cb867e2e55e8a582f4716c772880b782e2ce5", 0xdf}], 0x1}}], 0x1, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) 7.713566413s ago: executing program 0 (id=1477): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000001cc0)=[@in6={0xa, 0x4e24, 0x1, @loopback, 0x4800}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_int(r0, 0x84, 0x3, 0x0, 0x0) 7.366726256s ago: executing program 7 (id=1496): r0 = socket$tipc(0x1e, 0x5, 0x0) fsetxattr(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="757365722e2d3a162713c9e57e1a01b9192c52265d00"], &(0x7f0000000180)='\x00', 0x1, 0x1) close(r0) 7.366617773s ago: executing program 7 (id=1497): r0 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x2001}, 0x10) bind$tipc(r1, 0x0, 0x0) close_range(r0, r1, 0x0) 7.366536251s ago: executing program 7 (id=1498): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x7, 0x9, 0xffff, 0xfffffffffffffff2, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048084}, 0x8080) 7.354308765s ago: executing program 7 (id=1499): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x163) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002140)=ANY=[], 0xe) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x5b000}], 0x1, 0x5a00, 0x0, 0x3) 7.295795302s ago: executing program 7 (id=1500): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r3], 0x50}, 0x4, 0x700000000000000}, 0x0) 6.974677853s ago: executing program 7 (id=1501): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) r1 = gettid() ptrace$setopts(0x4206, r1, 0xfffffffffffffcab, 0x3f) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 6.972749639s ago: executing program 35 (id=1501): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) r1 = gettid() ptrace$setopts(0x4206, r1, 0xfffffffffffffcab, 0x3f) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 6.47049541s ago: executing program 0 (id=1507): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r0) 6.390729458s ago: executing program 0 (id=1510): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001", @ANYRES32=0x0], 0xb8}}, 0x0) 6.336476302s ago: executing program 0 (id=1513): mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, 0x0) 6.24287148s ago: executing program 0 (id=1519): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) 5.058152216s ago: executing program 0 (id=1540): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r0, 0x2) 4.873026108s ago: executing program 36 (id=1540): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r0, 0x2) 2.07828998s ago: executing program 5 (id=1604): prctl$PR_SET_TSC(0x1a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x4) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000004040)=[{0x3, &(0x7f0000003fc0)=0x3, 0x82}], 0x1, 0x100000000000000, &(0x7f0000000280)={0x77359400}, 0x0) 1.224586237s ago: executing program 5 (id=1649): r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x1d8}}], 0x1, 0x41) 1.146490014s ago: executing program 5 (id=1652): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getpgid(0x0) syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000100)=0x1b) 1.062716938s ago: executing program 8 (id=1657): socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x897, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x34d1, 0x16, 0x0, 0x0) 1.062182574s ago: executing program 8 (id=1660): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000001140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 1.03425518s ago: executing program 8 (id=1662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000a80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x23ba}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x5c93067603d2de2a, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 959.956537ms ago: executing program 9 (id=1668): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/114, 0x72}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fdffff"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 802.26593ms ago: executing program 9 (id=1671): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x2f, "5c83094108ee6f25e4c1c94f446411fde3d70a47afb89e1e00ff000002000000335b021f550000000000000000ff00"}}) 722.80942ms ago: executing program 9 (id=1673): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = eventfd2(0x4f9e1aa, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 704.615594ms ago: executing program 9 (id=1677): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={0x0, 0x71c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10080) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) 594.574867ms ago: executing program 6 (id=1681): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000440), 0x3, 0x465, &(0x7f0000000f00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) 594.467174ms ago: executing program 1 (id=1682): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaeaaaaaaaaaaaa86dd606410a600080001fe800000000000000000000000000012000000000000000000"], 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x7f, 0x3) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 512.327714ms ago: executing program 6 (id=1683): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="5500000020007fafb72d1392a4a2719302000000030b43026c26236925000400fe7f0004002dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 388.635073ms ago: executing program 5 (id=1684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) 326.744778ms ago: executing program 1 (id=1685): writev(0xffffffffffffffff, &(0x7f0000001a00)=[{&(0x7f0000000940)="88", 0x1}], 0x1) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x97ff) 300.016855ms ago: executing program 1 (id=1686): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000)=r2, 0x4) 272.644855ms ago: executing program 6 (id=1687): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001e"], 0x14}}, 0x4000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 190.799342ms ago: executing program 5 (id=1688): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)="86f983f24383df3a", 0x8) 190.618329ms ago: executing program 9 (id=1689): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$9p(r0, &(0x7f0000000340)="208b", 0x2) 190.529983ms ago: executing program 1 (id=1690): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x56}, {&(0x7f0000000100)="08000000200137f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b374d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x127}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 173.588119ms ago: executing program 1 (id=1691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11"], 0x4a) 169.405462ms ago: executing program 5 (id=1692): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000f87000/0x3000)=nil, 0x3000) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) munlockall() 114.77067ms ago: executing program 8 (id=1693): sendmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x20, 0x107, 0x5c, "a8bbaa528ae34b21dcf328"}, {0x100, 0xff, 0x3, "50a929da682ceb0cd0d8901ffa6a06475a91e253cab213bba389b7911f74660f826d9141781abc96d320410f876664c936536462eb3d5321965e1dd65ed323acc0f95411a99ae12a4f36650c8b1189aae5bda4ec7971a6eb78b643c1b6fac2de9550d13c20de2140b637b6ad8ddce38ac2c9075e98fba889d6785cfe4c490ea6a719b536f7b71f6d181378e4f085d3c504c01b56da95975090c02ebb18311078a87a4db332cddd11a8e617a7579221b5ce3840108810d73f0fc0a26c38416629cd28fc491ae15f07a2f2ea420933fe878d0ca8bb11873d1e225212e05cde3ff5bb20981b310eccc945"}, {0xa8, 0x113, 0x80000001, "9829b11cebaee0912b042b6dc31947fafc0eba856f8985d7dbe6e3259445fbc591dc276651917d4bd537cc1ef21833db5a02a1c9fd19366de6148573cccd7cf525a5e29404d5c7bd7fe10994818a77f289cbcf7bc96e33bcaa4e845d7170d11306467ac16bd8d81bb6ff703508fd9f0f5a4e750de4b12f66f514ffefdbf0b181ac78d160a0057b834fd304ee26d026287d59"}], 0x1c8}}], 0x1, 0x20000001) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000007c0)) 114.63896ms ago: executing program 6 (id=1694): socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000080)={0x28}) 98.411189ms ago: executing program 8 (id=1695): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x40080) 85.479167ms ago: executing program 6 (id=1696): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x3, 0x7ffc0001}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 18.819815ms ago: executing program 9 (id=1697): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000000c0)=@raw=[@tail_call], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 18.703413ms ago: executing program 6 (id=1698): r0 = io_uring_setup(0x358f, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) 7.71083ms ago: executing program 8 (id=1699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001028cf728ee7cb67d30000000300000a50000000060a010400000000000000000a0000110900010073797a310000000024000480200001800700010063740000140002800800024000000011080004400000000009"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 0s ago: executing program 1 (id=1700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x8, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d83b0fa, 0x1a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4050) kernel console output (not intermixed with test programs): ce with an up link [ 31.202492][ T4728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.208173][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.209735][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.211702][ T4721] bridge_slave_0: entered allmulticast mode [ 31.213423][ T4721] bridge_slave_0: entered promiscuous mode [ 31.225451][ T4714] team0: Port device team_slave_0 added [ 31.227179][ T4728] team0: Port device team_slave_0 added [ 31.228314][ T4728] team0: Port device team_slave_1 added [ 31.231429][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.232978][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.234329][ T4721] bridge_slave_1: entered allmulticast mode [ 31.235889][ T4721] bridge_slave_1: entered promiscuous mode [ 31.246809][ T4714] team0: Port device team_slave_1 added [ 31.254713][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.254986][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.255059][ T4718] bridge_slave_0: entered allmulticast mode [ 31.255496][ T4718] bridge_slave_0: entered promiscuous mode [ 31.257285][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.257314][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.257371][ T4718] bridge_slave_1: entered allmulticast mode [ 31.257831][ T4718] bridge_slave_1: entered promiscuous mode [ 31.259694][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.261043][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.265072][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.265082][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.265092][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.280630][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.281998][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.286141][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.288855][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.288892][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.288904][ T4728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.289490][ T4728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.289497][ T4728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.289508][ T4728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.305716][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.307181][ T4721] team0: Port device team_slave_0 added [ 31.309861][ T4721] team0: Port device team_slave_1 added [ 31.318884][ T4728] hsr_slave_0: entered promiscuous mode [ 31.319252][ T4728] hsr_slave_1: entered promiscuous mode [ 31.323707][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.329991][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.331306][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.336240][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.336971][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.336978][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.336989][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.348174][ T4721] hsr_slave_0: entered promiscuous mode [ 31.348754][ T4721] hsr_slave_1: entered promiscuous mode [ 31.348984][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 31.349031][ T4721] Cannot create hsr debugfs directory [ 31.357159][ T4714] hsr_slave_0: entered promiscuous mode [ 31.357498][ T4714] hsr_slave_1: entered promiscuous mode [ 31.357717][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 31.357727][ T4714] Cannot create hsr debugfs directory [ 31.362255][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.363615][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.364981][ T4724] bridge_slave_0: entered allmulticast mode [ 31.366657][ T4724] bridge_slave_0: entered promiscuous mode [ 31.367691][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.367714][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.367771][ T4724] bridge_slave_1: entered allmulticast mode [ 31.368197][ T4724] bridge_slave_1: entered promiscuous mode [ 31.383712][ T4718] team0: Port device team_slave_0 added [ 31.389344][ T4724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.390482][ T4724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.399741][ T4718] team0: Port device team_slave_1 added [ 31.420446][ T4724] team0: Port device team_slave_0 added [ 31.421348][ T4724] team0: Port device team_slave_1 added [ 31.428617][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.429995][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.434967][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.448075][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.449415][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.453965][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.461729][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.461750][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.461776][ T4724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.472275][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.473648][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.476449][ T4724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.509223][ T4718] hsr_slave_0: entered promiscuous mode [ 31.509550][ T4718] hsr_slave_1: entered promiscuous mode [ 31.509741][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 31.509751][ T4718] Cannot create hsr debugfs directory [ 31.548575][ T4724] hsr_slave_0: entered promiscuous mode [ 31.548938][ T4724] hsr_slave_1: entered promiscuous mode [ 31.549127][ T4724] debugfs: 'hsr0' already exists in 'hsr' [ 31.549137][ T4724] Cannot create hsr debugfs directory [ 31.591884][ T4714] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.595551][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.599340][ T4714] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.602032][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.605738][ T4714] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.608701][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.616735][ T4714] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.619164][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.644198][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.644258][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.644474][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.644521][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.646273][ T4721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.648521][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.648851][ T4721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.650735][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.652338][ T4721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.654619][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.654965][ T4721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.657387][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.684674][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.684743][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.684815][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.684843][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.691249][ T4728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.692358][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.707334][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.718061][ T4728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.720334][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.721901][ T4718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.724267][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.724929][ T4718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.727109][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.737750][ T4728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.739932][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.740667][ T4728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.742223][ T4728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.742382][ T4718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.744464][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.744770][ T4718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.748443][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.759523][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.761470][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.764060][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.765840][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.776234][ T4724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.778672][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.785541][ T4724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.788216][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.790183][ T4724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.792416][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.794037][ T4724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.796794][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.798803][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.800726][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.810639][ T1520] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.810700][ T1520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.817638][ T1520] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.817691][ T1520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.826876][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.841005][ T1190] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.841053][ T1190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.841521][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.841540][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.852725][ T4721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.854676][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.885431][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.900450][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.914838][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.918252][ T1190] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.918300][ T1190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.931681][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.931731][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.937549][ T4728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.959581][ T4724] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.970308][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.970352][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.981404][ T4728] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.995553][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.995609][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.005663][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.005713][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.007885][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.007911][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.013604][ T4724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.014119][ T4724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.051922][ T4728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.051968][ T4728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.110898][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.135177][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.152359][ T4714] veth0_vlan: entered promiscuous mode [ 32.165880][ T4714] veth1_vlan: entered promiscuous mode [ 32.184178][ T4714] veth0_macvtap: entered promiscuous mode [ 32.200081][ T4714] veth1_macvtap: entered promiscuous mode [ 32.201543][ T4721] veth0_vlan: entered promiscuous mode [ 32.209872][ T4721] veth1_vlan: entered promiscuous mode [ 32.223282][ T4721] veth0_macvtap: entered promiscuous mode [ 32.225773][ T4721] veth1_macvtap: entered promiscuous mode [ 32.232131][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.233296][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.244261][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.246786][ T1520] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.247399][ T1520] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.247418][ T1520] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.247434][ T1520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.254121][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.258195][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.294389][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.298306][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.298726][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.298855][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.299032][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.344957][ T4728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.370643][ T4724] veth0_vlan: entered promiscuous mode [ 32.372077][ T4728] veth0_vlan: entered promiscuous mode [ 32.380675][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.380709][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.383780][ T4728] veth1_vlan: entered promiscuous mode [ 32.389934][ T4724] veth1_vlan: entered promiscuous mode [ 32.404996][ T804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.405037][ T804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.407247][ T4728] veth0_macvtap: entered promiscuous mode [ 32.408717][ T4728] veth1_macvtap: entered promiscuous mode [ 32.414277][ T4724] veth0_macvtap: entered promiscuous mode [ 32.428196][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.428224][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.429632][ T4724] veth1_macvtap: entered promiscuous mode [ 32.432166][ T4718] veth0_vlan: entered promiscuous mode [ 32.435506][ T4718] veth1_vlan: entered promiscuous mode [ 32.438781][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.453134][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.457588][ T4728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.460393][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.460423][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.464363][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.480032][ T4714] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.507936][ T4718] veth0_macvtap: entered promiscuous mode [ 32.543436][ T4718] veth1_macvtap: entered promiscuous mode [ 32.554771][ T4893] loop0: detected capacity change from 0 to 8192 [ 32.587650][ T1520] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.588090][ T1520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.588115][ T1520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.588136][ T1520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.588153][ T1520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.588169][ T1520] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.588185][ T1520] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.588201][ T1520] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.594543][ T1190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.594552][ T1190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.603502][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.604715][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.641758][ T4895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 32.645982][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.646112][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.646229][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.648044][ T1520] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.648243][ T1520] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.648372][ T1520] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.652344][ T1190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.652355][ T1190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.683052][ T1520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.683086][ T1520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.693185][ T1520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.693225][ T1520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.719168][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.719202][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.739123][ T4899] input: syz1 as /devices/virtual/input/input2 [ 32.796669][ T4717] Bluetooth: hci3: command tx timeout [ 32.796837][ T4717] Bluetooth: hci1: command tx timeout [ 32.796925][ T4717] Bluetooth: hci2: command tx timeout [ 32.804780][ T4909] 9p: Bad value for 'wfdno' [ 32.807074][ T50] Bluetooth: hci4: command tx timeout [ 32.807303][ T4717] Bluetooth: hci0: command tx timeout [ 32.855761][ T4913] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8'. [ 32.860387][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 32.862797][ T4915] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 32.875423][ T4915] loop2: detected capacity change from 0 to 1024 [ 32.892311][ T4915] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec028, mo2=0002] [ 32.892396][ T4915] System zones: 0-1, 3-12 [ 32.896980][ T4915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.901687][ T4915] EXT4-fs error (device loop2): ext4_empty_dir:3125: inode #11: block 42: comm syz.2.9: bad entry in directory: inode out of bounds - offset=10240, inode=100663296, rec_len=1024, size=1024 fake=0 [ 32.902653][ T4915] EXT4-fs (loop2): Remounting filesystem read-only [ 32.918663][ T4728] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.944662][ T4929] loop3: detected capacity change from 0 to 256 [ 33.231396][ T4939] loop1: detected capacity change from 0 to 512 [ 33.239979][ T4939] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.13: corrupted inode contents [ 33.240036][ T4939] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.241829][ T4939] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 33.241898][ T4939] loop1: lost filesystem error report for type 5 error -117 [ 33.242171][ T4939] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.13: corrupted inode contents [ 33.242185][ T4939] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.242303][ T4939] EXT4-fs error (device loop1): ext4_evict_inode:315: inode #15: comm syz.1.13: mark_inode_dirty error [ 33.242314][ T4939] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.242485][ T4939] EXT4-fs (loop1): 1 orphan inode deleted [ 33.243979][ T4939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.274273][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 33.278466][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.587886][ T4961] binder: 4942:4961 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 33.682057][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 33.684283][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 33.702898][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.702942][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.705183][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.705195][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.869235][ T4977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25'. [ 33.880080][ T4977] nbd: socks must be embedded in a SOCK_ITEM attr [ 33.888767][ T4977] Zero length message leads to an empty skb [ 33.897641][ T4979] Cannot find del_set index 1 as target [ 33.914887][ T4706] udevd[4706]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 33.918137][ T4706] udevd[4706]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 33.964642][ T4983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26'. [ 33.964878][ T4983] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.965272][ T4983] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.991735][ T4987] hugetlbfs: Bad value 'e' for mount option 'nr_inodes' [ 33.991735][ T4987] [ 34.147548][ T4993] af_packet: packet size is too long (7388460 > 736) [ 34.229997][ T4998] loop1: detected capacity change from 0 to 128 [ 34.230398][ T4998] ======================================================= [ 34.230398][ T4998] WARNING: The mand mount option has been deprecated and [ 34.230398][ T4998] and is ignored by this kernel. Remove the mand [ 34.230398][ T4998] option from the mount to silence this warning. [ 34.230398][ T4998] ======================================================= [ 34.245318][ T4998] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.262285][ T4998] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 34.274678][ T4714] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.449081][ T5025] loop2: detected capacity change from 0 to 256 [ 34.461296][ T5025] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 34.461334][ T5025] FAT-fs (loop2): Filesystem has been set read-only [ 34.494261][ T5029] warning: `syz.2.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 34.519531][ T5031] loop2: detected capacity change from 0 to 512 [ 34.521504][ T5031] EXT4-fs: Ignoring removed bh option [ 34.533529][ T5031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.539720][ T5031] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 18: comm syz.2.42: lblock 23 mapped to illegal pblock 18 (length 1) [ 34.542495][ T5031] EXT4-fs (loop2): Remounting filesystem read-only [ 34.544457][ T5031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 34.560508][ T4728] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.579181][ T5039] loop2: detected capacity change from 0 to 512 [ 34.586785][ T5039] EXT4-fs: Ignoring removed oldalloc option [ 34.586912][ T5039] /dev/loop2: Can't open blockdev [ 34.685406][ T5049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 34.793275][ T5059] process 'syz.2.48' launched './file2' with NULL argv: empty string added [ 34.893305][ T4717] Bluetooth: hci4: command tx timeout [ 34.893323][ T50] Bluetooth: hci0: command tx timeout [ 34.893349][ T4717] Bluetooth: hci2: command tx timeout [ 34.893358][ T50] Bluetooth: hci1: command tx timeout [ 34.893383][ T4717] Bluetooth: hci3: command tx timeout [ 34.912017][ T4723] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 34.955458][ T5076] loop2: detected capacity change from 0 to 256 [ 35.072420][ T5091] loop3: detected capacity change from 0 to 512 [ 35.074072][ T5091] EXT4-fs (loop3): bad s_want_extra_isize: 2080 [ 35.144459][ T5096] Injecting memory failure for pfn 0x11f8b1 at process virtual address 0x20000000 [ 35.151798][ T5096] Memory failure: 0x11f8b1: Sending SIGBUS to syz.2.58:5096 due to hardware memory corruption [ 35.151894][ T5096] Memory failure: 0x11f8b1: recovery action for dirty LRU page: Recovered [ 35.152289][ T5096] Injecting memory failure for pfn 0x219270 at process virtual address 0x20001000 [ 35.152371][ T5096] Memory failure: 0x219270: unhandlable page. [ 35.152380][ T5096] Memory failure: 0x219270: recovery action for get hwpoison page: Ignored [ 36.893677][ T5142] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.893727][ T5142] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.907958][ T5142] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.70: invalid indirect mapped block 9 (level 0) [ 36.908005][ T5142] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.914068][ T5142] EXT4-fs (loop3): 1 truncate cleaned up [ 36.921015][ T5137] batadv_slave_1: entered promiscuous mode [ 36.925721][ T5142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.956601][ T50] Bluetooth: hci2: command tx timeout [ 36.957206][ T50] Bluetooth: hci4: command tx timeout [ 36.959444][ T4723] Bluetooth: hci3: command tx timeout [ 36.962742][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.966593][ T4723] Bluetooth: hci1: command tx timeout [ 36.966632][ T4723] Bluetooth: hci0: command tx timeout [ 37.105382][ T5155] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.794559][ T30] audit: type=1326 audit(37.780:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5227 comm="syz.2.107" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc179228 code=0x0 [ 37.818397][ T5232] bridge_slave_0: left allmulticast mode [ 37.819604][ T5232] bridge_slave_0: left promiscuous mode [ 37.820860][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.824484][ T5232] bridge_slave_1: left allmulticast mode [ 37.824515][ T5232] bridge_slave_1: left promiscuous mode [ 37.824891][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.833451][ T5232] bond0: (slave bond_slave_0): Releasing backup interface [ 37.858844][ T5232] bond0: (slave bond_slave_1): Releasing backup interface [ 37.900140][ T5232] team0: Port device team_slave_0 removed [ 37.904504][ T5232] team0: Port device team_slave_1 removed [ 37.906514][ T5232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.908048][ T5232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.910295][ T5232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.910328][ T5232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.912696][ T5232] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 37.944780][ T5235] __nla_validate_parse: 6 callbacks suppressed [ 37.944825][ T5235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.111'. [ 37.956481][ T4806] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.107239][ T4806] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 38.109783][ T4806] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 38.109819][ T4806] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 38.109843][ T4806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.122330][ T4806] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 38.170380][ T5261] set_capacity_and_notify: 5 callbacks suppressed [ 38.171828][ T5261] loop4: detected capacity change from 0 to 1024 [ 38.173591][ T5261] EXT4-fs: inline encryption not supported [ 38.178733][ T5261] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.190459][ T5261] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.121: Invalid inode bitmap blk 0 in block_group 0 [ 38.190505][ T5261] loop4: lost filesystem error report for type 5 error -117 [ 38.191479][ T5261] EXT4-fs (loop4): Remounting filesystem read-only [ 38.191509][ T5261] EXT4-fs (loop4): 1 orphan inode deleted [ 38.192003][ T5261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.209691][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.230741][ T5252] loop1: detected capacity change from 0 to 32768 [ 38.246329][ T39] EXT4-fs (loop4): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 38.246364][ T39] Quota error (device loop4): write_blk: dquota write failed [ 38.246385][ T39] Quota error (device loop4): remove_free_dqentry: Can't write block (2) with free entries [ 38.246401][ T39] EXT4-fs (loop4): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 38.246416][ T39] Quota error (device loop4): write_blk: dquota write failed [ 38.246428][ T39] Quota error (device loop4): free_dqentry: Can't move quota data block (2) to free list [ 38.246464][ T39] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 38.246476][ T39] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 38.278207][ T5252] loop1: p1 p3 < > [ 38.325417][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 38.325681][ T4708] udevd[4708]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 38.496715][ T5282] syzkaller0: entered promiscuous mode [ 38.497991][ T5282] syzkaller0: entered allmulticast mode [ 38.527360][ T5290] loop3: detected capacity change from 0 to 512 [ 38.533415][ T5290] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.134: invalid indirect mapped block 256 (level 2) [ 38.533644][ T5290] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.534031][ T5290] EXT4-fs (loop3): 2 truncates cleaned up [ 38.534521][ T5290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.613590][ T39] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 38.627089][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 38.627125][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 38.627125][ T39] [ 38.627146][ T39] EXT4-fs (loop3): Total free blocks count 0 [ 38.627160][ T39] EXT4-fs (loop3): Free/Dirty block details [ 38.627178][ T39] EXT4-fs (loop3): free_blocks=0 [ 38.627195][ T39] EXT4-fs (loop3): dirty_blocks=3040 [ 38.627207][ T39] EXT4-fs (loop3): Block reservation details [ 38.627218][ T39] EXT4-fs (loop3): i_reserved_data_blocks=3040 [ 38.656489][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 984 with error 28 [ 38.663299][ T4724] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 38.721970][ T5309] loop1: detected capacity change from 0 to 512 [ 38.751652][ T5309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.775035][ T30] audit: type=1326 audit(38.760:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5314 comm="syz.3.143" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79228 code=0x7ffc0000 [ 38.775076][ T30] audit: type=1326 audit(38.760:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5314 comm="syz.3.143" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79228 code=0x7ffc0000 [ 38.775110][ T30] audit: type=1326 audit(38.760:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5314 comm="syz.3.143" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff83b79228 code=0x7ffc0000 [ 38.789782][ T30] audit: type=1326 audit(38.780:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5314 comm="syz.3.143" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=210 compat=0 ip=0xffff83b79228 code=0x7ffc0000 [ 38.807689][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.886837][ T5323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.890084][ T5305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.103'. [ 38.892032][ T5323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.022164][ T5341] xt_hashlimit: size too large, truncated to 1048576 [ 39.028419][ T4798] IPVS: starting estimator thread 0... [ 39.036201][ T50] Bluetooth: hci1: command tx timeout [ 39.036242][ T50] Bluetooth: hci3: command tx timeout [ 39.036263][ T50] Bluetooth: hci4: command tx timeout [ 39.036281][ T50] Bluetooth: hci2: command tx timeout [ 39.040514][ T4717] Bluetooth: hci0: command tx timeout [ 39.052526][ T5345] syz.3.157 uses obsolete (PF_INET,SOCK_PACKET) [ 39.118309][ T5343] IPVS: using max 60 ests per chain, 144000 per kthread [ 39.168286][ T5359] netlink: 83 bytes leftover after parsing attributes in process `syz.1.163'. [ 39.258345][ T5367] veth0_macvtap: left promiscuous mode [ 39.267306][ T5369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.168'. [ 39.341587][ T5363] loop1: detected capacity change from 0 to 512 [ 39.343335][ T5363] ext4: Unknown parameter 'obj_user' [ 39.571471][ T4406] veth0_macvtap: entered promiscuous mode [ 39.645535][ T5417] loop3: detected capacity change from 0 to 512 [ 39.648403][ T5417] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.124268][ T5440] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 40.124294][ T5440] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 40.129185][ T5440] vhci_hcd vhci_hcd.0: Device attached [ 40.130460][ T5441] vhci_hcd: cannot find the pending unlink 4096 [ 40.131863][ T5441] vhci_hcd: connection closed [ 40.133584][ T12] vhci_hcd vhci_hcd.1: stop threads [ 40.136465][ T12] vhci_hcd vhci_hcd.1: release socket [ 40.137693][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 40.431056][ T5454] pim6reg: entered allmulticast mode [ 40.440266][ T5454] pim6reg: left allmulticast mode [ 40.453878][ T5459] loop3: detected capacity change from 0 to 512 [ 40.472620][ T5459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.572358][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.689798][ T5490] qrtr: Invalid version 7 [ 40.719679][ T4806] usb 1-1: USB disconnect, device number 2 [ 41.424221][ T5508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.211'. [ 42.592813][ T5597] netlink: 'syz.3.251': attribute type 18 has an invalid length. [ 42.694016][ T5608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.257'. [ 42.893421][ T5623] loop4: detected capacity change from 0 to 512 [ 42.897565][ T5623] EXT4-fs (loop4): 1 truncate cleaned up [ 42.898035][ T5623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.920847][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.023982][ T5636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 43.180783][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 43.180854][ T5657] netlink: 32 bytes leftover after parsing attributes in process `syz.4.279'. [ 43.388118][ T5682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 43.497768][ T5698] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 43.526504][ T5703] netlink: 52 bytes leftover after parsing attributes in process `syz.2.302'. [ 43.529078][ T5703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.302'. [ 43.612921][ T5716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.306'. [ 43.719771][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 43.719825][ T30] audit: type=1326 audit(43.710:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5723 comm="syz.2.311" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc179228 code=0x7ffc0000 [ 43.725398][ T30] audit: type=1326 audit(43.710:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5723 comm="syz.2.311" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc179228 code=0x7ffc0000 [ 43.725447][ T30] audit: type=1326 audit(43.710:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5723 comm="syz.2.311" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffffbc179228 code=0x7ffc0000 [ 43.725475][ T30] audit: type=1326 audit(43.710:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5723 comm="syz.2.311" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc179228 code=0x7ffc0000 [ 43.725494][ T30] audit: type=1326 audit(43.710:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5723 comm="syz.2.311" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc179228 code=0x7ffc0000 [ 43.761358][ T30] audit: type=1326 audit(43.750:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5719 comm="syz.1.308" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe179228 code=0x7ffc0000 [ 43.765653][ T30] audit: type=1326 audit(43.750:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5719 comm="syz.1.308" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe179228 code=0x7ffc0000 [ 43.766251][ T30] audit: type=1326 audit(43.750:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5719 comm="syz.1.308" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe179228 code=0x7ffc0000 [ 43.766272][ T30] audit: type=1326 audit(43.750:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5719 comm="syz.1.308" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffffbe179228 code=0x7ffc0000 [ 43.766291][ T30] audit: type=1326 audit(43.750:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5719 comm="syz.1.308" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe179228 code=0x7ffc0000 [ 43.806585][ T5727] loop1: detected capacity change from 0 to 512 [ 43.822954][ T5727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.884842][ T5736] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 44.022556][ T5745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.319'. [ 44.370965][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'. [ 44.657994][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.966410][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 45.230370][ T5859] sch_fq: defrate 4 ignored. [ 45.356458][ T4717] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 45.649579][ T5913] Cannot find add_set index 1 as target [ 45.682217][ T5919] x_tables: ip_tables: osf match: only valid for protocol 6 [ 45.767846][ T5933] random: crng reseeded on system resumption [ 45.863331][ T5944] loop3: detected capacity change from 0 to 512 [ 45.873098][ T5944] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.873143][ T5944] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 45.879832][ T5944] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 45.886118][ T5944] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.411: inode #15: comm syz.3.411: iget: illegal inode # [ 45.886172][ T5944] loop3: lost filesystem error report for type 5 error -117 [ 45.893319][ T5944] EXT4-fs (loop3): Remounting filesystem read-only [ 45.893994][ T5944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.944098][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.332336][ T5993] loop3: detected capacity change from 0 to 128 [ 46.396973][ T6001] syz_tun: entered allmulticast mode [ 46.400042][ T6000] syz_tun: left allmulticast mode [ 46.798332][ T4806] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 46.798674][ T4806] wiimote 0005:057E:0306.0001: New device registered [ 46.805648][ T6045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.805911][ T6045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.808016][ T6045] wiimote 0005:057E:0306.0001: Unhandled report 10 size 3 [ 46.817056][ T6044] wiimote 0005:057E:0306.0001: Device removed [ 46.822507][ T6047] xt_CT: No such helper "pptp" [ 46.903997][ T6049] fido_id[6049]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 47.592594][ T6082] tipc: Failed to remove unknown binding: 66,0,0/0:1941310196/1941310198 [ 47.592632][ T6082] tipc: Failed to remove unknown binding: 66,0,0/0:1941310196/1941310197 [ 47.596204][ T6082] tipc: Failed to remove unknown binding: 66,0,0/0:1941310196/1941310198 [ 47.596233][ T6082] tipc: Failed to remove unknown binding: 66,0,0/0:1941310196/1941310197 [ 47.836571][ T4806] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 47.845565][ T4806] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input5 [ 47.847797][ T4806] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 47.849991][ T4806] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input4 [ 47.874369][ T6101] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 49.915446][ T6060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.125889][ T6134] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 51.300730][ T6168] xt_hashlimit: size too large, truncated to 1048576 [ 51.375609][ T6180] __nla_validate_parse: 9 callbacks suppressed [ 51.377017][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'. [ 51.611028][ T6216] syzkaller0: entered promiscuous mode [ 51.611066][ T6216] syzkaller0: entered allmulticast mode [ 51.684661][ T6223] bridge_slave_0: left allmulticast mode [ 51.684713][ T6223] bridge_slave_0: left promiscuous mode [ 51.684786][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.695848][ T6223] bridge_slave_1: left allmulticast mode [ 51.697694][ T6223] bridge_slave_1: left promiscuous mode [ 51.699010][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.704250][ T6223] bond0: (slave bond_slave_0): Releasing backup interface [ 51.730032][ T6223] bond0: (slave bond_slave_1): Releasing backup interface [ 51.763261][ T6223] team0: Port device team_slave_0 removed [ 51.773884][ T6223] team0: Port device team_slave_1 removed [ 51.775560][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.776546][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.785805][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.785863][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.792219][ T6223] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 52.184767][ T6273] : renamed from bond0 (while UP) [ 52.501209][ T6331] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 52.503734][ T6331] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 52.600528][ T6346] netlink: 48 bytes leftover after parsing attributes in process `syz.1.559'. [ 52.600567][ T6346] netlink: 48 bytes leftover after parsing attributes in process `syz.1.559'. [ 53.070086][ T6416] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 53.135260][ T6421] loop3: detected capacity change from 0 to 1024 [ 53.163221][ T6421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.208491][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.836200][ T6481] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 53.856834][ T6479] syzkaller0: entered promiscuous mode [ 53.856882][ T6479] syzkaller0: entered allmulticast mode [ 53.871911][ T6485] loop3: detected capacity change from 0 to 2048 [ 53.905571][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.905792][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.915149][ T4806] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0002/input/input7 [ 53.925650][ T4806] hid-generic 0005:0009:0040.0002: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 53.935380][ T6485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.978720][ T6493] fido_id[6493]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.049140][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.127973][ T6506] netlink: 'syz.3.610': attribute type 10 has an invalid length. [ 54.132470][ T6506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.135641][ T6506] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 54.224540][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 54.242007][ T4798] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 54.243733][ T4798] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.277471][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 54.277515][ T30] audit: type=1326 audit(54.270:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.0.618" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad579228 code=0x7ffc0000 [ 54.277541][ T30] audit: type=1326 audit(54.270:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.0.618" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad579228 code=0x7ffc0000 [ 54.278891][ T30] audit: type=1326 audit(54.270:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.0.618" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad579228 code=0x7ffc0000 [ 54.278987][ T30] audit: type=1326 audit(54.270:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.0.618" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad579228 code=0x7ffc0000 [ 54.279057][ T30] audit: type=1326 audit(54.270:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.0.618" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffad579228 code=0x7ffc0000 [ 54.282272][ T30] audit: type=1326 audit(54.270:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.0.618" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad579228 code=0x7ffc0000 [ 54.282388][ T30] audit: type=1326 audit(54.270:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.0.618" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad579228 code=0x7ffc0000 [ 54.282534][ T30] audit: type=1326 audit(54.270:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.0.618" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffad579228 code=0x7ffc0000 [ 54.282619][ T30] audit: type=1326 audit(54.270:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.0.618" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad579228 code=0x7ffc0000 [ 54.283924][ T30] audit: type=1326 audit(54.270:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.0.618" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad579228 code=0x7ffc0000 [ 54.330764][ T6519] fido_id[6519]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.452389][ T6544] netlink: 'syz.1.626': attribute type 4 has an invalid length. [ 54.456205][ T6544] netlink: 'syz.1.626': attribute type 11 has an invalid length. [ 54.456237][ T6544] netlink: 'syz.1.626': attribute type 27 has an invalid length. [ 54.617468][ T6560] loop3: detected capacity change from 0 to 512 [ 54.629124][ T6560] EXT4-fs: Ignoring removed bh option [ 54.655446][ T6560] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 54.658892][ T6560] EXT4-fs (loop3): 1 truncate cleaned up [ 54.659396][ T6560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.698677][ T6560] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 54.728972][ T6571] random: crng reseeded on system resumption [ 54.733961][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.783082][ T6573] loop3: detected capacity change from 0 to 512 [ 54.792750][ T6573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.841630][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 54.850938][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.089539][ T6592] mmap: syz.2.645 (6592) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.259459][ T6598] capability: warning: `syz.0.648' uses 32-bit capabilities (legacy support in use) [ 55.363451][ T6606] syzkaller0: entered promiscuous mode [ 55.363486][ T6606] syzkaller0: entered allmulticast mode [ 55.443230][ T6609] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 55.443230][ T6609] The task syz.2.653 (6609) triggered the difference, watch for misbehavior. [ 55.640097][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 55.764464][ T6641] loop3: detected capacity change from 0 to 512 [ 55.765223][ T6641] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.771128][ T6641] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #17: comm syz.3.667: corrupted in-inode xattr: e_name out of bounds [ 55.771176][ T6641] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 55.774127][ T6641] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.667: couldn't read orphan inode 17 (err -117) [ 55.775329][ T6641] loop3: lost filesystem error report for type 5 error -117 [ 55.776091][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 55.776114][ C1] EXT4-fs (loop3): initial error at time 55: ext4_iget_extra_inode:5180: inode 17 [ 55.776131][ C1] EXT4-fs (loop3): last error at time 55: ext4_orphan_get:1404 [ 55.777135][ T6641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.781720][ T6641] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #12: block 7: comm syz.3.667: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 55.802903][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.978528][ T6656] netlink: 64 bytes leftover after parsing attributes in process `syz.3.674'. [ 56.538048][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 56.637044][ T6708] netlink: 'syz.0.697': attribute type 21 has an invalid length. [ 56.824927][ T6723] loop3: detected capacity change from 0 to 4096 [ 56.835543][ T6725] netlink: 132 bytes leftover after parsing attributes in process `syz.0.705'. [ 56.842985][ T6723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.876754][ T4723] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 56.877007][ T4723] Bluetooth: hci0: command 0x080f tx timeout [ 56.880077][ T6579] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 56.881605][ T4724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.012199][ T6736] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.083432][ T6741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.712'. [ 57.088538][ T6736] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.137084][ T6736] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.214243][ T6736] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.220872][ T6751] netlink: 144 bytes leftover after parsing attributes in process `syz.0.717'. [ 57.326693][ T39] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.345385][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.376413][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.386247][ T39] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.440818][ T6763] syzkaller0: entered promiscuous mode [ 57.440865][ T6763] syzkaller0: entered allmulticast mode [ 57.805869][ T6798] netlink: 80 bytes leftover after parsing attributes in process `syz.2.740'. [ 58.129365][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 58.353063][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'. [ 58.879601][ T6847] random: crng reseeded on system resumption [ 58.998338][ T6859] netlink: 36 bytes leftover after parsing attributes in process `syz.1.767'. [ 59.085871][ T6871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.773'. [ 59.085910][ T6871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.773'. [ 59.325208][ T6888] Illegal XDP return value 4294965632 on prog (id 42) dev syz_tun, expect packet loss! [ 59.518267][ T6913] vlan2: entered promiscuous mode [ 59.518306][ T6913] bridge0: entered promiscuous mode [ 59.520915][ T6908] xt_CT: No such helper "pptp" [ 59.897466][ T6956] netlink: 'syz.1.813': attribute type 3 has an invalid length. [ 60.938664][ T7003] netlink: 'syz.2.833': attribute type 1 has an invalid length. [ 61.024023][ T7013] libceph: secret too big 258 [ 61.963094][ T1885] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.033010][ T1885] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.120706][ T1885] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.225774][ T4723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.226770][ T4723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.227071][ T4723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.227668][ T4723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.227911][ T4723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.273588][ T1885] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.560853][ T7094] __nla_validate_parse: 6 callbacks suppressed [ 62.562318][ T7094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.873'. [ 62.797954][ T1885] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 62.809483][ T1885] bond0 (unregistering): Released all slaves [ 62.814381][ T7100] netlink: 'syz.1.874': attribute type 10 has an invalid length. [ 62.814419][ T7100] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.874'. [ 62.825525][ T4406] 8021q: adding VLAN 0 to HW filter on device eth0 [ 63.230076][ T4406] 8021q: adding VLAN 0 to HW filter on device eth1 [ 63.242030][ T1885] hsr_slave_0: left promiscuous mode [ 63.243086][ T1885] hsr_slave_1: left promiscuous mode [ 63.252700][ T1885] veth1_macvtap: left promiscuous mode [ 63.252876][ T1885] veth1_vlan: left promiscuous mode [ 63.252933][ T1885] veth0_vlan: left promiscuous mode [ 63.680422][ T7123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.892219][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.902607][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.902785][ T7081] bridge_slave_0: entered allmulticast mode [ 63.903314][ T7081] bridge_slave_0: entered promiscuous mode [ 63.904798][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.904832][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.904915][ T7081] bridge_slave_1: entered allmulticast mode [ 63.905333][ T7081] bridge_slave_1: entered promiscuous mode [ 63.948874][ T7081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.955837][ T7081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.997389][ T7081] team0: Port device team_slave_0 added [ 64.000790][ T7081] team0: Port device team_slave_1 added [ 64.022112][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.022149][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.022164][ T7081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.023849][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.023858][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.023874][ T7081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.037989][ T7081] hsr_slave_0: entered promiscuous mode [ 64.038362][ T7081] hsr_slave_1: entered promiscuous mode [ 64.041091][ T7081] debugfs: 'hsr0' already exists in 'hsr' [ 64.041105][ T7081] Cannot create hsr debugfs directory [ 64.119349][ T1885] IPVS: stop unused estimator thread 0... [ 64.170689][ T4406] 8021q: adding VLAN 0 to HW filter on device eth2 [ 64.224673][ T7081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.228132][ T7081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.228692][ T7081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.232944][ T7081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.234075][ T7081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.236333][ T4717] Bluetooth: hci3: command tx timeout [ 64.241317][ T7081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.242464][ T7081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.248202][ T7081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.338790][ T7081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.351845][ T7081] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.361584][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.361638][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.369785][ T1986] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.369838][ T1986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.480319][ T11] cfg80211: failed to load regulatory.db [ 64.482325][ T1536] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.483509][ T1536] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.620815][ T4406] 8021q: adding VLAN 0 to HW filter on device eth3 [ 64.678978][ T7081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.715379][ T7257] syzkaller0: entered promiscuous mode [ 64.715421][ T7257] syzkaller0: entered allmulticast mode [ 64.731773][ T7257] tipc: Started in network mode [ 64.731819][ T7257] tipc: Node identity a6e18c778015, cluster identity 4711 [ 64.731979][ T7257] tipc: Enabled bearer , priority 0 [ 64.738155][ T7257] tipc: Resetting bearer [ 64.749195][ T7252] tipc: Resetting bearer [ 64.770291][ T7252] tipc: Disabling bearer [ 64.892477][ T7081] veth0_vlan: entered promiscuous mode [ 64.894682][ T7081] veth1_vlan: entered promiscuous mode [ 64.940312][ T7081] veth0_macvtap: entered promiscuous mode [ 64.947991][ T7081] veth1_macvtap: entered promiscuous mode [ 64.971057][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.972403][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.985218][ T1885] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.985266][ T1885] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.162795][ T1885] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.162854][ T1885] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.178679][ T1885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.180445][ T1885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.237550][ T1803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.237589][ T1803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.370323][ T7332] netlink: 36 bytes leftover after parsing attributes in process `syz.5.865'. [ 65.379819][ T7332] geneve2: entered promiscuous mode [ 65.483341][ T7346] x_tables: duplicate underflow at hook 1 [ 65.938978][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'. [ 65.940800][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'. [ 65.943754][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'. [ 66.316591][ T4717] Bluetooth: hci3: command tx timeout [ 66.463324][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 66.463365][ T30] audit: type=1326 audit(66.450:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.5.952" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5579228 code=0x7ffc0000 [ 66.465884][ T30] audit: type=1326 audit(66.450:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.5.952" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5579228 code=0x7ffc0000 [ 66.479102][ T30] audit: type=1326 audit(66.460:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.5.952" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5579228 code=0x7ffc0000 [ 66.479156][ T30] audit: type=1326 audit(66.460:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.5.952" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffffb5579228 code=0x7ffc0000 [ 66.479173][ T30] audit: type=1326 audit(66.460:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.5.952" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5579228 code=0x7ffc0000 [ 66.479189][ T30] audit: type=1326 audit(66.460:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.5.952" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5579228 code=0x7ffc0000 [ 66.479204][ T30] audit: type=1326 audit(66.460:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.5.952" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5579228 code=0x7ffc0000 [ 66.479219][ T30] audit: type=1326 audit(66.460:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.5.952" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb5579228 code=0x7ffc0000 [ 66.479232][ T30] audit: type=1326 audit(66.460:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.5.952" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5579228 code=0x7ffc0000 [ 66.483927][ T30] audit: type=1326 audit(66.470:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7425 comm="syz.5.952" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5579228 code=0x7ffc0000 [ 66.523789][ T1986] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.523852][ T1986] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.523900][ T1986] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.526118][ T1885] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.699142][ T7505] netlink: 'syz.0.975': attribute type 8 has an invalid length. [ 67.700677][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'. [ 67.702439][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 68.040687][ T7534] netlink: 104 bytes leftover after parsing attributes in process `syz.0.988'. [ 68.405547][ T4717] Bluetooth: hci3: command tx timeout [ 68.679475][ T4723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.682123][ T4723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.684389][ T4723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.688248][ T4723] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.689808][ T4723] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.070126][ T7580] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 69.170695][ T15] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.323603][ T15] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.372634][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.384795][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.384957][ T7551] bridge_slave_0: entered allmulticast mode [ 69.385435][ T7551] bridge_slave_0: entered promiscuous mode [ 69.397855][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.397916][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.397986][ T7551] bridge_slave_1: entered allmulticast mode [ 69.398447][ T7551] bridge_slave_1: entered promiscuous mode [ 69.484822][ T7617] --map-set only usable from mangle table [ 69.497134][ T15] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.515406][ T7551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.524118][ T7551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.583524][ T7551] team0: Port device team_slave_0 added [ 69.607869][ T7551] team0: Port device team_slave_1 added [ 69.666843][ T15] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.691742][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.698026][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.702825][ T7551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.705851][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.710237][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.714039][ T7631] loop5: detected capacity change from 0 to 128 [ 69.721816][ T7551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.731194][ T7631] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.756451][ T7631] EXT4-fs (loop5): resizing filesystem from 64 to 2 blocks [ 69.756489][ T7631] EXT4-fs warning (device loop5): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 69.783862][ T7551] hsr_slave_0: entered promiscuous mode [ 69.809893][ T7551] hsr_slave_1: entered promiscuous mode [ 69.810135][ T7551] debugfs: 'hsr0' already exists in 'hsr' [ 69.810152][ T7551] Cannot create hsr debugfs directory [ 69.844804][ T7081] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.993240][ T15] bridge_slave_1: left allmulticast mode [ 69.994377][ T15] bridge_slave_1: left promiscuous mode [ 69.996396][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.008170][ T15] bridge_slave_0: left allmulticast mode [ 70.016759][ T15] bridge_slave_0: left promiscuous mode [ 70.017918][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.021000][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'. [ 70.476869][ T4717] Bluetooth: hci3: command tx timeout [ 70.482787][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.507278][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.537085][ T15] bond0 (unregistering): Released all slaves [ 70.650559][ T7551] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 70.665672][ T7551] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.668034][ T7551] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 70.682844][ T7551] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.684676][ T7551] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 70.692416][ T7551] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.697817][ T7551] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 70.705711][ T7551] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.718140][ T4717] Bluetooth: hci5: command tx timeout [ 70.757513][ T7687] loop5: detected capacity change from 0 to 1024 [ 70.798120][ T7687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.860509][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 71.024596][ T1190] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 71.027982][ T1190] EXT4-fs (loop5): Remounting filesystem read-only [ 71.030283][ T7081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.091536][ T4406] 8021q: adding VLAN 0 to HW filter on device eth4 [ 71.094242][ T7551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.100595][ T7551] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.116944][ T804] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.116995][ T804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.121449][ T804] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.121509][ T804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.200732][ T7722] syzkaller0: entered promiscuous mode [ 71.202027][ T7722] syzkaller0: entered allmulticast mode [ 71.209351][ T7728] batadv_slave_1: entered promiscuous mode [ 71.209842][ T7727] batadv_slave_1: left promiscuous mode [ 71.214682][ T15] hsr_slave_0: left promiscuous mode [ 71.216794][ T15] hsr_slave_1: left promiscuous mode [ 71.217101][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.217151][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.218242][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.218252][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.222821][ T15] veth1_macvtap: left promiscuous mode [ 71.222851][ T15] veth0_macvtap: left promiscuous mode [ 71.222909][ T15] veth1_vlan: left promiscuous mode [ 71.222944][ T15] veth0_vlan: left promiscuous mode [ 71.322534][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1056'. [ 71.673219][ T15] team0 (unregistering): Port device team_slave_1 removed [ 71.680194][ T15] team0 (unregistering): Port device team_slave_0 removed [ 71.700086][ T7757] netlink: 'syz.1.1063': attribute type 39 has an invalid length. [ 72.312468][ T7743] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.312713][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.586673][ T804] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.586722][ T804] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.586756][ T804] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.586778][ T804] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.704327][ T7799] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 72.775106][ T7551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.796144][ T4717] Bluetooth: hci5: command tx timeout [ 72.860010][ T4406] 8021q: adding VLAN 0 to HW filter on device eth5 [ 72.928340][ T7551] veth0_vlan: entered promiscuous mode [ 72.932502][ T7551] veth1_vlan: entered promiscuous mode [ 72.951856][ T7551] veth0_macvtap: entered promiscuous mode [ 72.967993][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.968412][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.976307][ T7551] veth1_macvtap: entered promiscuous mode [ 72.981714][ T7551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.989801][ T7551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.998909][ T804] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.999002][ T804] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.999025][ T804] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.999039][ T804] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.092118][ T7848] xt_SECMARK: unable to map security context 'system_u:object_r:initctl_t:s0' [ 73.105938][ T1803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.105962][ T1803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.131887][ T1253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.132389][ T1253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.537460][ T4406] 8021q: adding VLAN 0 to HW filter on device eth6 [ 73.792980][ T7892] loop5: detected capacity change from 0 to 1024 [ 73.796002][ T7892] EXT4-fs: inline encryption not supported [ 73.803617][ T7892] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.813997][ T7892] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.1097: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.814039][ T7892] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 73.817287][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 73.817308][ C1] EXT4-fs (loop5): initial error at time 73: ext4_map_blocks:833: inode 3: block 1 [ 73.817328][ C1] EXT4-fs (loop5): last error at time 73: ext4_map_blocks:833: inode 3: block 1 [ 73.824750][ T7892] EXT4-fs (loop5): Remounting filesystem read-only [ 73.824793][ T7892] __quota_error: 30 callbacks suppressed [ 73.824808][ T7892] Quota error (device loop5): write_blk: dquota write failed [ 73.824832][ T7892] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 73.824940][ T7892] EXT4-fs (loop5): 1 orphan inode deleted [ 73.833336][ T7892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.890216][ T7081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.921484][ T4406] 8021q: adding VLAN 0 to HW filter on device eth7 [ 74.848270][ T7915] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1105'. [ 74.897400][ T4717] Bluetooth: hci5: command tx timeout [ 75.257111][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'. [ 75.317235][ T7967] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 184 [ 75.503056][ T7994] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 2 [ 76.956235][ T4717] Bluetooth: hci5: command tx timeout [ 77.048173][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'. [ 77.048209][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1153'. [ 77.048241][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1153'. [ 77.107591][ T9] kernel read not supported for file /input/event0 (pid: 9 comm: kworker/0:0) [ 77.459812][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 77.538503][ T8097] netlink: 'syz.1.1175': attribute type 5 has an invalid length. [ 77.538536][ T8097] netlink: 'syz.1.1175': attribute type 9 has an invalid length. [ 77.538558][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 77.572984][ T8102] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1178'. [ 77.574925][ T8102] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.594490][ T8108] tmpfs: Bad value for 'mpol' [ 77.931390][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.067469][ T7934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.266513][ T8179] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 78.266555][ T8179] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 78.328389][ T8186] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[8188] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[8186] [ 78.392638][ T8190] 0: reclassify loop, rule prio 0, protocol 03 [ 78.398196][ T8192] loop6: detected capacity change from 0 to 2048 [ 78.416968][ T8194] ip6gretap0: refused to change device tx_queue_len [ 78.419936][ T8192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.583989][ T7551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.648844][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1221'. [ 78.650929][ T8218] netlink: 316 bytes leftover after parsing attributes in process `syz.5.1221'. [ 79.545610][ T30] audit: type=1326 audit(79.534:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8226 comm="syz.6.1224" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979228 code=0x7fc00000 [ 79.892667][ T30] audit: type=1326 audit(79.884:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.1.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe179228 code=0x7ffc0000 [ 79.897571][ T30] audit: type=1326 audit(79.894:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.1.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe179228 code=0x7ffc0000 [ 79.902097][ T30] audit: type=1326 audit(79.894:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.1.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe179228 code=0x7ffc0000 [ 79.906628][ T30] audit: type=1326 audit(79.894:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.1.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffffbe179228 code=0x7ffc0000 [ 79.911152][ T30] audit: type=1326 audit(79.894:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.1.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe179228 code=0x7ffc0000 [ 79.911193][ T30] audit: type=1326 audit(79.894:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.1.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe179228 code=0x7ffc0000 [ 79.911218][ T30] audit: type=1326 audit(79.894:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.1.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe179228 code=0x7ffc0000 [ 79.911239][ T30] audit: type=1326 audit(79.894:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.1.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffbe179228 code=0x7ffc0000 [ 79.929028][ T30] audit: type=1326 audit(79.914:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.1.1253" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffbe179228 code=0x7ffc0000 [ 80.060185][ T8329] __nla_validate_parse: 3 callbacks suppressed [ 80.061586][ T8329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1261'. [ 80.162532][ T9] IPVS: starting estimator thread 0... [ 80.267226][ T8347] IPVS: using max 60 ests per chain, 144000 per kthread [ 80.306416][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1279'. [ 80.332126][ T8369] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 80.332149][ T8369] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 80.335486][ T8370] vhci_hcd: xmit failed -107 [ 80.338362][ T8369] vhci_hcd vhci_hcd.0: Device attached [ 80.339564][ T39] vhci_hcd vhci_hcd.0: stop threads [ 80.339576][ T39] vhci_hcd vhci_hcd.0: release socket [ 80.339593][ T39] vhci_hcd vhci_hcd.0: disconnect device [ 81.957645][ T4723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.961695][ T4723] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.964866][ T4723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.965293][ T4723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.965502][ T4723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.972170][ T15] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.998608][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1304'. [ 81.999103][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1304'. [ 82.084148][ T15] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.130358][ T15] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.195356][ T15] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.295046][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.296107][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.296978][ T8437] bridge_slave_0: entered allmulticast mode [ 82.298365][ T8437] bridge_slave_0: entered promiscuous mode [ 82.301550][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.301599][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.301699][ T8437] bridge_slave_1: entered allmulticast mode [ 82.305129][ T8437] bridge_slave_1: entered promiscuous mode [ 82.362979][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.365486][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.395742][ T15] bridge_slave_1: left allmulticast mode [ 82.395788][ T15] bridge_slave_1: left promiscuous mode [ 82.396528][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.409443][ T15] bridge_slave_0: left allmulticast mode [ 82.409476][ T15] bridge_slave_0: left promiscuous mode [ 82.409561][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.777780][ T8505] sctp: [Deprecated]: syz.5.1325 (pid 8505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.777780][ T8505] Use struct sctp_sack_info instead [ 82.801970][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.813011][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.827032][ T15] bond0 (unregistering): Released all slaves [ 82.830520][ T8437] team0: Port device team_slave_0 added [ 82.836616][ T8437] team0: Port device team_slave_1 added [ 82.847534][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.847564][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.847578][ T8437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.849296][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.849306][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.849322][ T8437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.861541][ T8437] hsr_slave_0: entered promiscuous mode [ 82.861865][ T8437] hsr_slave_1: entered promiscuous mode [ 82.862068][ T8437] debugfs: 'hsr0' already exists in 'hsr' [ 82.862079][ T8437] Cannot create hsr debugfs directory [ 83.035381][ T8437] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 83.038945][ T8437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.040833][ T8437] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 83.043298][ T8437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.045213][ T8437] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 83.051578][ T8437] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.052019][ T8437] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 83.056592][ T8437] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.095691][ T4406] 8021q: adding VLAN 0 to HW filter on device eth8 [ 83.158630][ T15] hsr_slave_0: left promiscuous mode [ 83.160279][ T15] hsr_slave_1: left promiscuous mode [ 83.160574][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.160594][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.165214][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.166802][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.171111][ T15] veth1_macvtap: left promiscuous mode [ 83.172462][ T15] veth0_macvtap: left promiscuous mode [ 83.254872][ T15] team0 (unregistering): Port device team_slave_1 removed [ 83.264216][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'. [ 83.271961][ T15] team0 (unregistering): Port device team_slave_0 removed [ 83.335076][ T8556] batadv_slave_0: entered promiscuous mode [ 83.350415][ T8562] batadv_slave_0 (unregistering): left promiscuous mode [ 83.372175][ T4406] 8021q: adding VLAN 0 to HW filter on device eth9 [ 83.384271][ T8437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.390671][ T8437] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.423028][ T1803] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.423080][ T1803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.423628][ T1803] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.423653][ T1803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.600341][ T8601] vhci_hcd vhci_hcd.2: invalid port number 96 [ 83.602415][ T8601] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 83.650282][ T8437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.709188][ T8621] netlink: 272 bytes leftover after parsing attributes in process `syz.6.1346'. [ 83.750348][ T4406] 8021q: adding VLAN 0 to HW filter on device eth10 [ 83.757149][ T8437] veth0_vlan: entered promiscuous mode [ 83.761902][ T8437] veth1_vlan: entered promiscuous mode [ 83.777901][ T8437] veth0_macvtap: entered promiscuous mode [ 83.779827][ T8437] veth1_macvtap: entered promiscuous mode [ 83.785614][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.791958][ T8437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.837565][ T804] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.837911][ T804] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.837933][ T804] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.837949][ T804] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.852326][ T1520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.852365][ T1520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.882127][ T804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.882168][ T804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.973785][ T4406] 8021q: adding VLAN 0 to HW filter on device eth11 [ 84.006656][ T4717] Bluetooth: hci1: command tx timeout [ 84.137387][ T8674] syz.0.1354 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 84.193451][ T8682] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1358'. [ 84.575772][ T8701] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1367'. [ 84.729247][ T8716] loop7: detected capacity change from 0 to 128 [ 84.731832][ T8716] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.739176][ T8716] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.777723][ T8716] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 84.780432][ T8716] FAT-fs (loop7): Filesystem has been set read-only [ 86.076707][ T4717] Bluetooth: hci1: command tx timeout [ 86.152673][ T8719] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 86.152705][ T8719] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 86.283600][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1389'. [ 86.484366][ T8781] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.484442][ T8781] bridge0: port 2(bridge_slave_1) entered listening state [ 86.484535][ T8781] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.484568][ T8781] bridge0: port 1(bridge_slave_0) entered listening state [ 87.083066][ T8841] tap0: tun_chr_ioctl cmd 35108 [ 87.374521][ T8886] loop7: detected capacity change from 0 to 512 [ 87.378224][ T8886] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 87.384138][ T8886] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1437: Invalid block bitmap block 0 in block_group 0 [ 87.388997][ T8886] loop7: lost filesystem error report for type 5 error -117 [ 87.389266][ T8886] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 87.389286][ T8886] loop7: lost filesystem error report for type 5 error -117 [ 87.389420][ T8886] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.1437: attempt to clear invalid blocks 983261 len 1 [ 87.389441][ T8886] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.390404][ T8886] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.1437: Invalid inode table block 0 in block_group 0 [ 87.390430][ T8886] loop7: lost filesystem error report for type 5 error -117 [ 87.393020][ T8886] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 87.393045][ T8886] loop7: lost filesystem error report for type 5 error -117 [ 87.393894][ T8886] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 87.393915][ T8886] loop7: lost filesystem error report for type 5 error -117 [ 87.394062][ T8886] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.1437: Invalid inode table block 0 in block_group 0 [ 87.394078][ T8886] loop7: lost filesystem error report for type 5 error -117 [ 87.394189][ T8886] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 87.394198][ T8886] loop7: lost filesystem error report for type 5 error -117 [ 87.394304][ T8886] EXT4-fs error (device loop7): ext4_truncate:4691: inode #11: comm syz.7.1437: mark_inode_dirty error [ 87.394316][ T8886] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.394429][ T8886] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 87.394438][ T8886] loop7: lost filesystem error report for type 5 error -117 [ 87.394549][ T8886] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.1437: Invalid inode table block 0 in block_group 0 [ 87.394560][ T8886] loop7: lost filesystem error report for type 5 error -117 [ 87.394759][ T8886] EXT4-fs (loop7): 1 truncate cleaned up [ 87.395232][ T8886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.407868][ T8887] 0: reclassify loop, rule prio 0, protocol 03 [ 87.447004][ T8437] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.628729][ T8921] loop6: detected capacity change from 0 to 4096 [ 87.642501][ T8921] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.645064][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1451'. [ 87.711033][ T7551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.760118][ T8938] gtp0: entered promiscuous mode [ 87.806361][ T8943] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1457'. [ 87.858402][ T8958] xt_hashlimit: size too large, truncated to 1048576 [ 87.953016][ T8967] veth0: entered promiscuous mode [ 87.953159][ T8967] veth0: left promiscuous mode [ 88.063004][ T8978] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1472'. [ 88.064972][ T8978] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1472'. [ 88.156620][ T4717] Bluetooth: hci1: command tx timeout [ 88.298271][ T9004] loop7: detected capacity change from 0 to 8192 [ 88.411225][ T9025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.422119][ T9025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.508805][ T9037] loop7: detected capacity change from 0 to 512 [ 88.513761][ T9037] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.532582][ T9037] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.805348][ T9042] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.830289][ T39] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.903590][ T39] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.914034][ T4723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.915800][ T4723] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.918978][ T4723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.920853][ T4723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.923259][ T4723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.986897][ T39] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.318617][ T39] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.373884][ T9079] loop6: detected capacity change from 0 to 512 [ 89.391248][ T9079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.446753][ T9088] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1510'. [ 89.467534][ T7551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.527452][ T9096] loop6: detected capacity change from 0 to 512 [ 89.539570][ T39] bridge_slave_1: left allmulticast mode [ 89.539614][ T39] bridge_slave_1: left promiscuous mode [ 89.539714][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.550562][ T9096] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #13: comm syz.6.1511: iget: bad i_size value: 12154757448730 [ 89.550611][ T9096] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 89.553402][ T9096] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1511: couldn't read orphan inode 13 (err -117) [ 89.553439][ T9096] loop6: lost filesystem error report for type 5 error -117 [ 89.557508][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 89.557523][ C1] EXT4-fs (loop6): initial error at time 95: ext4_orphan_get:1399: inode 13 [ 89.557543][ C1] EXT4-fs (loop6): last error at time 95: ext4_orphan_get:1404 [ 89.558323][ T9096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.568296][ T39] bridge_slave_0: left allmulticast mode [ 89.568332][ T39] bridge_slave_0: left promiscuous mode [ 89.568435][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.578057][ T9096] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 89.587556][ T9096] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 89.628548][ T7551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.715311][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.735354][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.757639][ T39] bond0 (unregistering): Released all slaves [ 89.801618][ T9058] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.806215][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.807842][ T9058] bridge_slave_0: entered allmulticast mode [ 89.814867][ T9058] bridge_slave_0: entered promiscuous mode [ 89.823978][ T9058] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.824023][ T9058] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.824118][ T9058] bridge_slave_1: entered allmulticast mode [ 89.830258][ T9058] bridge_slave_1: entered promiscuous mode [ 89.954701][ T30] audit: type=1400 audit(95.948:139): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9141 comm="syz.5.1529" dest=20000 netif=lo [ 89.960381][ T30] audit: type=1400 audit(95.948:140): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9141 comm="syz.5.1529" dest=20000 netif=lo [ 89.960427][ T30] audit: type=1400 audit(95.948:141): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9141 comm="syz.5.1529" dest=20000 netif=lo [ 89.960453][ T30] audit: type=1400 audit(95.948:142): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9141 comm="syz.5.1529" dest=20000 netif=lo [ 89.960474][ T30] audit: type=1400 audit(95.948:143): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9141 comm="syz.5.1529" dest=20000 netif=lo [ 89.960492][ T30] audit: type=1400 audit(95.948:144): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9141 comm="syz.5.1529" dest=20000 netif=lo [ 89.960511][ T30] audit: type=1400 audit(95.948:145): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9141 comm="syz.5.1529" dest=20000 netif=lo [ 89.960529][ T30] audit: type=1400 audit(95.948:146): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9141 comm="syz.5.1529" dest=20000 netif=lo [ 89.960547][ T30] audit: type=1400 audit(95.948:147): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9141 comm="syz.5.1529" dest=20000 netif=lo [ 89.960564][ T30] audit: type=1400 audit(95.948:148): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9141 comm="syz.5.1529" dest=20000 netif=lo [ 90.142402][ T4406] 8021q: adding VLAN 0 to HW filter on device eth12 [ 90.150306][ T9058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.154824][ T9058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.172685][ T9058] team0: Port device team_slave_0 added [ 90.176138][ T9058] team0: Port device team_slave_1 added [ 90.184170][ T9058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.185601][ T9058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.196359][ T9058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.205948][ T9058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.208392][ T9058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.208432][ T9058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.233419][ T9166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.233622][ T9166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.246668][ T9166] binder: 9156 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 90.246701][ T9166] binder: 9156:9166 ioctl c018620c 20000000 returned -22 [ 90.315580][ T9058] hsr_slave_0: entered promiscuous mode [ 90.315924][ T9058] hsr_slave_1: entered promiscuous mode [ 90.439485][ T39] hsr_slave_0: left promiscuous mode [ 90.441225][ T39] hsr_slave_1: left promiscuous mode [ 90.441703][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.441715][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.442616][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.442626][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.460408][ T39] veth1_macvtap: left promiscuous mode [ 90.460462][ T39] veth0_macvtap: left promiscuous mode [ 90.460514][ T39] veth1_vlan: left promiscuous mode [ 90.460549][ T39] veth0_vlan: left promiscuous mode [ 90.632443][ T39] team0 (unregistering): Port device team_slave_1 removed [ 90.639045][ T39] team0 (unregistering): Port device team_slave_0 removed [ 90.714632][ T4406] 8021q: adding VLAN 0 to HW filter on device eth14 [ 90.874758][ T9058] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 90.876408][ T9058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.876961][ T9058] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 90.882926][ T9058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.883691][ T9058] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 90.914855][ T9058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.915251][ T9058] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 90.922011][ T9058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.956123][ T4717] Bluetooth: hci1: command tx timeout [ 90.982992][ T9058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.004389][ T9058] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.006464][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.006509][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.010237][ T4406] 8021q: adding VLAN 0 to HW filter on device eth13 [ 91.045488][ T4723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.049415][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.049462][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.058664][ T4723] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.063876][ T9058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.063908][ T9058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.063985][ T4723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.064922][ T4723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.065394][ T4723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.424117][ T9238] geneve2: left promiscuous mode [ 91.424900][ T9238] gtp0: left promiscuous mode [ 91.613429][ T9058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.700782][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.701077][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.701163][ T9222] bridge_slave_0: entered allmulticast mode [ 91.701630][ T9222] bridge_slave_0: entered promiscuous mode [ 91.702725][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.702776][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.702834][ T9222] bridge_slave_1: entered allmulticast mode [ 91.703298][ T9222] bridge_slave_1: entered promiscuous mode [ 91.712143][ T9222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.713191][ T9222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.717629][ T4406] 8021q: adding VLAN 0 to HW filter on device eth15 [ 91.724242][ T9222] team0: Port device team_slave_0 added [ 91.725037][ T9222] team0: Port device team_slave_1 added [ 91.745508][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.747774][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.753214][ T9222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.757026][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.757565][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.757579][ T9222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.789434][ T9222] hsr_slave_0: entered promiscuous mode [ 91.789853][ T9222] hsr_slave_1: entered promiscuous mode [ 91.790125][ T9222] debugfs: 'hsr0' already exists in 'hsr' [ 91.790136][ T9222] Cannot create hsr debugfs directory [ 91.824479][ T9058] veth0_vlan: entered promiscuous mode [ 91.852789][ T9058] veth1_vlan: entered promiscuous mode [ 91.942640][ T9058] veth0_macvtap: entered promiscuous mode [ 91.974897][ T9297] loop6: detected capacity change from 0 to 512 [ 91.993734][ T9058] veth1_macvtap: entered promiscuous mode [ 91.994020][ T9297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.038063][ T9222] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 92.038723][ T7551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.039952][ T9222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.040286][ T9222] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 92.041237][ T9222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.041673][ T9222] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 92.042915][ T9222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.043203][ T9222] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 92.044227][ T9222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.073799][ T9058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.079856][ T9058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.142877][ T9320] loop5: detected capacity change from 0 to 512 [ 92.164381][ T9320] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1552: bad orphan inode 15 [ 92.170450][ T9320] ext4_test_bit(bit=14, block=5) = 0 [ 92.183434][ T9320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.197614][ T9320] EXT4-fs (loop5): shut down requested (2) [ 92.208070][ T1253] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.211298][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.211335][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.211463][ T1253] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.212260][ T1520] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.217702][ T9222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.221304][ T9222] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.229765][ T8650] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.229818][ T8650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.240100][ T7081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.245800][ T1253] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.245849][ T1253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.265878][ T1520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.265909][ T1520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.289155][ T1803] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.295914][ T9327] netlink: 'syz.6.1555': attribute type 10 has an invalid length. [ 92.297843][ T9327] syz_tun: entered promiscuous mode [ 92.319487][ T9327] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 92.328140][ T9222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.528606][ T9222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.647727][ T9222] veth0_vlan: entered promiscuous mode [ 92.658595][ T9222] veth1_vlan: entered promiscuous mode [ 92.692212][ T9377] netlink: 'syz.8.1572': attribute type 2 has an invalid length. [ 92.693849][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1572'. [ 92.695666][ T9377] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1572'. [ 92.700481][ T9222] veth0_macvtap: entered promiscuous mode [ 92.704536][ T9222] veth1_macvtap: entered promiscuous mode [ 92.714591][ T9222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.715665][ T9222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.768693][ T9377] loop8: detected capacity change from 0 to 512 [ 92.770253][ T1520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.770281][ T1520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.779377][ T1520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.779418][ T1520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.782781][ T9377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.786934][ T1520] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.786977][ T1520] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.786996][ T1520] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.787011][ T1520] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.804347][ T9377] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1572: iget: bad i_size value: 38620345925642 [ 92.804392][ T9377] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.807226][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 92.807242][ C1] EXT4-fs (loop8): initial error at time 98: ext4_orphan_get:1399: inode 15 [ 92.807261][ C1] EXT4-fs (loop8): last error at time 98: ext4_orphan_get:1399: inode 15 [ 92.808553][ T9377] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1572: couldn't read orphan inode 15 (err -117) [ 92.808575][ T9377] fserror_report: 1 callbacks suppressed [ 92.808583][ T9377] loop8: lost filesystem error report for type 5 error -117 [ 92.811270][ T9385] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1574'. [ 92.811658][ T9385] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1574'. [ 92.814885][ T9377] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.906366][ T9377] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1572: bg 0: block 5: invalid block bitmap [ 92.910983][ T9377] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 92.913923][ T9377] EXT4-fs (loop8): This should not happen!! Data will be lost [ 92.913923][ T9377] [ 92.915955][ T9377] EXT4-fs (loop8): Total free blocks count 0 [ 92.918048][ T9377] EXT4-fs (loop8): Free/Dirty block details [ 92.920695][ T9377] EXT4-fs (loop8): free_blocks=0 [ 92.926306][ T9377] EXT4-fs (loop8): dirty_blocks=1 [ 92.928619][ T9377] EXT4-fs (loop8): Block reservation details [ 92.930718][ T9377] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 93.066791][ T4723] Bluetooth: hci1: command tx timeout [ 93.183082][ T9390] team0: Port device syz_tun added [ 93.196329][ T4723] Bluetooth: hci2: command tx timeout [ 93.200610][ T9058] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 93.204365][ T9058] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.346853][ T9411] netlink: 'syz.1.1583': attribute type 1 has an invalid length. [ 93.708594][ T9451] loop5: detected capacity change from 0 to 512 [ 93.712772][ T9451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.718422][ T9451] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.1601: corrupted xattr block 8: invalid header [ 93.722247][ T9451] EXT4-fs (loop5): Remounting filesystem read-only [ 93.740999][ T7081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.900037][ T9474] netlink: 'syz.1.1607': attribute type 2 has an invalid length. [ 94.015473][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1613'. [ 94.359749][ T9496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.359962][ T9496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.948480][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.948689][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.976941][ T9597] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 95.116170][ T4723] Bluetooth: hci1: command tx timeout [ 95.177786][ T9614] loop9: detected capacity change from 0 to 256 [ 95.193243][ T9617] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1678'. [ 95.193281][ T9617] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1678'. [ 95.197099][ T9614] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.260999][ T9623] loop6: detected capacity change from 0 to 512 [ 95.276597][ T4723] Bluetooth: hci2: command tx timeout [ 95.281218][ T9625] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779264) [ 95.281264][ T9625] FAT-fs (loop9): Filesystem has been set read-only [ 95.281550][ T9625] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 95.281576][ T9625] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 95.282393][ T9625] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 95.282414][ T9625] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 95.285959][ T9623] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.1681: corrupted in-inode xattr: invalid ea_ino [ 95.285984][ T9623] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.287617][ T9623] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1681: couldn't read orphan inode 15 (err -117) [ 95.287639][ T9623] loop6: lost filesystem error report for type 5 error -117 [ 95.289778][ T9623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.297406][ T9623] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.1681: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 95.472644][ T7551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.513780][ T9612] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 95.547005][ T9638] netlink: 'syz.6.1683': attribute type 4 has an invalid length. [ 95.548968][ T9638] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1683'. [ 95.660600][ T9652] bonding: no command found in bonding_masters - use +ifname or -ifname [ 95.795707][ T30] kauditd_printk_skb: 5725 callbacks suppressed [ 95.795745][ T30] audit: type=1326 audit(101.788:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.6.1696" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979228 code=0x7ffc0000 [ 95.795769][ T30] audit: type=1326 audit(101.788:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.6.1696" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979228 code=0x7ffc0000 [ 95.795786][ T30] audit: type=1326 audit(101.788:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.6.1696" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979228 code=0x7ffc0000 [ 95.796592][ T30] audit: type=1326 audit(101.788:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.6.1696" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=9 compat=0 ip=0xffff9a979228 code=0x7ffc0000 [ 95.796616][ T30] audit: type=1326 audit(101.788:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.6.1696" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979228 code=0x7ffc0000 [ 95.796633][ T30] audit: type=1326 audit(101.788:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.6.1696" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a979228 code=0x7ffc0000 [ 95.796790][ T30] audit: type=1326 audit(101.788:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.6.1696" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9a979228 code=0x7ffc0000 [ 95.796871][ T30] audit: type=1326 audit(101.788:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.6.1696" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff9a979228 code=0x7ffc0000 [ 95.8665 ** replaying previous printk message ** [ 95.866587][ T9671] ------------[ cut here ]------------ [ 95.866624][ T9671] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 95.866836][ T9671] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x480/0x4ac, CPU#1: syz.6.1698/9671 [ 95.870915][ T9676] IPv6: Can't replace route, no match found [ 95.872670][ T9671] Modules linked in: [ 95.873328][ T9671] CPU: 1 UID: 0 PID: 9671 Comm: syz.6.1698 Not tainted syzkaller #0 PREEMPT [ 95.874591][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 95.876169][ T9671] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.877526][ T9671] pc : netdev_queue_get_dma_dev+0x480/0x4ac [ 95.878583][ T9671] lr : netdev_queue_get_dma_dev+0x480/0x4ac [ 95.879662][ T9671] sp : ffff8000928e7880 [ 95.880368][ T9671] x29: ffff8000928e7880 x28: 1fffe00018558115 x27: dfff800000000000 [ 95.881741][ T9671] x26: ffff70001251cf1c x25: 0000000000000000 x24: 0000000000000000 [ 95.883148][ T9671] x23: dfff800000000000 x22: ffff80008a19d000 x21: 0000000000000000 [ 95.884555][ T9671] x20: ffff0000d893a000 x19: 0000000000000000 x18: 00000000ffffffff [ 95.885957][ T9671] x17: ffff80008a7d6000 x16: 0000000000000003 x15: ffff80008a35fda0 [ 95.887398][ T9671] x14: 0000000000000001 x13: 0000000000000001 x12: 0000000000000000 [ 95.888836][ T9671] x11: 0000000000000000 x10: 0000000000080000 x9 : f152922d39c75200 [ 95.890224][ T9671] x8 : f152922d39c75200 x7 : ffff80008048c5b8 x6 : 0000000000000000 [ 95.891725][ T9671] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 95.893062][ T9671] x2 : 0000000100000000 x1 : ffff0000cb800000 x0 : 0000000000000001 [ 95.894461][ T9671] Call trace: [ 95.895008][ T9671] netdev_queue_get_dma_dev+0x480/0x4ac (P) [ 95.895989][ T9671] zcrx_register_netdev+0x1b8/0x460 [ 95.896890][ T9671] io_register_zcrx+0x7ac/0xa00 [ 95.897720][ T9671] __arm64_sys_io_uring_register+0x7f0/0x13fc [ 95.898716][ T9671] invoke_syscall+0x98/0x244 [ 95.899505][ T9671] el0_svc_common+0xec/0x23c [ 95.900308][ T9671] do_el0_svc+0x4c/0x5c [ 95.901023][ T9671] el0_svc+0x64/0x260 [ 95.901718][ T9671] el0t_64_sync_handler+0x44/0x104 [ 95.902573][ T9671] el0t_64_sync+0x198/0x19c [ 95.903337][ T9671] irq event stamp: 148 [ 95.903985][ T9671] hardirqs last enabled at (147): [] __arm64_exit_to_kernel_mode+0x64/0x78 [ 95.905769][ T9671] hardirqs last disabled at (148): [] el1_brk64+0x20/0x54 [ 95.907228][ T9671] softirqs last enabled at (120): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 95.908999][ T9671] softirqs last disabled at (118): [] fpsimd_restore_current_state+0x44/0x9c8 [ 95.910771][ T9671] ---[ end trace 0000000000000000 ]--- [ 97.196053][ T4723] Bluetooth: hci1: command tx timeout [ 97.358271][ T4723] Bluetooth: hci2: command tx timeout [ 99.436127][ T4723] Bluetooth: hci2: command tx timeout