last executing test programs: 31.258266756s ago: executing program 1 (id=638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x180000504) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24000000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 30.822636447s ago: executing program 1 (id=640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 29.900910618s ago: executing program 1 (id=645): r0 = io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001002, 0x3d7}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x100}}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 29.702170312s ago: executing program 1 (id=647): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000cc0)="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", 0x2000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/51, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000440)=0x8101) 29.702018692s ago: executing program 1 (id=648): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) setregid(0x0, 0x0) syz_emit_vhci(&(0x7f0000001040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xe3, 0xc9}}}, 0x6) 28.307069666s ago: executing program 1 (id=654): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x4000002, 0x0, 0x4, 0x200000}}, 0x2e) 28.235475457s ago: executing program 32 (id=654): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x4000002, 0x0, 0x4, 0x200000}}, 0x2e) 6.897416647s ago: executing program 5 (id=759): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r3, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) 6.151815185s ago: executing program 5 (id=763): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$evdev(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 5.211703117s ago: executing program 0 (id=766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000500)={0x11, 0x0, r2}, 0x14) sendto(r6, &(0x7f0000000600)='\x00', 0x1, 0x0, 0x0, 0x0) 4.957831663s ago: executing program 0 (id=768): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) epoll_create1(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x81000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r0], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0) 4.957537443s ago: executing program 5 (id=769): ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000000)={0x21, 0x0}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 4.957184673s ago: executing program 4 (id=771): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e1f, @local}, 0x72) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x4000000000002, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd, 0x32}, 0x0, @in6=@empty, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.086248844s ago: executing program 0 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) 3.81039555s ago: executing program 2 (id=773): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$FUSE_INTERRUPT(r0, &(0x7f0000002bc0)={0x10, 0xffffffffffffffda}, 0x10) write(r0, &(0x7f0000000280)='1', 0x1) 3.79897807s ago: executing program 4 (id=774): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000840)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 3.726246802s ago: executing program 3 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6) 3.653930514s ago: executing program 2 (id=776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x21) sendfile(r3, r4, 0x0, 0x110000) 2.837123933s ago: executing program 4 (id=777): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4d6, &(0x7f0000000a00)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x24040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0xc044054) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2100, &(0x7f0000000140)={&(0x7f0000000280)={0x54, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 2.734276725s ago: executing program 3 (id=778): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7055, 0x40040, 0xfffffffe, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c8a, 0x20, 0x3, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9c7d, 0x0, 0x40000003, 0x60}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.621259738s ago: executing program 3 (id=779): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @dev={0xac, 0x14, 0x14, 0x23}, 0x4e23, 0x3, 'lc\x00', 0x1, 0x28c, 0x61}, 0x2c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000080)=0xc) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @multicast2, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x2000007, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.582465388s ago: executing program 4 (id=780): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1008224, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001500010123bd7000fbdbdf250a8584", @ANYRES32=r1, @ANYBLOB="14000200fe88000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008052}, 0x24004000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143241, 0x4b) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x4, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @broadcast}}]}, 0x290) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2.509154411s ago: executing program 2 (id=781): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x41) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x20, 0x16, 0xa01, 0x4001, 0x0, {0xa}, [@nested={0xc, 0xd8, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) 2.417853323s ago: executing program 3 (id=782): mkdirat(0xffffffffffffff9c, 0x0, 0x777) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x18, r4, 0x65283e1aaa2ddbb1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 1.890246395s ago: executing program 0 (id=783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='select \n', 0x10) write(r3, &(0x7f0000000100)='file read /etc/passwd /as/\\-id=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 1.810586477s ago: executing program 5 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.728223569s ago: executing program 4 (id=785): bind$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x21) sendfile(r3, r4, 0x0, 0x110000) 1.414238826s ago: executing program 2 (id=786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.025282376s ago: executing program 3 (id=787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x7}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 986.254926ms ago: executing program 0 (id=788): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000640)={{0x9, 0x4, 0x7, 0x3, 'syz0\x00', 0x4}, 0x0, [0x5, 0x5, 0x1, 0x8, 0x6, 0x720, 0x4, 0x7, 0x8, 0x6, 0x4, 0x6, 0x7e, 0x3ff, 0x1, 0x7, 0xa9, 0x1000, 0x19564bd4, 0x3, 0x1, 0x80, 0x3, 0x8, 0x40, 0x2, 0x4, 0x1, 0x0, 0x9, 0x1, 0xffffffffffffff09, 0x5, 0x3, 0x8, 0x4, 0x3, 0x7, 0x7, 0x2, 0x6f, 0x800, 0x7, 0x20006, 0x100000000000f676, 0x2, 0x9, 0x8000000000000000, 0x10001, 0x4, 0xfffffffffffffff6, 0x9, 0x0, 0x2, 0x8000000000000001, 0x0, 0x7fffffffffffffff, 0x1, 0x8, 0x8, 0x8, 0x6, 0x7, 0x3, 0x81, 0x65c, 0x4, 0x2, 0xb3, 0x400, 0x0, 0x9, 0x6f, 0x0, 0x6, 0x81, 0x0, 0x4, 0x2, 0xffff, 0x1, 0x80000001, 0x7, 0xfece, 0x201d1db0, 0x8, 0x9, 0x3, 0xffff, 0x100, 0x2, 0x40, 0xb, 0x4, 0x6, 0x0, 0x5, 0x800, 0x5, 0x1, 0x2, 0x1d, 0xefffffffffff8000, 0x0, 0x1, 0x4, 0x3, 0x75c, 0x4, 0x0, 0x7, 0x3, 0x3, 0x0, 0xa, 0xfffffffffffffff8, 0x5, 0x2, 0xffffffffffff0262, 0x7ddb, 0x1, 0x7ff, 0x6, 0x10000, 0x4, 0x750d, 0x6]}) 910.278878ms ago: executing program 2 (id=789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 910.028178ms ago: executing program 5 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 890.188768ms ago: executing program 3 (id=791): sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4800, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x200) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 546.486007ms ago: executing program 4 (id=792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 95.654127ms ago: executing program 0 (id=793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200591214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r7, 0xffffffffffffffff, 0x0) 34.280749ms ago: executing program 2 (id=794): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 0s ago: executing program 5 (id=795): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 29.204485][ T4317] cgroup: Unknown subsys name 'net' [ 29.482448][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.763186][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.442932][ T4335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.444665][ T4335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.447823][ T4341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.449461][ T4341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.451063][ T4341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.452578][ T4341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.454075][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.455864][ T4341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.456799][ T4344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.457216][ T4341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.458617][ T4344] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.461298][ T4344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.462705][ T4345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.462996][ T4344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.465608][ T4341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.466274][ T4344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.468310][ T4344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.468452][ T4346] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.469684][ T4344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.479520][ T4346] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.482501][ T4346] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.484064][ T4346] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.484311][ T4344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.487469][ T4344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.489672][ T4344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.491342][ T4344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.493688][ T4339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.495410][ T4339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.496932][ T4339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.498272][ T4339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.638953][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 30.643485][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 30.667470][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.682909][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 30.688762][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.708656][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.710899][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.712532][ T4337] device bridge_slave_0 entered promiscuous mode [ 30.716273][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.717555][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.719121][ T4336] device bridge_slave_0 entered promiscuous mode [ 30.725782][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.727119][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.728716][ T4337] device bridge_slave_1 entered promiscuous mode [ 30.733838][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.735151][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.736731][ T4336] device bridge_slave_1 entered promiscuous mode [ 30.754809][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.756220][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.757882][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.761230][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.762740][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.764084][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.765696][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.772217][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.775271][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.776597][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.778291][ T4340] device bridge_slave_0 entered promiscuous mode [ 30.782226][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.791333][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.795021][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.796269][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.797897][ T4340] device bridge_slave_1 entered promiscuous mode [ 30.804308][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.805520][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.807091][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.813880][ T4336] team0: Port device team_slave_0 added [ 30.821526][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.823265][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.824544][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.826038][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.829829][ T4336] team0: Port device team_slave_1 added [ 30.832867][ T4337] team0: Port device team_slave_0 added [ 30.834754][ T4337] team0: Port device team_slave_1 added [ 30.838632][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.844826][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.850836][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.852177][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.857056][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.867636][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.869428][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.871140][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.875722][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.881342][ T4329] team0: Port device team_slave_0 added [ 30.883442][ T4329] team0: Port device team_slave_1 added [ 30.884764][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.885970][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.890634][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.893822][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.895684][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.896967][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.902414][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.914178][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.961334][ T4336] device hsr_slave_0 entered promiscuous mode [ 31.000105][ T4336] device hsr_slave_1 entered promiscuous mode [ 31.040295][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.041615][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.045691][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.053067][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.054245][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.058348][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.062043][ T4340] team0: Port device team_slave_0 added [ 31.066277][ T4330] team0: Port device team_slave_0 added [ 31.072899][ T4340] team0: Port device team_slave_1 added [ 31.075059][ T4330] team0: Port device team_slave_1 added [ 31.094532][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.095797][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.100514][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.141106][ T4337] device hsr_slave_0 entered promiscuous mode [ 31.180207][ T4337] device hsr_slave_1 entered promiscuous mode [ 31.219914][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.221356][ T4337] Cannot create hsr debugfs directory [ 31.225286][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.226446][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.230778][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.232967][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.234219][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.238951][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.244975][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.246179][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.252577][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.291010][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.340203][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.379998][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.381277][ T4329] Cannot create hsr debugfs directory [ 31.430971][ T4340] device hsr_slave_0 entered promiscuous mode [ 31.470140][ T4340] device hsr_slave_1 entered promiscuous mode [ 31.519940][ T4340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.521281][ T4340] Cannot create hsr debugfs directory [ 31.590904][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.640127][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.679923][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.681284][ T4330] Cannot create hsr debugfs directory [ 31.782521][ T4336] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.825665][ T4336] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.861046][ T4336] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.902668][ T4336] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.943808][ T4337] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.001102][ T4337] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.055302][ T4337] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.102039][ T4337] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.159170][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.213193][ T4340] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.251056][ T4340] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.291821][ T4340] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.331041][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.371132][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.413225][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.450799][ T4340] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.490174][ T4339] Bluetooth: hci0: command 0x0409 tx timeout [ 32.491344][ T4339] Bluetooth: hci2: command 0x0409 tx timeout [ 32.500623][ T4335] Bluetooth: hci1: command 0x0409 tx timeout [ 32.503136][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.552417][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.569922][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 32.569980][ T4339] Bluetooth: hci4: command 0x0409 tx timeout [ 32.596659][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.621993][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.698678][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.705889][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.709167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.713231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.725233][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.726950][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.728736][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.730165][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.738570][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.755712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.757570][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.759159][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.760584][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.768017][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.777422][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.780997][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.785622][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.787432][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.789187][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.799180][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.803429][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.805043][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.807412][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.813755][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.817932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.819502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.821955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.823723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.827915][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.834858][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.837329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.838920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.844036][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.845489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.847036][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.848641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.851291][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.855368][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.862167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.863733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.865516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.867033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.868974][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.870264][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.873389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.875071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.876585][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.877762][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.879397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.882273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.883889][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.885177][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.886586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.888186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.889734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.893686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.895487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.896958][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.898322][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.901205][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.909081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.911302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.912905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.914461][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.915649][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.916879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.918464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.920979][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.922280][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.923687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.925456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.935547][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.937411][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.939154][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.943819][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.945802][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.947559][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.949316][ T1609] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.950677][ T1609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.966904][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.968483][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.971364][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.973440][ T1609] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.974762][ T1609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.976469][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.978336][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.983066][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.985387][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.986951][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.988787][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.992149][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.993721][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.995359][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.996988][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.998528][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.003209][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.004891][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.006714][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.008517][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.010580][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.013569][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.015334][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.017817][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.019340][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.024906][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.029300][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.033620][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.035347][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.036930][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.045465][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.047503][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.049150][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.053811][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.055599][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.057234][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.058929][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.063489][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.066971][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.068873][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.076344][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.088905][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.090944][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.092340][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.094188][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.097782][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.106443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.108232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.121458][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.135639][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.137476][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.163944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.165682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.167645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.169202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.182920][ T4340] device veth0_vlan entered promiscuous mode [ 33.186944][ T4340] device veth1_vlan entered promiscuous mode [ 33.195125][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.196849][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.198183][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.201154][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.215027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.216726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.218396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.222115][ T4340] device veth0_macvtap entered promiscuous mode [ 33.234416][ T4340] device veth1_macvtap entered promiscuous mode [ 33.246543][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.247968][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.249768][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.252633][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.254201][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.276993][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.279498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.281186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.282487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.283851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.300468][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.304341][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.306082][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.307889][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.309266][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.320568][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.326936][ T4340] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.328501][ T4340] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.330469][ T4340] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.331894][ T4340] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.335072][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.341597][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.343241][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.363065][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.364912][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.377775][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.379586][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.382893][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.384427][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.392592][ T4336] device veth0_vlan entered promiscuous mode [ 33.398195][ T4330] device veth0_vlan entered promiscuous mode [ 33.405476][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.407518][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.409147][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.411183][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.419055][ T4330] device veth1_vlan entered promiscuous mode [ 33.424405][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.426048][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.427846][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.433325][ T4336] device veth1_vlan entered promiscuous mode [ 33.447013][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.448712][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.450743][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.452714][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.454401][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.456121][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.457657][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.459162][ T4337] device veth0_vlan entered promiscuous mode [ 33.465815][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.467244][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.468932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.474243][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.485582][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.487031][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.488699][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.491344][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.496873][ T4329] device veth0_vlan entered promiscuous mode [ 33.504252][ T4330] device veth0_macvtap entered promiscuous mode [ 33.513093][ T4337] device veth1_vlan entered promiscuous mode [ 33.518253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.520313][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.522123][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.523864][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.525713][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.527332][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.528944][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.532018][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.535731][ T4330] device veth1_macvtap entered promiscuous mode [ 33.537334][ T4329] device veth1_vlan entered promiscuous mode [ 33.554840][ T4336] device veth0_macvtap entered promiscuous mode [ 33.566593][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.568358][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.571252][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.572935][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.574367][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.576348][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.578028][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.581456][ T4336] device veth1_macvtap entered promiscuous mode [ 33.585866][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.587682][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.600888][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.603030][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.604609][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.606864][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.616417][ T4329] device veth0_macvtap entered promiscuous mode [ 33.619022][ T4329] device veth1_macvtap entered promiscuous mode [ 33.629296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.631530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.633149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.635254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.643296][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.645139][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.646773][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.648520][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.652754][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.655219][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.657150][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.663197][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.667932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.669720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.674803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.676451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.678590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.682120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.685886][ T4337] device veth0_macvtap entered promiscuous mode [ 33.688296][ T4337] device veth1_macvtap entered promiscuous mode [ 33.693136][ T4336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.694717][ T4336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.696310][ T4336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.697798][ T4336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.706267][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.708127][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.711089][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.712677][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.715350][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.719325][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.722066][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.723601][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.725169][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.731893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.733573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.735106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.736890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.753510][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.755477][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.757231][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.759090][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.767122][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.769057][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.769490][ T4418] loop2: detected capacity change from 0 to 256 [ 33.776571][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.799337][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.801440][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.806591][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.808489][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.812377][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.814130][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.815792][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.824411][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.828876][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.833017][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.834733][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.836389][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.838100][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.839685][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.843740][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.845331][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.847056][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.849442][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.853092][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.854975][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.856675][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.858409][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.870725][ T4337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.872323][ T4337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.873980][ T4337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.875611][ T4337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.892664][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.894703][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.896469][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.898302][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.901109][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.903059][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.905133][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.906967][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.911822][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.914992][ T1609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.915942][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.916376][ T1609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.917891][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.922284][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.923754][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.926119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.927878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.929592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.975227][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.976625][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.978357][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.994503][ T4399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.995952][ T4399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.008986][ T4421] loop2: detected capacity change from 0 to 2048 [ 34.021326][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.022697][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.029122][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.031379][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.033170][ T4421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 34.048511][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.049841][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.052045][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.074631][ T1617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.076044][ T1617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.077525][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.107798][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.109312][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.117348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.224052][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.225633][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.227111][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.238095][ T4429] loop4: detected capacity change from 0 to 8192 [ 34.523965][ T4429] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value [ 34.571514][ T4344] Bluetooth: hci2: command 0x041b tx timeout [ 34.572680][ T4344] Bluetooth: hci0: command 0x041b tx timeout [ 34.573762][ T4344] Bluetooth: hci1: command 0x041b tx timeout [ 34.608631][ T4435] loop1: detected capacity change from 0 to 512 [ 34.625016][ T4435] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.11: corrupted in-inode xattr [ 34.641541][ T4435] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.11: couldn't read orphan inode 15 (err -117) [ 34.650457][ T4339] Bluetooth: hci4: command 0x041b tx timeout [ 34.653392][ T4435] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.660071][ T4344] Bluetooth: hci3: command 0x041b tx timeout [ 35.157948][ T4460] Zero length message leads to an empty skb [ 35.164932][ T4460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16'. [ 35.342165][ T4469] loop3: detected capacity change from 0 to 8 [ 35.675944][ T4467] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 35.683751][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 35.685105][ T4469] mac80211_hwsim hwsim9 »»»»»»: renamed from wlan0 [ 35.835243][ T27] audit: type=1326 audit(35.820:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4477 comm="syz.3.22" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa01792a8 code=0x0 [ 36.084090][ T4486] capability: warning: `syz.1.23' uses 32-bit capabilities (legacy support in use) [ 36.357121][ T4489] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 36.690505][ T4339] Bluetooth: hci1: command 0x040f tx timeout [ 36.692087][ T4339] Bluetooth: hci0: command 0x040f tx timeout [ 36.693738][ T4339] Bluetooth: hci2: command 0x040f tx timeout [ 36.730423][ T4344] Bluetooth: hci3: command 0x040f tx timeout [ 36.731969][ T4344] Bluetooth: hci4: command 0x040f tx timeout [ 36.834600][ T4496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'. [ 36.936075][ T4500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 37.439234][ T4500] device hsr_slave_1 left promiscuous mode [ 37.709206][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000fc090b19: rx timeout, send abort [ 38.095629][ T4521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 38.211190][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000fc090b19: abort rx timeout. Force session deactivation [ 38.674939][ T4532] CIFS: Attempting to mount \\127.0.0.1\share [ 38.786843][ T4339] Bluetooth: hci2: command 0x0419 tx timeout [ 38.788222][ T4339] Bluetooth: hci0: command 0x0419 tx timeout [ 38.789402][ T4339] Bluetooth: hci1: command 0x0419 tx timeout [ 38.820034][ T4344] Bluetooth: hci4: command 0x0419 tx timeout [ 38.821528][ T4339] Bluetooth: hci3: command 0x0419 tx timeout [ 38.865826][ T4537] netlink: 84 bytes leftover after parsing attributes in process `syz.4.39'. [ 38.869318][ T4537] netlink: 84 bytes leftover after parsing attributes in process `syz.4.39'. [ 39.176533][ T4553] loop1: detected capacity change from 0 to 16 [ 39.183615][ T4553] erofs: (device loop1): erofs_init_device: empty device tag @ pos 0 [ 39.195100][ T4553] loop1: detected capacity change from 0 to 2048 [ 39.198487][ T4553] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 39.284602][ T4559] netlink: 'syz.1.45': attribute type 2 has an invalid length. [ 39.286178][ T4559] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 39.287409][ T4559] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.45'. [ 39.320872][ T4561] netlink: 168 bytes leftover after parsing attributes in process `syz.1.46'. [ 39.508473][ T4532] CIFS: VFS: Error connecting to socket. Aborting operation. [ 39.510163][ T4532] CIFS: VFS: cifs_mount failed w/return code = -4 [ 39.882648][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.884885][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.886261][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.888254][ T4575] device bridge_slave_0 left promiscuous mode [ 39.889959][ T4575] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.988310][ T4577] netlink: 'syz.3.50': attribute type 3 has an invalid length. [ 40.327741][ T4575] device bridge_slave_1 left promiscuous mode [ 40.329049][ T4575] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.384786][ T4575] bond0: (slave bond_slave_0): Releasing backup interface [ 40.468509][ T4575] bond0: (slave bond_slave_1): Releasing backup interface [ 40.820136][ T4575] team0: Port device team_slave_0 removed [ 40.842401][ T4575] team0: Port device team_slave_1 removed [ 40.843930][ T4575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.847731][ T4575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.850860][ T4575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.852258][ T4575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.898392][ T4594] null_blk: disk nullb1 created [ 40.912681][ T4580] team0: Port device xfrm0 added [ 40.996263][ T4601] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 41.395087][ T4613] loop0: detected capacity change from 0 to 256 [ 41.401769][ T4613] ======================================================= [ 41.401769][ T4613] WARNING: The mand mount option has been deprecated and [ 41.401769][ T4613] and is ignored by this kernel. Remove the mand [ 41.401769][ T4613] option from the mount to silence this warning. [ 41.401769][ T4613] ======================================================= [ 41.403608][ T4609] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 41.432637][ T4613] exFAT-fs (loop0): bogus sector size bits : 0 [ 41.433947][ T4613] exFAT-fs (loop0): failed to read boot sector [ 41.438440][ T4613] exFAT-fs (loop0): failed to recognize exfat type [ 41.484515][ T4616] tipc: Started in network mode [ 41.485474][ T4616] tipc: Node identity 4, cluster identity 4711 [ 41.486633][ T4616] tipc: Node number set to 4 [ 41.494090][ T4322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 42.929737][ T4647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'. [ 43.074035][ T4661] raw_sendmsg: syz.4.74 forgot to set AF_INET. Fix it! [ 43.116831][ T4664] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20003 [ 43.449103][ T4650] loop0: detected capacity change from 0 to 32768 [ 43.501288][ T4650] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.71 (4650) [ 43.513487][ T4668] loop3: detected capacity change from 0 to 32768 [ 43.519168][ T4668] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.78 (4668) [ 43.535918][ T4650] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 43.544769][ T4650] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 43.548427][ T4650] BTRFS info (device loop0): setting nodatacow, compression disabled [ 43.554830][ T4319] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 43.556871][ T4650] BTRFS info (device loop0): enabling auto defrag [ 43.582446][ T4650] BTRFS info (device loop0): max_inline at 0 [ 43.587594][ T4650] BTRFS info (device loop0): using free space tree [ 43.698717][ T4672] tipc: Started in network mode [ 43.699604][ T4672] tipc: Node identity 8a97a88c8f3, cluster identity 4711 [ 43.707786][ T4672] tipc: Enabled bearer , priority 0 [ 43.710587][ T4672] device syzkaller0 entered promiscuous mode [ 44.722285][ T24] tipc: Node number set to 94873740 [ 44.759476][ T4691] tipc: Resetting bearer [ 44.771376][ T4671] tipc: Resetting bearer [ 44.808706][ T4693] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 44.912099][ T4671] tipc: Disabling bearer [ 44.935259][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 44.936975][ T4705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.028793][ T4715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.86'. [ 46.035086][ T4705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.343779][ T4704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.83'. [ 46.357363][ T4336] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.535609][ T4732] device syzkaller0 entered promiscuous mode [ 46.553970][ T4729] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 46.658626][ T4729] bond1: (slave macvlan2): Enslaving as an active interface with a down link [ 46.735207][ T4335] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 46.736668][ T4335] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 46.740150][ T4335] CPU: 0 PID: 4335 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 46.741472][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 46.743229][ T4335] Workqueue: hci1 hci_rx_work [ 46.744089][ T4335] Call trace: [ 46.744660][ T4335] dump_backtrace+0x1c4/0x1f0 [ 46.745511][ T4335] show_stack+0x2c/0x3c [ 46.746274][ T4335] __dump_stack+0x30/0x40 [ 46.747082][ T4335] dump_stack_lvl+0xf4/0x15c [ 46.747917][ T4335] dump_stack+0x1c/0x5c [ 46.748693][ T4335] sysfs_create_dir_ns+0x244/0x264 [ 46.749650][ T4335] kobject_add_internal+0x5a8/0xb18 [ 46.750592][ T4335] kobject_add+0x144/0x20c [ 46.751419][ T4335] device_add+0x3dc/0xe4c [ 46.752239][ T4335] hci_conn_add_sysfs+0xb8/0x1bc [ 46.753296][ T4335] hci_conn_complete_evt+0x7b8/0x10b4 [ 46.754433][ T4335] hci_event_packet+0x698/0xe60 [ 46.755385][ T4335] hci_rx_work+0x310/0xa70 [ 46.756264][ T4335] process_one_work+0x7e4/0x13bc [ 46.757202][ T4335] worker_thread+0x8cc/0xfe8 [ 46.758061][ T4335] kthread+0x254/0x2e0 [ 46.758809][ T4335] ret_from_fork+0x10/0x20 [ 46.760665][ T4335] kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 46.894995][ T4335] Bluetooth: hci1: failed to register connection device [ 46.960946][ T4736] loop3: detected capacity change from 0 to 32768 [ 46.981235][ T4736] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.93 (4736) [ 46.999076][ T4736] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 47.002283][ T4736] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 47.004071][ T4736] BTRFS info (device loop3): using free space tree [ 47.386267][ T4749] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.387799][ T4752] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 47.434168][ T4736] BTRFS info (device loop3): enabling ssd optimizations [ 48.359159][ T4329] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 48.980297][ T4335] Bluetooth: hci1: command 0x0409 tx timeout [ 49.101189][ T4806] overlayfs: failed to clone upperpath [ 49.464918][ T4808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.108'. [ 49.488737][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 49.491424][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.492923][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.495078][ T4810] device bridge_slave_0 left promiscuous mode [ 49.496464][ T4810] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.547801][ T4810] device bridge_slave_1 left promiscuous mode [ 49.549060][ T4810] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.606126][ T4810] bond0: (slave bond_slave_0): Releasing backup interface [ 49.636202][ T4810] bond0: (slave bond_slave_1): Releasing backup interface [ 49.695187][ T4810] team0: Port device team_slave_0 removed [ 49.704799][ T4810] team0: Port device team_slave_1 removed [ 49.706304][ T4810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.707774][ T4810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.709776][ T4810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.760579][ T4810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.050051][ T4335] Bluetooth: hci1: command 0x041b tx timeout [ 51.110235][ T4811] team0: Mode changed to "random" [ 51.115130][ T4812] netlink: 'syz.4.108': attribute type 6 has an invalid length. [ 51.116391][ T4812] netlink: 72 bytes leftover after parsing attributes in process `syz.4.108'. [ 51.118399][ T4818] tipc: Started in network mode [ 51.119266][ T4818] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 51.120836][ T4818] tipc: Enabled bearer , priority 0 [ 51.145226][ T1609] tipc: Resetting bearer [ 51.158933][ T4813] device vlan0 entered promiscuous mode [ 51.175037][ T4813] team0: Port device vlan0 added [ 51.227234][ T4837] bridge0: port 1(syz_tun) entered blocking state [ 51.228868][ T4837] bridge0: port 1(syz_tun) entered disabled state [ 51.231640][ T4837] device syz_tun entered promiscuous mode [ 51.233682][ T4837] bridge0: port 1(syz_tun) entered blocking state [ 51.234969][ T4837] bridge0: port 1(syz_tun) entered forwarding state [ 51.448124][ T4840] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 51.670717][ T4850] loop0: detected capacity change from 0 to 512 [ 51.674062][ T4850] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: comm syz.0.119: inode #2147418112: comm syz.0.119: iget: illegal inode # [ 51.676780][ T4850] EXT4-fs (loop0): no journal found [ 51.677835][ T4850] EXT4-fs (loop0): can't get journal size [ 51.679326][ T4850] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 51.682989][ T4850] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 51.684458][ T4850] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.040803][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 52.119343][ T4865] process 'syz.4.124' launched './file0' with NULL argv: empty string added [ 52.139956][ T4379] tipc: Node number set to 11578026 [ 53.179267][ T4335] Bluetooth: hci1: command 0x040f tx timeout [ 53.265165][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 53.945604][ T4912] bond1: option mode: unable to set because the bond device has slaves [ 53.973084][ T4912] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 55.089853][ C1] sched: RT throttling activated [ 55.111620][ T4912] bond1: (slave macvlan3): Enslaving as an active interface with a down link [ 55.510947][ T4958] loop4: detected capacity change from 0 to 512 [ 55.545388][ T4919] bond1: (slave ip6gretap1): making interface the new active one [ 55.590757][ T4919] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 55.934089][ T4996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.136'. [ 55.966856][ T4958] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.988794][ T4958] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.134: corrupted inode contents [ 55.995550][ T4958] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 56.015196][ T4958] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.134: corrupted inode contents [ 56.027653][ T4958] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.134: mark_inode_dirty error [ 56.037489][ T4958] EXT4-fs (loop4): 1 orphan inode deleted [ 56.040346][ T4958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 56.086954][ T4999] loop3: detected capacity change from 0 to 512 [ 56.116780][ T4999] EXT4-fs (loop3): 1 truncate cleaned up [ 56.118159][ T4999] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 56.132545][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 56.146702][ T4999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.138'. [ 56.274972][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 56.356995][ T5009] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.358680][ T5009] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.360268][ T5009] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.361919][ T5009] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.909746][ T5021] netlink: 96 bytes leftover after parsing attributes in process `syz.3.140'. [ 57.021296][ T5024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 57.032516][ T5024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 57.052716][ T5024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.143'. [ 57.054486][ T5024] device bond2 entered promiscuous mode [ 57.498787][ T5024] device dummy0 entered promiscuous mode [ 57.501600][ T5024] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 57.510192][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 57.638133][ T5033] loop3: detected capacity change from 0 to 4096 [ 58.698981][ T5046] netlink: 48 bytes leftover after parsing attributes in process `syz.2.151'. [ 58.718059][ T5049] sctp: [Deprecated]: syz.0.149 (pid 5049) Use of struct sctp_assoc_value in delayed_ack socket option. [ 58.718059][ T5049] Use struct sctp_sack_info instead [ 58.718356][ T5027] loop4: detected capacity change from 0 to 32768 [ 58.731556][ T5046] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.151'. [ 59.079260][ T5027] XFS (loop4): Mounting V5 Filesystem [ 59.137055][ T5064] device syzkaller0 entered promiscuous mode [ 59.152993][ T5027] XFS (loop4): Ending clean mount [ 59.183258][ T5027] XFS (loop4): Quotacheck needed: Please wait. [ 59.219360][ T5048] loop3: detected capacity change from 0 to 32768 [ 59.222819][ T5027] XFS (loop4): Quotacheck: Done. [ 59.347032][ T5027] netlink: 256 bytes leftover after parsing attributes in process `syz.4.144'. [ 59.379116][ T4337] XFS (loop4): Unmounting Filesystem [ 59.590178][ T5048] XFS (loop3): Mounting V5 Filesystem [ 59.640754][ T5048] XFS (loop3): Ending clean mount [ 59.651028][ T5048] XFS (loop3): Quotacheck needed: Please wait. [ 59.668838][ T5048] XFS (loop3): Quotacheck: Done. [ 59.876797][ T5110] jffs2: notice: (5110) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 60.176896][ T5117] loop0: detected capacity change from 0 to 1024 [ 60.196243][ T4329] XFS (loop3): Unmounting Filesystem [ 60.200765][ T5117] EXT4-fs: Ignoring removed bh option [ 60.203256][ T5117] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.244777][ T5117] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 61.068031][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 61.151423][ T5137] kAFS: No cell specified [ 61.182440][ T5137] netlink: 32 bytes leftover after parsing attributes in process `syz.0.170'. [ 61.501543][ T5144] loop4: detected capacity change from 0 to 128 [ 61.615293][ T5148] loop0: detected capacity change from 0 to 64 [ 61.685556][ T5151] netlink: 260 bytes leftover after parsing attributes in process `syz.4.171'. [ 61.688350][ T5151] netlink: 104 bytes leftover after parsing attributes in process `syz.4.171'. [ 61.690532][ T5151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 61.921086][ T5148] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 61.946821][ T5155] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 61.994529][ T5155] device bridge1 entered promiscuous mode [ 61.999013][ T5155] bond3: (slave bridge1): making interface the new active one [ 62.000914][ T5155] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 62.949382][ T5184] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 62.974752][ T5184] bond1: (slave gretap1): making interface the new active one [ 62.976916][ T5184] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 62.998191][ T5184] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 63.309216][ T5196] netlink: 'syz.3.184': attribute type 1 has an invalid length. [ 63.315156][ T5196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.330689][ T5198] bond1: (slave gretap1): making interface the new active one [ 63.333431][ T5198] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 63.335397][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 63.386337][ T5204] loop0: detected capacity change from 0 to 256 [ 63.388007][ T5204] exfat: Deprecated parameter 'utf8' [ 63.389057][ T5204] exfat: Deprecated parameter 'namecase' [ 63.433509][ T5204] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 63.962344][ T5220] SET target dimension over the limit! [ 64.755812][ T5222] kAFS: unable to lookup cell '.,c¾ûL' [ 64.757784][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.759166][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.020292][ T5224] loop4: detected capacity change from 0 to 2048 [ 65.082522][ T5224] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 65.505974][ T5241] FAULT_INJECTION: forcing a failure. [ 65.505974][ T5241] name failslab, interval 1, probability 0, space 0, times 1 [ 65.522088][ T5241] CPU: 0 PID: 5241 Comm: syz.3.197 Not tainted syzkaller #0 [ 65.523609][ T5241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.525521][ T5241] Call trace: [ 65.526132][ T5241] dump_backtrace+0x1c4/0x1f0 [ 65.526981][ T5241] show_stack+0x2c/0x3c [ 65.527739][ T5241] __dump_stack+0x30/0x40 [ 65.528548][ T5241] dump_stack_lvl+0xf4/0x15c [ 65.529395][ T5241] dump_stack+0x1c/0x5c [ 65.530124][ T5241] should_fail_ex+0x3cc/0x524 [ 65.530945][ T5241] __should_failslab+0xc0/0x11c [ 65.531803][ T5241] should_failslab+0x10/0x28 [ 65.532770][ T5241] kmem_cache_alloc+0x88/0x310 [ 65.533754][ T5241] _sctp_make_chunk+0x144/0x3f4 [ 65.534682][ T5241] sctp_make_datafrag_empty+0xa8/0x454 [ 65.535735][ T5241] sctp_datamsg_from_user+0x6d4/0xe78 [ 65.536611][ T5241] sctp_sendmsg_to_asoc+0xfa0/0x1384 [ 65.537520][ T5241] sctp_sendmsg+0x13bc/0x20f4 [ 65.538396][ T5241] inet_sendmsg+0x154/0x27c [ 65.539356][ T5241] kernel_sendmsg+0x270/0x2f0 [ 65.540286][ T5241] sock_no_sendpage+0x150/0x1d0 [ 65.541235][ T5241] kernel_sendpage+0x1e0/0x310 [ 65.542116][ T5241] sock_sendpage+0x84/0xcc [ 65.542921][ T5241] pipe_to_sendpage+0x1ec/0x2e8 [ 65.543780][ T5241] __splice_from_pipe+0x2d4/0x734 [ 65.544699][ T5241] generic_splice_sendpage+0xf0/0x154 [ 65.545637][ T5241] do_splice+0xfb8/0x1764 [ 65.546442][ T5241] __arm64_sys_splice+0x4dc/0x5f4 [ 65.547353][ T5241] invoke_syscall+0x98/0x290 [ 65.548204][ T5241] el0_svc_common+0x13c/0x258 [ 65.549201][ T5241] do_el0_svc+0x5c/0x134 [ 65.550017][ T5241] el0_svc+0x58/0x128 [ 65.550754][ T5241] el0t_64_sync_handler+0x84/0xf0 [ 65.551682][ T5241] el0t_64_sync+0x18c/0x190 [ 65.672324][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 66.015967][ T5250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 67.127529][ T27] audit: type=1326 audit(67.110:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff941792a8 code=0x7ffc0000 [ 67.147908][ T27] audit: type=1326 audit(67.130:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9415c16c code=0x7ffc0000 [ 67.176238][ T27] audit: type=1326 audit(67.130:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff9417a94c code=0x7ffc0000 [ 67.196633][ T27] audit: type=1326 audit(67.130:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff941792a8 code=0x7ffc0000 [ 67.215681][ T27] audit: type=1326 audit(67.130:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff9417a94c code=0x7ffc0000 [ 67.219774][ T27] audit: type=1326 audit(67.130:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff9415c16c code=0x7ffc0000 [ 67.263138][ T27] audit: type=1326 audit(67.130:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff941792a8 code=0x7ffc0000 [ 67.315642][ T27] audit: type=1326 audit(67.130:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff941792a8 code=0x7ffc0000 [ 67.323736][ T27] audit: type=1326 audit(67.150:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff941792a8 code=0x7ffc0000 [ 67.328055][ T27] audit: type=1326 audit(67.150:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff941792a8 code=0x7ffc0000 [ 67.428510][ T5280] netlink: 'syz.2.211': attribute type 4 has an invalid length. [ 67.719182][ T5280] netlink: 'syz.2.211': attribute type 4 has an invalid length. [ 67.731706][ T5280] netlink: 'syz.2.211': attribute type 4 has an invalid length. [ 67.757949][ T5270] loop3: detected capacity change from 0 to 32768 [ 67.773241][ T5286] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 67.773241][ T5286] The task syz.1.209 (5286) triggered the difference, watch for misbehavior. [ 67.803624][ T5270] XFS (loop3): Mounting V5 Filesystem [ 67.851386][ T5270] XFS (loop3): Ending clean mount [ 67.853634][ T5270] XFS (loop3): Quotacheck needed: Please wait. [ 67.869398][ T5270] XFS (loop3): Quotacheck: Done. [ 68.316415][ T4329] XFS (loop3): Unmounting Filesystem [ 68.417000][ T5303] tipc: Failed to remove unknown binding: 66,0,0/11578026:3241782109/3241782110 [ 68.419030][ T5306] tipc: Failed to remove unknown binding: 66,0,0/11578026:2015434167/2015434169 [ 68.424179][ T5303] tipc: Failed to remove unknown binding: 66,0,0/11578026:3241782109/3241782110 [ 68.482388][ T5311] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.570988][ T5314] netlink: 'syz.0.219': attribute type 1 has an invalid length. [ 68.579168][ T5314] device bond1 entered promiscuous mode [ 68.580826][ T5314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.648582][ T5319] netlink: 'syz.3.220': attribute type 1 has an invalid length. [ 68.655937][ T5319] device bond2 entered promiscuous mode [ 68.657138][ T5319] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.685100][ T5319] bond2: (slave bridge1): making interface the new active one [ 68.686493][ T5319] device bridge1 entered promiscuous mode [ 68.688098][ T5319] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 68.690278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 68.720147][ T5314] bond1: (slave bridge1): making interface the new active one [ 68.721897][ T5314] device bridge1 entered promiscuous mode [ 68.723998][ T5314] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 68.725515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 68.807629][ T5330] loop0: detected capacity change from 0 to 64 [ 68.818009][ T5330] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 69.479382][ T5353] device syzkaller0 entered promiscuous mode [ 69.821059][ T22] cfg80211: failed to load regulatory.db [ 70.418151][ T5380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.239'. [ 70.557074][ T5380] bond3: (slave veth5): Enslaving as an active interface with an up link [ 71.371568][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.948066][ T5421] loop4: detected capacity change from 0 to 128 [ 71.952664][ T5421] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 72.344639][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 74.856094][ T5480] loop3: detected capacity change from 0 to 512 [ 74.875346][ T5480] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.884075][ T5480] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.896733][ T5486] netlink: 'syz.0.268': attribute type 10 has an invalid length. [ 74.898359][ T5486] tipc: Resetting bearer [ 74.904071][ T5480] EXT4-fs (loop3): 1 truncate cleaned up [ 74.905154][ T5480] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.928162][ T5486] tipc: Resetting bearer [ 74.979638][ T5486] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.994644][ T5486] bond0: (slave team0): Enslaving as an active interface with an up link [ 76.050741][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 76.477528][ T5515] loop3: detected capacity change from 0 to 32768 [ 77.098848][ T5513] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 77.100253][ T5513] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.102179][ T5513] vhci_hcd vhci_hcd.0: Device attached [ 77.106864][ T5514] vhci_hcd: connection closed [ 77.113196][ T11] vhci_hcd: stop threads [ 77.115678][ T11] vhci_hcd: release socket [ 77.116566][ T11] vhci_hcd: disconnect device [ 77.720746][ T27] kauditd_printk_skb: 55 callbacks suppressed [ 77.720761][ T27] audit: type=1326 audit(91.696:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5510 comm="syz.4.276" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb792a8 code=0x0 [ 78.171426][ T5544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.282'. [ 78.990867][ T4339] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 78.992680][ T4339] CPU: 0 PID: 4339 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 78.993928][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.995735][ T4339] Workqueue: hci1 hci_rx_work [ 78.996608][ T4339] Call trace: [ 78.997209][ T4339] dump_backtrace+0x1c4/0x1f0 [ 78.998108][ T4339] show_stack+0x2c/0x3c [ 78.998872][ T4339] __dump_stack+0x30/0x40 [ 78.999663][ T4339] dump_stack_lvl+0xf4/0x15c [ 79.000496][ T4339] dump_stack+0x1c/0x5c [ 79.001265][ T4339] sysfs_create_dir_ns+0x244/0x264 [ 79.002181][ T4339] kobject_add_internal+0x5a8/0xb18 [ 79.003124][ T4339] kobject_add+0x144/0x20c [ 79.003920][ T4339] device_add+0x3dc/0xe4c [ 79.004714][ T4339] hci_conn_add_sysfs+0xb8/0x1bc [ 79.005621][ T4339] le_conn_complete_evt+0xd3c/0x1300 [ 79.006611][ T4339] hci_le_conn_complete_evt+0x114/0x3b8 [ 79.007598][ T4339] hci_le_meta_evt+0x2c0/0x4a8 [ 79.008502][ T4339] hci_event_packet+0x64c/0xe60 [ 79.009399][ T4339] hci_rx_work+0x310/0xa70 [ 79.010339][ T4339] process_one_work+0x7e4/0x13bc [ 79.011266][ T4339] worker_thread+0x8cc/0xfe8 [ 79.012113][ T4339] kthread+0x254/0x2e0 [ 79.012877][ T4339] ret_from_fork+0x10/0x20 [ 79.328113][ T4339] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 79.330499][ T4339] Bluetooth: hci1: failed to register connection device [ 79.406215][ T5573] tipc: Enabling of bearer rejected, failed to enable media [ 79.862342][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 79.910423][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 80.160340][ T5610] bridge0: port 3(vxlan0) entered blocking state [ 80.161670][ T5610] bridge0: port 3(vxlan0) entered disabled state [ 80.163194][ T5610] device vxlan0 entered promiscuous mode [ 80.649913][ T5618] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 80.792085][ T5622] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\" or missing value [ 82.104809][ T5645] device syzkaller0 entered promiscuous mode [ 82.111112][ T5639] loop3: detected capacity change from 0 to 2048 [ 82.119228][ T5639] UDF-fs: bad mount option "fileset=000000000½$00000000000" or missing value [ 82.181240][ T5648] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 82.313761][ T5653] device syz_tun left promiscuous mode [ 82.319027][ T5653] bridge0: port 1(syz_tun) entered disabled state [ 82.374156][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.377596][ T5653] bond0: (slave team0): Releasing backup interface [ 82.444833][ T5653] tipc: Resetting bearer [ 82.465941][ T5653] tipc: Resetting bearer [ 82.472014][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.479285][ T5653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.513166][ T5653] team0: Port device vlan0 removed [ 82.540687][ T5653] bond1: (slave bridge1): Releasing backup interface [ 82.542073][ T5653] device bridge1 left promiscuous mode [ 82.616176][ T5655] team0: Mode changed to "roundrobin" [ 82.617418][ T5660] tipc: Enabling of bearer rejected, already enabled [ 82.632882][ T5657] team0: Port device vlan0 added [ 82.634982][ T5666] netlink: 'syz.4.313': attribute type 1 has an invalid length. [ 82.644349][ T5666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.492536][ T5688] netlink: 'syz.1.321': attribute type 1 has an invalid length. [ 83.518048][ T5688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.321'. [ 83.520273][ T5688] device bond2 entered promiscuous mode [ 83.521690][ T5688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.534809][ T5688] device bridge1 entered promiscuous mode [ 83.539262][ T5688] bond2: (slave bridge1): making interface the new active one [ 83.543793][ T5688] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 83.545715][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 83.556165][ T5686] loop3: detected capacity change from 0 to 164 [ 83.874391][ T5694] netlink: 'syz.1.322': attribute type 1 has an invalid length. [ 83.905207][ T5694] 8021q: adding VLAN 0 to HW filter on device bond3 [ 83.988101][ T5694] bond3: (slave dummy0): making interface the new active one [ 83.990931][ T5694] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 83.994026][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 84.376359][ T5707] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.642848][ T5729] netlink: 'syz.2.342': attribute type 39 has an invalid length. [ 85.660268][ T5731] loop3: detected capacity change from 0 to 2048 [ 85.951858][ T5731] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.968664][ T5737] loop4: detected capacity change from 0 to 8 [ 85.972928][ T5737] SQUASHFS error: zlib decompression failed, data probably corrupt [ 85.974779][ T5737] SQUASHFS error: Failed to read block 0x9b: -5 [ 85.976111][ T5737] SQUASHFS error: Unable to read metadata cache entry [99] [ 85.977542][ T5737] SQUASHFS error: Unable to read inode 0x127 [ 86.586643][ T5749] loop4: detected capacity change from 0 to 1024 [ 86.589244][ T5749] EXT4-fs: Ignoring removed bh option [ 86.590207][ T5749] EXT4-fs: Ignoring removed oldalloc option [ 86.591300][ T5749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.035065][ T5749] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.156219][ T5749] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 87.157922][ T5749] System zones: 0-1, 3-36 [ 87.166592][ T5749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.208156][ T5764] xt_TPROXY: Can be used only with -p tcp or -p udp [ 88.248816][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 91.382284][ T5827] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 91.734054][ T5837] loop4: detected capacity change from 0 to 512 [ 92.941539][ T27] audit: type=1326 audit(524395.720:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5830 comm="syz.3.367" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa01792a8 code=0x0 [ 92.966887][ T5827] 8021q: adding VLAN 0 to HW filter on device bond5 [ 92.980120][ T5837] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 93.254651][ T5827] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 93.256376][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 93.365884][ T5853] netlink: 'syz.2.362': attribute type 1 has an invalid length. [ 93.643401][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.646727][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.648478][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.650092][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 93.652462][ T5853] bond6: (slave geneve2): making interface the new active one [ 93.654506][ T5853] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 93.658003][ T5861] loop0: detected capacity change from 0 to 256 [ 93.687488][ T5853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.362'. [ 93.699336][ T5853] 8021q: adding VLAN 0 to HW filter on device bond6 [ 94.886250][ T5888] loop0: detected capacity change from 0 to 512 [ 96.118422][ T5888] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 97.402781][ T5903] loop0: detected capacity change from 0 to 1024 [ 97.404393][ T5903] EXT4-fs: Ignoring removed bh option [ 97.405267][ T5903] EXT4-fs: Ignoring removed oldalloc option [ 97.406224][ T5903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.876308][ T5903] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.072029][ T5903] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 98.073592][ T5903] System zones: 0-1, 3-36 [ 98.108181][ T5910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.139645][ T5910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.236950][ T5903] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 98.886347][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 99.848284][ T5943] netlink: 'syz.4.386': attribute type 3 has an invalid length. [ 101.259204][ T5968] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 101.293923][ T5968] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.296550][ T5968] bond2: (slave bond3): making interface the new active one [ 101.298127][ T5968] bond2: (slave bond3): Enslaving as an active interface with an up link [ 101.301864][ T5973] netlink: 'syz.3.396': attribute type 2 has an invalid length. [ 101.321008][ T5968] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 101.620011][ T4784] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.804940][ T4784] usb 1-1: config 0 has no interfaces? [ 101.808777][ T4784] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.810863][ T4784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.812385][ T4784] usb 1-1: Product: syz [ 101.813132][ T4784] usb 1-1: Manufacturer: syz [ 101.813967][ T4784] usb 1-1: SerialNumber: syz [ 101.823065][ T4784] usb 1-1: config 0 descriptor?? [ 102.896244][ T6004] tipc: Started in network mode [ 102.897407][ T6004] tipc: Node identity 080211, cluster identity 4711 [ 102.898717][ T6004] tipc: Enabled bearer , priority 0 [ 103.039001][ T6011] using random self ethernet address [ 103.040887][ T6011] using random host ethernet address [ 103.050244][ T4824] wlan1: Trigger new scan to find an IBSS to join [ 104.957406][ T4377] tipc: Node number set to 134353152 [ 105.016255][ T4377] usb 1-1: USB disconnect, device number 2 [ 105.093303][ T6041] netlink: 156 bytes leftover after parsing attributes in process `syz.0.418'. [ 105.385393][ T6051] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 107.528955][ T4339] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 107.532059][ T4339] CPU: 0 PID: 4339 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 107.533467][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 107.535339][ T4339] Workqueue: hci0 hci_rx_work [ 107.536258][ T4339] Call trace: [ 107.536853][ T4339] dump_backtrace+0x1c4/0x1f0 [ 107.537715][ T4339] show_stack+0x2c/0x3c [ 107.538503][ T4339] __dump_stack+0x30/0x40 [ 107.539302][ T4339] dump_stack_lvl+0xf4/0x15c [ 107.540155][ T4339] dump_stack+0x1c/0x5c [ 107.540929][ T4339] sysfs_create_dir_ns+0x244/0x264 [ 107.541891][ T4339] kobject_add_internal+0x5a8/0xb18 [ 107.542875][ T4339] kobject_add+0x144/0x20c [ 107.543692][ T4339] device_add+0x3dc/0xe4c [ 107.544477][ T4339] hci_conn_add_sysfs+0xb8/0x1bc [ 107.545381][ T4339] le_conn_complete_evt+0xd3c/0x1300 [ 107.546370][ T4339] hci_le_enh_conn_complete_evt+0x114/0x3b8 [ 107.547458][ T4339] hci_le_meta_evt+0x2c0/0x4a8 [ 107.548330][ T4339] hci_event_packet+0x64c/0xe60 [ 107.549194][ T4339] hci_rx_work+0x310/0xa70 [ 107.550012][ T4339] process_one_work+0x7e4/0x13bc [ 107.550885][ T4339] worker_thread+0x8cc/0xfe8 [ 107.551638][ T4339] kthread+0x254/0x2e0 [ 107.552317][ T4339] ret_from_fork+0x10/0x20 [ 108.586471][ T4968] wlan1: Trigger new scan to find an IBSS to join [ 108.600031][ T4339] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 108.602398][ T4339] Bluetooth: hci0: failed to register connection device [ 108.806946][ T6121] netlink: 'syz.4.439': attribute type 1 has an invalid length. [ 108.922012][ T6121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.925256][ T6121] bond2: (slave bond3): making interface the new active one [ 108.926645][ T6121] bond2: (slave bond3): Enslaving as an active interface with an up link [ 108.931563][ T6130] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 109.970087][ T4968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.009967][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.063415][ T6157] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.068482][ T6157] bond3: (slave dummy0): Releasing active interface [ 110.135571][ T6157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.137099][ T6157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.143374][ T6157] device bridge_slave_0 left promiscuous mode [ 110.144490][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.411947][ T6157] device bridge_slave_1 left promiscuous mode [ 110.413309][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.493258][ T6157] bond0: (slave bond_slave_0): Releasing backup interface [ 110.557899][ T6157] bond0: (slave bond_slave_1): Releasing backup interface [ 111.459814][ T6157] team0: Port device team_slave_0 removed [ 111.478466][ T6157] team0: Port device team_slave_1 removed [ 111.481453][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.488569][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.501425][ T6157] bond1: (slave gretap1): Releasing active interface [ 111.625589][ T6157] bond2: (slave bridge1): Releasing backup interface [ 111.735655][ T6179] device syzkaller0 entered promiscuous mode [ 111.817336][ T6187] CIFS: Attempting to mount \\::1\share [ 113.547357][ T6187] CIFS: VFS: Error connecting to socket. Aborting operation. [ 113.549401][ T6187] CIFS: VFS: cifs_mount failed w/return code = -4 [ 114.868660][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 114.909129][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 114.919065][ T6230] futex_wake_op: syz.2.473 tries to shift op by 144; fix this program [ 115.476292][ T6241] capability: warning: `syz.1.471' uses deprecated v2 capabilities in a way that may be insecure [ 118.184099][ T6276] sctp: [Deprecated]: syz.3.480 (pid 6276) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.184099][ T6276] Use struct sctp_sack_info instead [ 119.235437][ T6292] 8021q: adding VLAN 0 to HW filter on device bond5 [ 119.303895][ T6292] bond4: (slave bond5): Enslaving as an active interface with an up link [ 119.322177][ T6299] bond4 (unregistering): (slave bond5): Releasing backup interface [ 119.675978][ T6299] bond4 (unregistering): Released all slaves [ 120.307741][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.498'. [ 120.309573][ T6319] netlink: 'syz.4.498': attribute type 7 has an invalid length. [ 120.311305][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.498'. [ 120.349522][ T6321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.499'. [ 121.853499][ T6354] Set syz0 is full, maxelem 0 reached [ 121.932345][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.511'. [ 122.243723][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'. [ 122.274787][ T6363] bridge3: port 1(veth7) entered blocking state [ 122.276522][ T6363] bridge3: port 1(veth7) entered disabled state [ 122.278342][ T6363] device veth7 entered promiscuous mode [ 122.360723][ T6365] loop4: detected capacity change from 0 to 32768 [ 122.369468][ T6363] bridge3: port 2(veth0_to_bond) entered blocking state [ 122.371162][ T6363] bridge3: port 2(veth0_to_bond) entered disabled state [ 122.373029][ T6363] device veth0_to_bond entered promiscuous mode [ 122.403182][ T6363] bridge3: port 3(veth9) entered blocking state [ 122.404554][ T6363] bridge3: port 3(veth9) entered disabled state [ 122.406998][ T6363] device veth9 entered promiscuous mode [ 122.422615][ T6365] XFS (loop4): Mounting V5 Filesystem [ 122.738186][ T6365] XFS (loop4): Ending clean mount [ 122.755174][ T6365] XFS (loop4): Quotacheck needed: Please wait. [ 122.782419][ T6365] XFS (loop4): Quotacheck: Done. [ 122.917618][ T4335] Bluetooth: hci4: Invalid connection link type handle 0x00c8 [ 123.421154][ T4337] XFS (loop4): Unmounting Filesystem [ 123.929357][ T4335] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 123.932997][ T4335] Bluetooth: hci0: Injecting HCI hardware error event [ 123.940379][ T4339] Bluetooth: hci0: hardware error 0x00 [ 124.081334][ T6404] loop0: detected capacity change from 0 to 32768 [ 124.085368][ T6404] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.524 (6404) [ 124.374305][ T6404] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 124.376258][ T6404] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 124.377783][ T6404] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 124.379602][ T6404] BTRFS info (device loop0): use zstd compression, level 3 [ 124.380942][ T6404] BTRFS info (device loop0): force clearing of disk cache [ 124.382113][ T6404] BTRFS info (device loop0): enabling disk space caching [ 124.383255][ T6404] BTRFS info (device loop0): disk space caching is enabled [ 124.603919][ T6404] BTRFS info (device loop0): enabling ssd optimizations [ 124.606633][ T6404] BTRFS info (device loop0): rebuilding free space tree [ 124.617196][ T6404] BTRFS info (device loop0): disabling free space tree [ 124.618381][ T6404] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.620522][ T6404] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.059796][ T4336] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 126.075189][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.076495][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.785692][ T4339] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 128.569959][ T4339] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 128.572539][ T4339] Bluetooth: hci1: Injecting HCI hardware error event [ 128.574893][ T4335] Bluetooth: hci1: hardware error 0x00 [ 130.590280][ T6555] netlink: 'syz.1.564': attribute type 1 has an invalid length. [ 130.659468][ T6555] 8021q: adding VLAN 0 to HW filter on device bond4 [ 131.004613][ T6555] bond4: (slave geneve2): making interface the new active one [ 131.007201][ T6555] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 131.008680][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 131.019105][ T6565] netlink: 68 bytes leftover after parsing attributes in process `syz.0.558'. [ 131.188391][ T4422] Process accounting resumed [ 133.255990][ T4335] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 133.468105][ T6584] loop4: detected capacity change from 0 to 16 [ 133.490742][ T6584] erofs: (device loop4): mounted with root inode @ nid 36. [ 133.525801][ T6584] erofs: (device loop4): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 133.527544][ T6584] erofs: (device loop4): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 133.559006][ T6584] erofs: (device loop4): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 133.562107][ T6584] erofs: (device loop4): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 133.563933][ T6584] erofs: (device loop4): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 133.569157][ T6584] erofs: (device loop4): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 133.576636][ T6584] erofs: (device loop4): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 133.588315][ T6584] erofs: (device loop4): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 133.592875][ T6584] erofs: (device loop4): z_erofs_readahead: readahead error at page 128 @ nid 36 [ 133.594472][ T6584] erofs: (device loop4): z_erofs_readahead: readahead error at page 120 @ nid 36 [ 133.596514][ T6584] syz.4.563: attempt to access beyond end of device [ 133.596514][ T6584] loop4: rw=524288, sector=13478624032, nr_sectors = 32 limit=16 [ 133.598987][ T6584] syz.4.563: attempt to access beyond end of device [ 133.598987][ T6584] loop4: rw=524288, sector=13478624040, nr_sectors = 32 limit=16 [ 133.613634][ T6584] syz.4.563: attempt to access beyond end of device [ 133.613634][ T6584] loop4: rw=524288, sector=14550774152, nr_sectors = 32 limit=16 [ 133.615893][ T6584] syz.4.563: attempt to access beyond end of device [ 133.615893][ T6584] loop4: rw=524288, sector=14550774160, nr_sectors = 32 limit=16 [ 133.618243][ T6584] syz.4.563: attempt to access beyond end of device [ 133.618243][ T6584] loop4: rw=524288, sector=13716630376, nr_sectors = 32 limit=16 [ 133.625978][ T6584] syz.4.563: attempt to access beyond end of device [ 133.625978][ T6584] loop4: rw=524288, sector=13716630384, nr_sectors = 32 limit=16 [ 133.628569][ T6584] syz.4.563: attempt to access beyond end of device [ 133.628569][ T6584] loop4: rw=524288, sector=790384, nr_sectors = 32 limit=16 [ 133.644375][ T6584] syz.4.563: attempt to access beyond end of device [ 133.644375][ T6584] loop4: rw=524288, sector=790392, nr_sectors = 32 limit=16 [ 133.646962][ T6584] syz.4.563: attempt to access beyond end of device [ 133.646962][ T6584] loop4: rw=524288, sector=72, nr_sectors = 32 limit=16 [ 133.649357][ T6584] syz.4.563: attempt to access beyond end of device [ 133.649357][ T6584] loop4: rw=524288, sector=80, nr_sectors = 32 limit=16 [ 134.054679][ T6599] netlink: 14 bytes leftover after parsing attributes in process `syz.1.568'. [ 134.550935][ T6613] overlayfs: failed to clone lowerpath [ 134.554972][ T6613] overlayfs: failed to clone lowerpath [ 138.868527][ T6675] overlayfs: failed to clone lowerpath [ 139.369396][ T6694] ip_tables: iptables: counters copy to user failed while replacing table [ 139.616040][ T6698] loop0: detected capacity change from 0 to 2048 [ 140.174686][ T6698] EXT4-fs: test_dummy_encryption requires encrypt feature [ 140.621320][ T4322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.718337][ T6709] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 141.089351][ T6709] bond4: (slave veth11): Enslaving as an active interface with a down link [ 141.095850][ T6709] device macvlan2 entered promiscuous mode [ 141.097437][ T6709] device bond4 entered promiscuous mode [ 141.098830][ T6709] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.309739][ T6709] device bond4 left promiscuous mode [ 141.916960][ T6733] device syzkaller0 left promiscuous mode [ 142.336470][ T6744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.612'. [ 142.339488][ T6744] device ip6gre1 entered promiscuous mode [ 142.855535][ T4841] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 142.971010][ T6751] netlink: 'syz.3.612': attribute type 6 has an invalid length. [ 142.978688][ T6751] netlink: 72 bytes leftover after parsing attributes in process `syz.3.612'. [ 143.553758][ T6757] loop0: detected capacity change from 0 to 1024 [ 143.570328][ T6757] EXT4-fs: Ignoring removed bh option [ 143.605771][ T6757] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 144.165904][ T4336] EXT4-fs (loop0): unmounting filesystem. [ 144.576349][ T6798] ip_tables: iptables: counters copy to user failed while replacing table [ 148.848617][ T6880] loop0: detected capacity change from 0 to 32768 [ 149.008754][ T6880] JBD2: Ignoring recovery information on journal [ 149.111802][ T6880] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 149.180911][ T6877] Set syz1 is full, maxelem 65536 reached [ 149.219584][ T6899] sctp: [Deprecated]: syz.1.638 (pid 6899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.219584][ T6899] Use struct sctp_sack_info instead [ 149.455469][ T6906] netlink: 'syz.4.639': attribute type 2 has an invalid length. [ 149.504888][ T6882] ceph: No mds server is up or the cluster is laggy [ 150.008040][ T4336] ocfs2: Unmounting device (7,0) on (node local) [ 150.463302][ T6923] loop4: detected capacity change from 0 to 32768 [ 150.503989][ T6923] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 151.457468][ T6949] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 152.178833][ T4335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.471323][ T4335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.474080][ T4335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.476063][ T4335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.478125][ T4335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.479688][ T4335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.725217][ T6960] chnl_net:caif_netlink_parms(): no params data found [ 153.094630][ T6960] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.099239][ T6960] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.103668][ T6960] device bridge_slave_0 entered promiscuous mode [ 153.107831][ T6960] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.109631][ T6960] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.117070][ T4337] ocfs2: Unmounting device (7,4) on (node local) [ 153.121986][ T6960] device bridge_slave_1 entered promiscuous mode [ 153.174211][ T6960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.183893][ T6960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.218360][ T6960] team0: Port device team_slave_0 added [ 153.253905][ T6960] team0: Port device team_slave_1 added [ 153.655064][ T4339] Bluetooth: hci3: command 0x0406 tx timeout [ 153.655065][ T4335] Bluetooth: hci2: command 0x0406 tx timeout [ 153.667413][ T6960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.668789][ T6960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.675433][ T6960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.678317][ T6960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.679657][ T6960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.686609][ T6960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.731361][ T6960] device hsr_slave_0 entered promiscuous mode [ 153.770284][ T6960] device hsr_slave_1 entered promiscuous mode [ 153.829932][ T6960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.832753][ T6960] Cannot create hsr debugfs directory [ 153.897708][ T6960] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.001716][ T7002] Injecting memory failure for pfn 0x13d226 at process virtual address 0x20001000 [ 154.044423][ T7002] Memory failure: 0x13d226: recovery action for dirty LRU page: Recovered [ 154.046210][ T7002] Injecting memory failure for pfn 0x13d227 at process virtual address 0x20002000 [ 154.048024][ T7002] Memory failure: 0x13d227: recovery action for dirty LRU page: Recovered [ 154.049672][ T7002] Injecting memory failure for pfn 0x13d228 at process virtual address 0x20003000 [ 154.051746][ T7002] Memory failure: 0x13d228: recovery action for dirty LRU page: Recovered [ 154.550145][ T6960] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.570175][ T4335] Bluetooth: hci1: command 0x0409 tx timeout [ 155.480488][ T6960] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.529012][ T6960] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.929188][ T6960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.939077][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.942215][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.945937][ T6960] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.953280][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.955235][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.956932][ T4395] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.958218][ T4395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.964229][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.973230][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.975781][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.977479][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.978778][ T4399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.983518][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.988320][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.999045][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.003569][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.005617][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.014947][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.018528][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.030942][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.033098][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.035040][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.037024][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.046311][ T6960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.104177][ T7053] fuse: Bad value for 'fd' [ 156.150797][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.156884][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.169604][ T6960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.564700][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.567179][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.571193][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.573329][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.575070][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.576604][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.579279][ T6960] device veth0_vlan entered promiscuous mode [ 156.585660][ T6960] device veth1_vlan entered promiscuous mode [ 156.599051][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.601906][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.603567][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.605557][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.608861][ T6960] device veth0_macvtap entered promiscuous mode [ 156.721259][ T4335] Bluetooth: hci1: command 0x041b tx timeout [ 156.916378][ T6960] device veth1_macvtap entered promiscuous mode [ 156.935488][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.940879][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.945183][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.949449][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.956288][ T6960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.958740][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.962909][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.964759][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.966630][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.972642][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.975680][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.977564][ T6960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.983128][ T6960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.986938][ T6960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.992063][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.994018][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.007796][ T6960] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.011465][ T6960] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.013602][ T6960] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.016652][ T6960] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.094157][ T4968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.098058][ T4968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.381114][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.426618][ T4399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.428127][ T4399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.429612][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.853843][ T7103] loop5: detected capacity change from 0 to 512 [ 158.278087][ T7103] EXT2-fs (loop5): (no)acl options not supported [ 158.296609][ T7103] EXT2-fs (loop5): warning: mounting ext3 filesystem as ext2 [ 159.418569][ T7121] loop0: detected capacity change from 0 to 65 [ 159.672193][ T7121] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 160.293599][ T7148] netlink: 48 bytes leftover after parsing attributes in process `syz.2.699'. [ 160.398572][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.701'. [ 160.410183][ T4335] Bluetooth: hci1: command 0x0419 tx timeout [ 160.648338][ C1] vcan0: j1939_tp_rxtimer: 0x000000001e1f6b72: rx timeout, send abort [ 161.095005][ T7154] tipc: Enabling of bearer rejected, failed to enable media [ 161.694720][ T7185] tipc: Enabling of bearer rejected, failed to enable media [ 163.360482][ T7218] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 163.369749][ T7218] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 163.510472][ T7215] loop4: detected capacity change from 0 to 65536 [ 163.528916][ T7215] XFS (loop4): Mounting V5 Filesystem [ 163.561665][ T7215] XFS (loop4): Ending clean mount [ 163.567518][ T27] audit: type=1326 audit(524467.540:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.4.716" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb792a8 code=0x0 [ 164.821009][ T4337] XFS (loop4): Unmounting Filesystem [ 165.174920][ T7247] loop0: detected capacity change from 0 to 4096 [ 165.218195][ T7247] NILFS (loop0): invalid segment: Checksum error in segment payload [ 165.223261][ T7247] NILFS (loop0): trying rollback from an earlier position [ 165.253202][ T7247] NILFS (loop0): recovery complete [ 165.263943][ T7251] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.204481][ T7268] Illegal XDP return value 3985884022 on prog (id 78) dev N/A, expect packet loss! [ 167.296408][ T7270] loop0: detected capacity change from 0 to 256 [ 167.297985][ T7270] exfat: Deprecated parameter 'utf8' [ 167.299033][ T7270] exfat: Deprecated parameter 'utf8' [ 167.524333][ T7270] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 168.456070][ T7288] loop5: detected capacity change from 0 to 4096 [ 168.507174][ T7282] loop0: detected capacity change from 0 to 32768 [ 168.574120][ T7282] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 168.575807][ T7282] XFS (loop0): Mounting V5 Filesystem [ 168.628151][ T7282] XFS (loop0): Ending clean mount [ 168.631171][ T7282] XFS (loop0): Quotacheck needed: Please wait. [ 169.316862][ T7282] XFS (loop0): Quotacheck: Done. [ 170.043825][ T4336] XFS (loop0): Unmounting Filesystem [ 170.056836][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 170.101577][ T7322] binder: 7321:7322 tried to acquire reference to desc 0, got 1 instead [ 170.395878][ T112] binder: release 7321:7322 transaction 5 out, still active [ 170.397358][ T112] binder: undelivered TRANSACTION_COMPLETE [ 170.931119][ T7331] Trying to write to read-only block-device nullb0 [ 171.497965][ T4377] binder: send failed reply for transaction 5, target dead [ 171.553191][ T7333] Trying to write to read-only block-device nullb0 [ 173.499714][ T7376] nvmet: adding nsid 1 to subsystem testsubsys [ 174.079540][ T4378] nvmet: connect request for invalid subsystem testsubsys! [ 174.082263][ T7376] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 174.583453][ T4395] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 175.173375][ T7406] device syzkaller0 entered promiscuous mode [ 176.110645][ T7415] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.112522][ T7415] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.114060][ T7415] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.115862][ T7415] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.222620][ T7415] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 177.369472][ T7445] Injecting memory failure for pfn 0x13cb12 at process virtual address 0x20001000 [ 177.382374][ T7445] Memory failure: 0x13cb12: recovery action for dirty LRU page: Recovered [ 177.384653][ T7445] Injecting memory failure for pfn 0x13cb13 at process virtual address 0x20002000 [ 177.386367][ T7445] Memory failure: 0x13cb13: recovery action for dirty LRU page: Recovered [ 177.387901][ T7445] Injecting memory failure for pfn 0x13cb14 at process virtual address 0x20003000 [ 177.389749][ T7445] Memory failure: 0x13cb14: recovery action for dirty LRU page: Recovered [ 177.574537][ T7448] loop4: detected capacity change from 0 to 512 [ 177.605651][ T7448] EXT4-fs warning (device loop4): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 177.653805][ T7450] futex_wake_op: syz.3.778 tries to shift op by 144; fix this program [ 177.751705][ T7448] tipc: New replicast peer: 127.0.0.1 [ 177.753246][ T7448] tipc: Enabled bearer , priority 10 [ 177.951708][ T7457] loop4: detected capacity change from 0 to 128 [ 178.499671][ T7457] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 178.509252][ T7457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.780'. [ 178.550881][ T7457] overlayfs: failed to resolve './file0': -2 [ 178.839252][ T7472] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 178.845450][ T7472] CIFS: Attempting to mount \\127.0.0.1\share [ 178.848457][ T7472] CIFS: VFS: No username specified [ 178.909080][ T4322] udevd[4322]: incorrect ext4 checksum on /dev/loop4 [ 178.920940][ T4337] EXT4-fs (loop4): unmounting filesystem. [ 179.452317][ T4344] Bluetooth: hci4: command 0x0406 tx timeout [ 180.216294][ T7506] device syzkaller0 entered promiscuous mode [ 180.387441][ T7509] ================================================================== [ 180.388983][ T7509] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x210/0x214 [ 180.390664][ T7509] Read of size 2 at addr ffff0000d369edfb by task syz.0.793/7509 [ 180.392150][ T7509] [ 180.392597][ T7509] CPU: 0 PID: 7509 Comm: syz.0.793 Not tainted syzkaller #0 [ 180.393963][ T7509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 180.395828][ T7509] Call trace: [ 180.396440][ T7509] dump_backtrace+0x1c4/0x1f0 [ 180.397308][ T7509] show_stack+0x2c/0x3c [ 180.397537][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.795'. [ 180.398065][ T7509] __dump_stack+0x30/0x40 [ 180.400415][ T7509] dump_stack_lvl+0xf4/0x15c [ 180.401251][ T7509] print_address_description+0x88/0x218 [ 180.402284][ T7509] print_report+0x50/0x68 [ 180.403099][ T7509] kasan_report+0xa8/0xfc [ 180.403878][ T7509] __asan_report_load2_noabort+0x2c/0x38 [ 180.404882][ T7509] ieee80211_monitor_select_queue+0x210/0x214 [ 180.406004][ T7509] netdev_core_pick_tx+0x130/0x320 [ 180.406940][ T7509] __dev_queue_xmit+0x730/0x3154 [ 180.407823][ T7509] dev_queue_xmit+0x24/0x34 [ 180.408657][ T7509] packet_sendmsg+0x2de8/0x3d64 [ 180.409556][ T7509] ____sys_sendmsg+0x588/0x90c [ 180.410447][ T7509] __sys_sendmsg+0x288/0x374 [ 180.411233][ T7509] __arm64_sys_sendmsg+0x80/0x94 [ 180.412084][ T7509] invoke_syscall+0x98/0x290 [ 180.412903][ T7509] el0_svc_common+0x13c/0x258 [ 180.413752][ T7509] do_el0_svc+0x5c/0x134 [ 180.414477][ T7509] el0_svc+0x58/0x128 [ 180.415154][ T7509] el0t_64_sync_handler+0x84/0xf0 [ 180.415629][ T7516] 8021q: VLANs not supported on ipvlan1 [ 180.416042][ T7509] el0t_64_sync+0x18c/0x190 [ 180.417771][ T7509] [ 180.418182][ T7509] Allocated by task 4329: [ 180.418963][ T7509] kasan_set_track+0x4c/0x80 [ 180.419797][ T7509] kasan_save_alloc_info+0x24/0x30 [ 180.420712][ T7509] __kasan_kmalloc+0xa0/0xb8 [ 180.421489][ T7509] kmalloc_trace+0x7c/0x94 [ 180.422268][ T7509] macvlan_common_newlink+0x410/0x1374 [ 180.423229][ T7509] macvtap_newlink+0x15c/0x1dc [ 180.424096][ T7509] rtnl_newlink+0x10b4/0x1af0 [ 180.424946][ T7509] rtnetlink_rcv_msg+0x694/0xcc4 [ 180.425868][ T7509] netlink_rcv_skb+0x220/0x3ec [ 180.426721][ T7509] rtnetlink_rcv+0x28/0x38 [ 180.427517][ T7509] netlink_unicast+0x5fc/0x80c [ 180.428380][ T7509] netlink_sendmsg+0x6f0/0x9d8 [ 180.429245][ T7509] __sys_sendto+0x324/0x440 [ 180.430044][ T7509] __arm64_sys_sendto+0xe4/0x104 [ 180.430930][ T7509] invoke_syscall+0x98/0x290 [ 180.431698][ T7509] el0_svc_common+0x13c/0x258 [ 180.432472][ T7509] do_el0_svc+0x5c/0x134 [ 180.433190][ T7509] el0_svc+0x58/0x128 [ 180.433853][ T7509] el0t_64_sync_handler+0x84/0xf0 [ 180.434726][ T7509] el0t_64_sync+0x18c/0x190 [ 180.434877][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.435439][ T7509] [ 180.435444][ T7509] Last potentially related work creation: [ 180.436836][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.437125][ T7509] kasan_save_stack+0x40/0x70 [ 180.439153][ T7516] device bridge_slave_0 left promiscuous mode [ 180.439294][ T7509] __kasan_record_aux_stack+0xc0/0xdc [ 180.442136][ T7509] kasan_record_aux_stack_noalloc+0x14/0x20 [ 180.443166][ T7509] insert_work+0x64/0x37c [ 180.443951][ T7509] __queue_work+0xd00/0x1280 [ 180.444775][ T7509] queue_work_on+0xc0/0x164 [ 180.445560][ T7509] macvlan_handle_frame+0xb44/0xeb8 [ 180.446153][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.446451][ T7509] __netif_receive_skb_core+0xd34/0x31a0 [ 180.448526][ T7509] __netif_receive_skb+0x78/0x2b0 [ 180.449389][ T7509] process_backlog+0x42c/0x748 [ 180.450244][ T7509] __napi_poll+0xb8/0x3f4 [ 180.451033][ T7509] net_rx_action+0x52c/0xb5c [ 180.451846][ T7509] handle_softirqs+0x318/0xc90 [ 180.452702][ T7509] __do_softirq+0x14/0x20 [ 180.453484][ T7509] [ 180.453909][ T7509] Second to last potentially related work creation: [ 180.455086][ T7509] kasan_save_stack+0x40/0x70 [ 180.455942][ T7509] __kasan_record_aux_stack+0xc0/0xdc [ 180.456941][ T7509] kasan_record_aux_stack_noalloc+0x14/0x20 [ 180.458025][ T7509] insert_work+0x64/0x37c [ 180.458817][ T7509] __queue_work+0xd00/0x1280 [ 180.459648][ T7509] queue_work_on+0xc0/0x164 [ 180.460480][ T7509] macvlan_handle_frame+0xb44/0xeb8 [ 180.461446][ T7509] __netif_receive_skb_core+0xd34/0x31a0 [ 180.462395][ T7509] __netif_receive_skb+0x78/0x2b0 [ 180.463298][ T7509] process_backlog+0x42c/0x748 [ 180.464146][ T7509] __napi_poll+0xb8/0x3f4 [ 180.464896][ T7509] net_rx_action+0x52c/0xb5c [ 180.465712][ T7509] handle_softirqs+0x318/0xc90 [ 180.466577][ T7509] run_ksoftirqd+0x7c/0x2ac [ 180.467375][ T7509] smpboot_thread_fn+0x4e8/0x960 [ 180.468261][ T7509] kthread+0x254/0x2e0 [ 180.468959][ T7509] ret_from_fork+0x10/0x20 [ 180.469735][ T7509] [ 180.470135][ T7509] The buggy address belongs to the object at ffff0000d369c000 [ 180.470135][ T7509] which belongs to the cache kmalloc-8k of size 8192 [ 180.472457][ T7509] The buggy address is located 3579 bytes to the right of [ 180.472457][ T7509] 8192-byte region [ffff0000d369c000, ffff0000d369e000) [ 180.474772][ T7509] [ 180.475159][ T7509] The buggy address belongs to the physical page: [ 180.476227][ T7509] page:000000008f4f5914 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113698 [ 180.477941][ T7509] head:000000008f4f5914 order:3 compound_mapcount:0 compound_pincount:0 [ 180.479412][ T7509] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 180.480836][ T7509] raw: 05ffc00000010200 fffffc00032faa00 dead000000000004 ffff0000c0002c00 [ 180.482362][ T7509] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 180.483874][ T7509] page dumped because: kasan: bad access detected [ 180.485058][ T7509] [ 180.485464][ T7509] Memory state around the buggy address: [ 180.486455][ T7509] ffff0000d369ec80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 180.487903][ T7509] ffff0000d369ed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 180.489346][ T7509] >ffff0000d369ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 180.490758][ T7509] ^ [ 180.492181][ T7509] ffff0000d369ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 180.493574][ T7509] ffff0000d369ee80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 180.495001][ T7509] ================================================================== [ 180.496469][ T7509] Disabling lock debugging due to kernel taint [ 180.542113][ T7516] device bridge_slave_1 left promiscuous mode [ 180.543443][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.591660][ T7516] bond0: (slave bond_slave_0): Releasing backup interface [ 180.633337][ T7516] bond0: (slave bond_slave_1): Releasing backup interface [ 180.688482][ T7516] team0: Port device team_slave_0 removed [ 180.694621][ T7516] team0: Port device team_slave_1 removed [ 180.696270][ T7516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.697753][ T7516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.699598][ T7516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.701071][ T7516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.370314][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.371646][ T2066] ieee802154 phy1 wpan1: encryption failed: -22