last executing test programs: 1m44.343418993s ago: executing program 2 (id=181): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 1m28.241331465s ago: executing program 2 (id=181): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 1m10.853503108s ago: executing program 2 (id=181): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 49.773325831s ago: executing program 2 (id=181): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 30.573339613s ago: executing program 2 (id=181): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 15.450995299s ago: executing program 2 (id=181): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 8.071485939s ago: executing program 0 (id=851): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffc, 0x0, 0x0, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000600)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000000800)={0x2020}, 0x2020) 6.670342962s ago: executing program 0 (id=853): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x29) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8979) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x100000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000280)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x7}}, {@nombcache}]}, 0x8, 0x5fc, &(0x7f00000004c0)="$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") 6.670020712s ago: executing program 4 (id=854): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noacl}]}, 0x1, 0x18c, &(0x7f00000003c0)="$eJzsmD9P8lAUxp972xfyGhOdXTSRBBgsbVGjgwOzgyb+i5tEKkGLGOggbH4KZz+BM3Eh8WPooE4uuDk51Nz2AtcGBRMkJp7fcPqccjiceyAPSUEQxJ/l6fH14TqZuNUATCKBuLz/rPVquFLfnHpL35U2bi7Nl/tma3012o8B8P3hP18H0Mpp8GTu+x/fnZDXbfCu3gFHWuo9MBhSH4BjV2oHDPtSHyu6IuoN46jkOsZhxS0IYYpgiWCLkI3O175gKCjzMeX1Wr1xknddp/qDYtD+2jmONWU+9fvq7MZU9meBw5I6C4YtqVcQ7+wmXIly/hm9118b8/kjwh9FHyM11plJfEeIH/AvGINEH6FjyOKeP/lXDEnFn3TFPzJe+SxTqzcWSuV80Sk6p7adXTYXTXPJzgRGFMYv/O9/4E8TSv9/n9TGWAznec+rWmHs5nYY+zluLPA/jtR8mDN5TyX4P5hmc+KS0mROEARBEARBEARBEARBEAQxcmbBgqegA7A3g+r3AAAA//+goXXE") r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 6.391489537s ago: executing program 3 (id=857): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0x0) 6.342830777s ago: executing program 3 (id=858): syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 6.308909858s ago: executing program 4 (id=859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x5}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r1, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 6.18751891s ago: executing program 4 (id=860): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 6.18130495s ago: executing program 4 (id=862): set_mempolicy(0x3, &(0x7f0000000000)=0xb, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x800, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}}, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 5.867540895s ago: executing program 0 (id=865): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000004100)=""/4099, 0x1003}], 0x1}}], 0x1, 0x18ca02a0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) 5.851473145s ago: executing program 3 (id=866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 5.781213367s ago: executing program 3 (id=867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) 4.919500411s ago: executing program 4 (id=868): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0xb) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 4.892406501s ago: executing program 0 (id=870): syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x7}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.891979941s ago: executing program 3 (id=871): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x9, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 4.802860963s ago: executing program 3 (id=872): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e6400000000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.703401664s ago: executing program 0 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, &(0x7f0000000780)) 3.382800566s ago: executing program 0 (id=876): socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00050000000000001c0012800e00010069703665727370616e000000080002800400120008000a00", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 2.48295201s ago: executing program 4 (id=878): syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r1, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0x7, 0x34, @random="9abe2c"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x802) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xcfb45b99770bb43a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="55003300d0980700ffffffffffff080211000001505050505050"], 0x74}, 0x1, 0x0, 0x0, 0x400c000}, 0x44050) 1.059077903s ago: executing program 1 (id=882): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0xeb476000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x32) 155.728188ms ago: executing program 1 (id=883): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x302) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20, 0x40, 0xd93f, 0xffff, 0x1000, 0x59000000, 0x0, 0x0, 0x8, 0x50}}, 0x50) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x2, 0x35f}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x91a2, 0x0, 0x0, 0x1}) r7 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r7, 0x7277, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x3512, 0x0, 0x0, 0x0, 0x0) 67.34965ms ago: executing program 1 (id=884): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 67.055899ms ago: executing program 1 (id=885): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r7) 32.81193ms ago: executing program 1 (id=886): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) 0s ago: executing program 1 (id=887): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="000e460000002ece"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x2c, 0x1e, 0x1, 0x0, 0x4, {0x2}, [@NDA_MASTER={0x8, 0x7}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): lan0: link becomes ready [ 44.399716][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.402026][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.405791][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.600302][ T4410] loop4: detected capacity change from 0 to 2048 [ 44.716187][ T4410] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 44.729382][ T4410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.065914][ T4399] overlayfs: failed to clone upperpath [ 45.345207][ T4420] UBIFS error (pid: 4420): cannot open "./file0", error -22 [ 45.717919][ T4301] Bluetooth: hci0: command 0x0419 tx timeout [ 45.721897][ T4309] Bluetooth: hci4: command 0x0419 tx timeout [ 45.721939][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 45.721974][ T4306] Bluetooth: hci1: command 0x0419 tx timeout [ 45.798827][ T4301] Bluetooth: hci3: command 0x0419 tx timeout [ 46.435137][ T4445] device netdevsim0 entered promiscuous mode [ 46.453507][ T4445] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 46.683658][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 46.967613][ T4472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 48.218208][ T4498] loop1: detected capacity change from 0 to 128 [ 48.354871][ T4504] syz.1.44: attempt to access beyond end of device [ 48.354871][ T4504] loop1: rw=2049, sector=145, nr_sectors = 736 limit=128 [ 48.430432][ T4510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 48.454799][ T4510] sch_tbf: burst 88 is lower than device ip6gretap0 mtu (1606) ! [ 48.541101][ T4514] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 48.567420][ T4514] device veth3 entered promiscuous mode [ 48.603850][ T4523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.51'. [ 48.671137][ T4526] loop0: detected capacity change from 0 to 256 [ 48.709291][ T4526] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.712261][ T4526] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 48.740554][ T4529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 48.776504][ T4526] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x062de574, utbl_chksum : 0xe619d30d) [ 48.802436][ T4532] process 'syz.3.56' launched './file1' with NULL argv: empty string added [ 49.164927][ T4550] overlayfs: failed to clone upperpath [ 49.309482][ T27] audit: type=1326 audit(49.278:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a8a8 code=0x7ffc0000 [ 49.318103][ T27] audit: type=1326 audit(49.278:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=282 compat=0 ip=0xffff8635a8a8 code=0x7ffc0000 [ 49.331119][ T27] audit: type=1326 audit(49.278:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a8a8 code=0x7ffc0000 [ 49.339253][ T27] audit: type=1326 audit(49.278:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff8635a8a8 code=0x7ffc0000 [ 49.344829][ T27] audit: type=1326 audit(49.278:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a8a8 code=0x7ffc0000 [ 49.359279][ T27] audit: type=1326 audit(49.278:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff86358dd4 code=0x7ffc0000 [ 49.365087][ T27] audit: type=1326 audit(49.278:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a8a8 code=0x7ffc0000 [ 49.375946][ T27] audit: type=1326 audit(49.278:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8635a8a8 code=0x7ffc0000 [ 49.386463][ T27] audit: type=1326 audit(49.278:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4563 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8635a8a8 code=0x7ffc0000 [ 49.530330][ T4570] overlayfs: failed to clone upperpath [ 49.678479][ T4575] loop1: detected capacity change from 0 to 128 [ 49.743000][ T4575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 49.752588][ T4575] System zones: 1-3, 19-19, 35-36 [ 49.782901][ T4575] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.862130][ T4575] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 49.965122][ T4297] EXT4-fs (loop1): unmounting filesystem. [ 50.069533][ T4591] loop1: detected capacity change from 0 to 256 [ 50.083384][ T4591] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 50.311764][ T4605] loop4: detected capacity change from 0 to 1024 [ 50.348157][ T3875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.382769][ T4605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 50.556586][ T4296] EXT4-fs (loop4): unmounting filesystem. [ 50.753754][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.756401][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.765930][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.768562][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.772600][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.775028][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.779263][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.781647][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.077148][ T4637] binder: 4636:4637 tried to acquire reference to desc 0, got 1 instead [ 51.094677][ T3875] binder: release 4636:4637 transaction 5 out, still active [ 51.097446][ T3875] binder: undelivered TRANSACTION_COMPLETE [ 51.131604][ T4624] loop4: detected capacity change from 0 to 32768 [ 51.160899][ T3875] binder: send failed reply for transaction 5, target dead [ 51.169051][ T4624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.92 (4624) [ 51.290745][ T4639] loop2: detected capacity change from 0 to 1024 [ 51.299928][ T4639] EXT4-fs: Ignoring removed orlov option [ 51.309507][ T4639] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.396749][ T4639] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.547146][ T3875] net_ratelimit: 612 callbacks suppressed [ 51.547161][ T3875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.661328][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.673162][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.687170][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.694405][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.729809][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 51.789407][ T4651] fuse: Bad value for 'fd' [ 51.826945][ C0] sched: RT throttling activated [ 51.832089][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.848953][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.576704][ T4624] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 52.583609][ T4624] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 52.585943][ T4624] BTRFS info (device loop4): using free space tree [ 52.588343][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.757445][ T4624] BTRFS info (device loop4): enabling ssd optimizations [ 52.989067][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.087330][ T4296] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 53.223734][ T4706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'. [ 53.419472][ T4715] netlink: 156 bytes leftover after parsing attributes in process `syz.1.121'. [ 53.445709][ T4715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.121'. [ 53.629207][ T3875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.915955][ T4741] fuse: Bad value for 'fd' [ 54.516698][ T4776] Zero length message leads to an empty skb [ 55.288032][ T4812] loop2: detected capacity change from 0 to 2048 [ 55.314529][ T4812] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.504024][ T4818] vxcan1 speed is unknown, defaulting to 1000 [ 55.526633][ T4818] vxcan1 speed is unknown, defaulting to 1000 [ 55.530906][ T4818] vxcan1 speed is unknown, defaulting to 1000 [ 55.584662][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 55.654020][ T4818] infiniband syz2: set down [ 55.656094][ T3875] infiniband syz2: ib_query_port failed (-19) [ 55.658081][ T4818] infiniband syz2: added vxcan1 [ 55.715802][ T4818] RDS/IB: syz2: added [ 55.722421][ T4818] smc: adding ib device syz2 with port count 1 [ 55.724320][ T4818] smc: ib device syz2 port 1 has pnetid [ 55.739793][ T39] smc: removing ib device syz2 [ 55.964357][ T4818] rdma_rxe: rxe_register_device failed with error -19 [ 55.966411][ T4818] rdma_rxe: failed to add vxcan1 [ 56.149594][ T4848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 56.308985][ T4844] loop4: detected capacity change from 0 to 32768 [ 56.329480][ T4844] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.176 (4844) [ 56.362554][ T4844] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 56.373522][ T4844] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 56.388767][ T4844] BTRFS info (device loop4): enabling auto defrag [ 56.395778][ T4844] BTRFS info (device loop4): doing ref verification [ 56.405305][ T4844] BTRFS info (device loop4): max_inline at 0 [ 56.413939][ T4844] BTRFS info (device loop4): force clearing of disk cache [ 56.421702][ T4844] BTRFS info (device loop4): turning on sync discard [ 56.430474][ T4844] BTRFS info (device loop4): disabling free space tree [ 56.611953][ T4844] BTRFS info (device loop4): enabling ssd optimizations [ 56.625519][ T4844] BTRFS info (device loop4): rebuilding free space tree [ 56.680842][ T4491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.735577][ T4844] BTRFS info (device loop4): disabling free space tree [ 56.743089][ T4301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.746774][ T4301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.748991][ T4844] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 56.749037][ T4844] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 56.755117][ T4301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.755170][ T4345] net_ratelimit: 6 callbacks suppressed [ 56.755180][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.770681][ T4301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.773153][ T4301] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.775322][ T4301] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.834437][ T4491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.960832][ T4491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.009599][ T4889] netlink: 60 bytes leftover after parsing attributes in process `syz.0.186'. [ 57.023341][ T4890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.025871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.040978][ T4890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.059215][ T4890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.067168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.093335][ T4890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.096182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.101948][ T4888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.140779][ T4491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.168061][ T4296] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 57.170084][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 57.293969][ T4893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 57.311862][ T4897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.451714][ T4873] chnl_net:caif_netlink_parms(): no params data found [ 57.563644][ T4919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.196'. [ 57.677660][ T4924] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 57.722544][ T4873] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.724567][ T4873] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.729723][ T4873] device bridge_slave_0 entered promiscuous mode [ 57.757774][ T4873] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.777458][ T4873] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.780116][ T4873] device bridge_slave_1 entered promiscuous mode [ 57.784510][ T4932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'. [ 57.916722][ T4933] loop4: detected capacity change from 0 to 4096 [ 58.880055][ T4301] Bluetooth: hci2: command 0x0409 tx timeout [ 58.922685][ T4873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.979398][ T4873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.121498][ T4873] team0: Port device team_slave_0 added [ 59.124543][ T4873] team0: Port device team_slave_1 added [ 59.267540][ T4873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.269525][ T4873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.276326][ T4873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.288371][ T4873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.290316][ T4873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.308209][ T4873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.317975][ T4349] kernel write not supported for file bpf-prog (pid: 4349 comm: kworker/0:5) [ 59.475968][ T4873] device hsr_slave_0 entered promiscuous mode [ 59.517285][ T4873] device hsr_slave_1 entered promiscuous mode [ 59.529849][ T4983] loop4: detected capacity change from 0 to 2048 [ 59.557044][ T4873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.560051][ T4873] Cannot create hsr debugfs directory [ 59.601559][ T4983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 59.643807][ T4983] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.657826][ T4982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.657940][ T4983] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 59.662938][ T4983] EXT4-fs (loop4): This should not happen!! Data will be lost [ 59.662938][ T4983] [ 59.665458][ T4983] EXT4-fs (loop4): Total free blocks count 0 [ 59.665615][ T4982] bridge0: port 3(bond1) entered blocking state [ 59.672319][ T4983] EXT4-fs (loop4): Free/Dirty block details [ 59.673984][ T4983] EXT4-fs (loop4): free_blocks=2415919104 [ 59.675481][ T4983] EXT4-fs (loop4): dirty_blocks=48 [ 59.676837][ T4983] EXT4-fs (loop4): Block reservation details [ 59.679144][ T4982] bridge0: port 3(bond1) entered disabled state [ 59.679593][ T4983] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 59.682253][ T4982] device bond1 entered promiscuous mode [ 59.706176][ T4982] bridge0: port 3(bond1) entered blocking state [ 59.708300][ T4982] bridge0: port 3(bond1) entered forwarding state [ 59.772668][ T4296] EXT4-fs (loop4): unmounting filesystem. [ 59.815064][ T4993] tipc: Started in network mode [ 59.816609][ T4993] tipc: Node identity 4, cluster identity 4711 [ 59.833842][ T4993] tipc: Node number set to 4 [ 59.986137][ T5003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.222'. [ 60.009227][ T4367] bridge0: port 3(bond1) entered disabled state [ 60.823495][ T5045] netlink: 277 bytes leftover after parsing attributes in process `syz.3.232'. [ 60.907650][ T4301] Bluetooth: hci2: command 0x041b tx timeout [ 61.251611][ T4491] device hsr_slave_0 left promiscuous mode [ 61.297480][ T4491] device hsr_slave_1 left promiscuous mode [ 61.377747][ T4491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.380048][ T4491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.383801][ T4491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.389494][ T4491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.394250][ T4491] device bridge_slave_1 left promiscuous mode [ 61.407472][ T4491] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.449063][ T4491] device bridge_slave_0 left promiscuous mode [ 61.450907][ T4491] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.587526][ T4491] device veth1_macvtap left promiscuous mode [ 61.589752][ T4491] device veth0_macvtap left promiscuous mode [ 61.591545][ T4491] device veth1_vlan left promiscuous mode [ 61.593349][ T4491] device veth0_vlan left promiscuous mode [ 62.027327][ T4347] net_ratelimit: 74 callbacks suppressed [ 62.027341][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.107381][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.987132][ T4309] Bluetooth: hci2: command 0x040f tx timeout [ 63.067292][ T4903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.229539][ T4903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.400292][ T4491] team0 (unregistering): Port device team_slave_1 removed [ 63.579463][ T4491] team0 (unregistering): Port device team_slave_0 removed [ 63.758431][ T4491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.867339][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.977764][ T4491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.117443][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.509628][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.511633][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.067724][ T4301] Bluetooth: hci2: command 0x0419 tx timeout [ 65.147222][ T4903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.187328][ T4903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.267308][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.339102][ T4491] bond0 (unregistering): Released all slaves [ 66.563379][ T5070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 66.565834][ T5081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.240'. [ 66.621614][ T4309] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 66.624332][ T4309] CPU: 0 PID: 4309 Comm: kworker/u5:5 Not tainted 6.1.141-syzkaller #0 [ 66.626503][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.629193][ T4309] Workqueue: hci0 hci_rx_work [ 66.630525][ T4309] Call trace: [ 66.631410][ T4309] dump_backtrace+0x1c8/0x1f4 [ 66.632715][ T4309] show_stack+0x2c/0x3c [ 66.633934][ T4309] __dump_stack+0x30/0x40 [ 66.635119][ T4309] dump_stack_lvl+0xf8/0x160 [ 66.636345][ T4309] dump_stack+0x1c/0x5c [ 66.637475][ T4309] sysfs_create_dir_ns+0x22c/0x24c [ 66.638847][ T4309] kobject_add_internal+0x5a8/0xb30 [ 66.640236][ T4309] kobject_add+0x134/0x1f8 [ 66.641408][ T4309] device_add+0x3f0/0xf94 [ 66.642338][ T5087] netlink: 'syz.0.240': attribute type 1 has an invalid length. [ 66.642572][ T4309] hci_conn_add_sysfs+0xbc/0x1cc [ 66.644931][ T5088] netlink: 'syz.3.242': attribute type 1 has an invalid length. [ 66.645893][ T4309] le_conn_complete_evt+0xa24/0xf8c [ 66.649414][ T4309] hci_le_enh_conn_complete_evt+0x114/0x3f8 [ 66.651043][ T4309] hci_le_meta_evt+0x2c0/0x4a4 [ 66.652327][ T4309] hci_event_packet+0x6ac/0xf08 [ 66.653546][ T4309] hci_rx_work+0x324/0xaa0 [ 66.654727][ T4309] process_one_work+0x7f4/0x13a8 [ 66.655543][ T5089] netlink: 'syz.0.240': attribute type 1 has an invalid length. [ 66.656025][ T4309] worker_thread+0x8c8/0xfbc [ 66.659287][ T4309] kthread+0x250/0x2d8 [ 66.660390][ T4309] ret_from_fork+0x10/0x20 [ 66.661862][ T4309] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 66.665510][ T4309] Bluetooth: hci0: failed to register connection device [ 66.841316][ T4873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.873575][ T5112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.900571][ T4873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.949013][ T4873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.037382][ T4873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.177784][ T5129] net_ratelimit: 1 callbacks suppressed [ 67.177799][ T5129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.182007][ T5129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.200313][ T4873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.225520][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.228063][ T4343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.245947][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.265835][ T4873] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.283355][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.285939][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.308669][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.310671][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.312319][ T5135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.314967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.327319][ T5135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.335960][ T5134] netlink: 'syz.3.255': attribute type 4 has an invalid length. [ 67.361582][ T5135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.365978][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.369918][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.377107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.385285][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.410201][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.440141][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.443213][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.445189][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.454402][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.465081][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.473359][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.492579][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.496027][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.499659][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.502310][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.513405][ T5134] netlink: 'syz.3.255': attribute type 4 has an invalid length. [ 67.579922][ T4873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.582733][ T4873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.626555][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.630953][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.645624][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.656336][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.682433][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.940446][ T4873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.943175][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.945252][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.978272][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.980992][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.011262][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.013978][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.019446][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.027890][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.038222][ T4873] device veth0_vlan entered promiscuous mode [ 68.044760][ T4873] device veth1_vlan entered promiscuous mode [ 68.095652][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.098367][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.101335][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.104271][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.114418][ T4873] device veth0_macvtap entered promiscuous mode [ 68.125798][ T4873] device veth1_macvtap entered promiscuous mode [ 68.153527][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.156402][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.170983][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.173907][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.187702][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.190531][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.193109][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.195940][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.224071][ T4873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.226436][ T5170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 68.253042][ T5173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 68.363052][ T5173] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 68.405792][ T5173] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 68.425989][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.429623][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.432672][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.457578][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.463903][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.466905][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.473752][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.480574][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.486634][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.493254][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.499503][ T4873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.504676][ T4873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.510360][ T4873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.519124][ T5170] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 68.565511][ T5170] bond1 (unregistering): Released all slaves [ 68.596014][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.599300][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.605731][ T4873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.608693][ T4873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.611012][ T4873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.613279][ T4873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.785094][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.794142][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.800503][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.820922][ T4491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.823196][ T4491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.840599][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.010749][ T4309] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 69.213704][ T5210] tipc: Started in network mode [ 69.241714][ T5210] tipc: Node identity 2000007, cluster identity 4711 [ 69.243769][ T5210] tipc: Node number set to 33554439 [ 69.305025][ T5213] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.494914][ T5222] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.275'. [ 69.631007][ T1515] cfg80211: failed to load regulatory.db [ 70.751028][ T5241] loop4: detected capacity change from 0 to 128 [ 70.796897][ T5241] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 70.893949][ T5241] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 70.915210][ T4309] Bluetooth: hci1: command 0x0409 tx timeout [ 70.948251][ T5220] syz.3.276 uses obsolete (PF_INET,SOCK_PACKET) [ 71.108377][ T5252] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 71.452370][ T5266] device syzkaller0 entered promiscuous mode [ 71.471941][ T5266] tipc: Started in network mode [ 71.473258][ T5266] tipc: Node identity be970e46b8e4, cluster identity 4711 [ 71.487443][ T5266] tipc: Enabled bearer , priority 0 [ 71.501320][ T5265] tipc: Resetting bearer [ 71.564918][ T5265] tipc: Disabling bearer [ 71.714186][ T5277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 72.597524][ T4309] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.601111][ T4309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.604179][ T4309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.608008][ T4309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.610411][ T4309] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.613810][ T4309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.702961][ T4433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.716302][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 72.757968][ T4347] net_ratelimit: 12 callbacks suppressed [ 72.757980][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.766882][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 73.032492][ T5305] chnl_net:caif_netlink_parms(): no params data found [ 73.158322][ T5305] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.162571][ T5305] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.172421][ T5305] device bridge_slave_0 entered promiscuous mode [ 73.177254][ T5305] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.179388][ T5305] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.182166][ T5305] device bridge_slave_1 entered promiscuous mode [ 73.228949][ T5305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.248562][ T5305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.299280][ T5305] team0: Port device team_slave_0 added [ 73.306573][ T5305] team0: Port device team_slave_1 added [ 73.333107][ T5305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.337731][ T5305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.350394][ T5305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.360407][ T5305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.364637][ T5305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.377613][ T5305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.455732][ T5305] device hsr_slave_0 entered promiscuous mode [ 73.493088][ T5305] device hsr_slave_1 entered promiscuous mode [ 73.521963][ T5305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.525045][ T5305] Cannot create hsr debugfs directory [ 73.766621][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.775472][ T4344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.814580][ T5353] loop4: detected capacity change from 0 to 128 [ 73.828239][ T5355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.838095][ T5355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.850523][ T5355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.861004][ T5355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.871140][ T5355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.873673][ T5355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.874678][ T4433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.876012][ T5355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.970768][ T4433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.087291][ T4433] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.216949][ T5375] netlink: 165 bytes leftover after parsing attributes in process `syz.3.327'. [ 74.629131][ T4301] Bluetooth: hci2: command 0x0409 tx timeout [ 75.368712][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 76.079047][ T5401] loop4: detected capacity change from 0 to 262144 [ 76.081288][ T5401] ======================================================= [ 76.081288][ T5401] WARNING: The mand mount option has been deprecated and [ 76.081288][ T5401] and is ignored by this kernel. Remove the mand [ 76.081288][ T5401] option from the mount to silence this warning. [ 76.081288][ T5401] ======================================================= [ 76.092406][ T5401] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.333 (5401) [ 76.099495][ T5401] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 76.102285][ T5401] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 76.104714][ T5401] BTRFS info (device loop4): using free space tree [ 76.149464][ T5401] BTRFS info (device loop4): enabling ssd optimizations [ 76.241315][ T5424] netlink: 'syz.0.340': attribute type 10 has an invalid length. [ 76.243432][ T5424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.340'. [ 76.258092][ T5424] device batadv0 entered promiscuous mode [ 76.261895][ T5424] bridge0: port 3(batadv0) entered blocking state [ 76.272884][ T5424] bridge0: port 3(batadv0) entered disabled state [ 76.279034][ T5424] bridge0: port 3(batadv0) entered blocking state [ 76.280916][ T5424] bridge0: port 3(batadv0) entered forwarding state [ 76.288058][ T5305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.430639][ T5305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.470405][ T5305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.491639][ T4296] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 76.643901][ T4301] Bluetooth: hci2: command 0x041b tx timeout [ 76.749324][ T4396] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 76.752384][ T4396] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 76.871531][ T5305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.010275][ T4345] net_ratelimit: 79 callbacks suppressed [ 78.010289][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.015549][ T5465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.098682][ T4433] device hsr_slave_0 left promiscuous mode [ 78.155743][ T4433] device hsr_slave_1 left promiscuous mode [ 78.161903][ T5506] binder: 5505:5506 tried to acquire reference to desc 0, got 1 instead [ 78.167955][ T5506] binder: 5505:5506 got transaction with invalid parent offset or type [ 78.181672][ T5506] binder: 5506:5505 failed to fixup parent [ 78.183299][ T5506] binder: 5505:5506 transaction async to 5505:0 failed 12/29201/-22, size 96-24 line 3549 [ 78.193934][ T5465] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.302586][ T5517] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 78.305574][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.307572][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.312901][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.319127][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.327072][ T4433] device bridge_slave_1 left promiscuous mode [ 78.328829][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.363147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.376228][ T4433] device bridge_slave_0 left promiscuous mode [ 78.378072][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.431405][ T5526] syz.1.361 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 78.499588][ T4433] device veth1_macvtap left promiscuous mode [ 78.501382][ T4433] device veth0_macvtap left promiscuous mode [ 78.503352][ T4433] device veth1_vlan left promiscuous mode [ 78.505062][ T4433] device veth0_vlan left promiscuous mode [ 78.675469][ T4301] Bluetooth: hci2: command 0x040f tx timeout [ 78.988644][ T5463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.007323][ T5463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.245603][ T4433] team0 (unregistering): Port device team_slave_1 removed [ 80.321020][ T4388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.411693][ T4433] team0 (unregistering): Port device team_slave_0 removed [ 80.597112][ T4433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.713141][ T4301] Bluetooth: hci2: command 0x0419 tx timeout [ 80.792218][ T4433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.027207][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.029448][ T4349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.048590][ T5463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.024179][ T4433] bond0 (unregistering): Released all slaves [ 83.070990][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.281685][ T5521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.360'. [ 83.292759][ T5541] bond0: (slave bond_slave_0): Releasing backup interface [ 83.334426][ T5305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.372429][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.374920][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.389042][ T5305] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.403069][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.406271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.408774][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.410760][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.421431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.439712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.442610][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.450379][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.452484][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.473926][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.533597][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.536754][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.546538][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.560179][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.564165][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.584747][ T5305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.587610][ T5305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.612540][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.615106][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.617696][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.620660][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.630015][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.648777][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.729977][ T4309] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 83.730026][ T4309] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 84.100247][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.488483][ T5463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.669424][ T5557] loop4: detected capacity change from 0 to 32768 [ 84.758736][ T5557] (syz.4.367,5557,1):ocfs2_verify_userspace_stack:854 ERROR: cluster stack passed to mount, but this filesystem does not support it [ 84.782344][ T5557] (syz.4.367,5557,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 84.904672][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.906798][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.434204][ T4309] Bluetooth: hci3: command 0x0406 tx timeout [ 85.479824][ T5305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.639830][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.745404][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.748092][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.814377][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.816810][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.827197][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.839691][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.843742][ T5305] device veth0_vlan entered promiscuous mode [ 85.858883][ T5595] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 85.866436][ T5305] device veth1_vlan entered promiscuous mode [ 85.929484][ T5305] device veth0_macvtap entered promiscuous mode [ 85.942845][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.945488][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.948497][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.954976][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.962379][ T5305] device veth1_macvtap entered promiscuous mode [ 85.970687][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.985568][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.989946][ T5599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.000203][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.003052][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.005628][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.018729][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.021339][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.024090][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.033315][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.036387][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.052977][ T5305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.055792][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.062189][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.070743][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.075856][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.078489][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.081237][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.094261][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.104109][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.107027][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.109749][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.123771][ T5305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.130849][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.133661][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.143203][ T5305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.156647][ T5305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.158970][ T5305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.161199][ T5305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.172297][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 86.307777][ T4433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.325847][ T4433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.350219][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.366897][ T4434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.369968][ T4434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.378446][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.336712][ T5461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.340122][ T4388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.463883][ T4309] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 87.510361][ T5646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.575340][ T5646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.629197][ T5642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.437429][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.208036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.259938][ T5668] UBIFS error (pid: 5668): cannot open "ubifs", error -22 [ 89.336841][ T5684] batman_adv: batadv0: Adding interface: dummy0 [ 89.340346][ T5684] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.349985][ T5684] batman_adv: batadv0: Interface activated: dummy0 [ 89.382853][ T5684] batadv0: mtu less than device minimum [ 89.387302][ T5684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.393181][ T5684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.398861][ T5684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.404484][ T5684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.409995][ T5684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.415533][ T5684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.421054][ T5684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.696372][ T5697] loop4: detected capacity change from 0 to 64 [ 89.861224][ T4309] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 89.863724][ T4309] Bluetooth: hci4: Injecting HCI hardware error event [ 89.867994][ T4301] Bluetooth: hci4: hardware error 0x00 [ 90.509991][ T4434] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.007555][ T4303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.012129][ T4303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.018072][ T4303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.045935][ T4303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.055192][ T4303] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.059320][ T4303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.160444][ T4434] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.184413][ T5719] x_tables: unsorted underflow at hook 2 [ 91.270806][ T5697] syz.4.425: attempt to access beyond end of device [ 91.270806][ T5697] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 91.276896][ T5697] Buffer I/O error on dev loop4, logical block 512, async page read [ 91.279164][ T5697] syz.4.425: attempt to access beyond end of device [ 91.279164][ T5697] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 91.282719][ T5697] Buffer I/O error on dev loop4, logical block 56576, async page read [ 91.296675][ T4434] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.329084][ T5726] capability: warning: `syz.3.435' uses 32-bit capabilities (legacy support in use) [ 91.510811][ T4434] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.245995][ T4301] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 92.319853][ T5711] chnl_net:caif_netlink_parms(): no params data found [ 92.489987][ T5711] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.491956][ T5711] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.501934][ T5711] device bridge_slave_0 entered promiscuous mode [ 92.513123][ T5736] loop4: detected capacity change from 0 to 32768 [ 92.515552][ T5736] xfs: Unknown parameter 'nobarrier' [ 92.560260][ T5711] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.568164][ T5711] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.570769][ T5711] device bridge_slave_1 entered promiscuous mode [ 92.576859][ T5547] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.866917][ T5711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.876006][ T5711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.119236][ T4301] Bluetooth: hci2: command 0x0409 tx timeout [ 93.651075][ T5459] net_ratelimit: 37 callbacks suppressed [ 93.651100][ T5459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.766114][ T5711] team0: Port device team_slave_0 added [ 93.778610][ T5711] team0: Port device team_slave_1 added [ 93.856947][ T5711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.858920][ T5711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.880178][ T5711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.904693][ T4388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.945901][ T5736] loop4: detected capacity change from 0 to 32768 [ 93.970384][ T5736] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.438 (5736) [ 93.975678][ T5711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.978829][ T5711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.995303][ T5711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.014528][ T5736] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 94.016058][ T5775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'. [ 94.017430][ T5736] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 94.036486][ T5736] BTRFS info (device loop4): turning off barriers [ 94.038473][ T5736] BTRFS info (device loop4): enabling auto defrag [ 94.040191][ T5736] BTRFS info (device loop4): ignoring data csums [ 94.044522][ T5736] BTRFS info (device loop4): force zlib compression, level 3 [ 94.050105][ T5736] BTRFS info (device loop4): enabling ssd optimizations [ 94.067841][ T5736] BTRFS info (device loop4): using spread ssd allocation scheme [ 94.073533][ T5736] BTRFS info (device loop4): using free space tree [ 94.075469][ T5736] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 94.088109][ T5736] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 94.123161][ T5736] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 94.156421][ T5736] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 94.201630][ T5736] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 94.208327][ T5736] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 94.214961][ T5736] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 94.238781][ T5736] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 94.245514][ T5736] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 94.321470][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.323964][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.333192][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.342773][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.346511][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.351062][ T5711] device hsr_slave_0 entered promiscuous mode [ 94.356083][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.358757][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.361316][ T5804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.368151][ T5711] device hsr_slave_1 entered promiscuous mode [ 94.407422][ T5711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.409485][ T5711] Cannot create hsr debugfs directory [ 95.014564][ T5465] Process accounting resumed [ 95.037272][ T4296] BTRFS info (device loop4: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 95.171515][ T4303] Bluetooth: hci2: command 0x041b tx timeout [ 95.516073][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.462'. [ 96.140327][ T4434] device hsr_slave_0 left promiscuous mode [ 96.214785][ T4434] device hsr_slave_1 left promiscuous mode [ 96.347660][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.349915][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.354890][ T4434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.363954][ T4434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.378163][ T4434] device bridge_slave_1 left promiscuous mode [ 96.388912][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.785643][ T4434] device bridge_slave_0 left promiscuous mode [ 96.787590][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.837448][ T4301] Bluetooth: hci0: Unknown advertising packet type: 0x14 [ 96.837482][ T4301] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 97.246906][ T4301] Bluetooth: hci2: command 0x040f tx timeout [ 97.575607][ T4434] device veth1_macvtap left promiscuous mode [ 97.577363][ T4434] device veth0_macvtap left promiscuous mode [ 97.579096][ T4434] device veth1_vlan left promiscuous mode [ 97.580736][ T4434] device veth0_vlan left promiscuous mode [ 98.579406][ T5916] UBIFS error (pid: 5916): cannot open "ubifs", error -22 [ 98.827210][ T5465] net_ratelimit: 60 callbacks suppressed [ 98.827224][ T5465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.941363][ T4301] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 98.944010][ T4301] CPU: 0 PID: 4301 Comm: kworker/u5:2 Not tainted 6.1.141-syzkaller #0 [ 98.946244][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.948913][ T4301] Workqueue: hci3 hci_rx_work [ 98.950208][ T4301] Call trace: [ 98.951082][ T4301] dump_backtrace+0x1c8/0x1f4 [ 98.952382][ T4301] show_stack+0x2c/0x3c [ 98.953494][ T4301] __dump_stack+0x30/0x40 [ 98.954630][ T4301] dump_stack_lvl+0xf8/0x160 [ 98.955856][ T4301] dump_stack+0x1c/0x5c [ 98.957118][ T4301] sysfs_create_dir_ns+0x22c/0x24c [ 98.958527][ T4301] kobject_add_internal+0x5a8/0xb30 [ 98.959978][ T4301] kobject_add+0x134/0x1f8 [ 98.961187][ T4301] device_add+0x3f0/0xf94 [ 98.962397][ T4301] hci_conn_add_sysfs+0xbc/0x1cc [ 98.963808][ T4301] le_conn_complete_evt+0xa24/0xf8c [ 98.965227][ T4301] hci_le_enh_conn_complete_evt+0x114/0x3f8 [ 98.966828][ T4301] hci_le_meta_evt+0x2c0/0x4a4 [ 98.968184][ T4301] hci_event_packet+0x6ac/0xf08 [ 98.969523][ T4301] hci_rx_work+0x324/0xaa0 [ 98.970767][ T4301] process_one_work+0x7f4/0x13a8 [ 98.972122][ T4301] worker_thread+0x8c8/0xfbc [ 98.973361][ T4301] kthread+0x250/0x2d8 [ 98.974472][ T4301] ret_from_fork+0x10/0x20 [ 98.982643][ T4301] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 98.986411][ T4301] Bluetooth: hci3: failed to register connection device [ 99.304827][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.314581][ T4301] Bluetooth: hci2: command 0x0419 tx timeout [ 99.587604][ T4434] team0 (unregistering): Port device team_slave_1 removed [ 99.753933][ T4434] team0 (unregistering): Port device team_slave_0 removed [ 99.878012][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.931393][ T4434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.130269][ T4434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.895664][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.905626][ T5465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.214219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.217666][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.930523][ T5465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.494182][ T4434] bond0 (unregistering): Released all slaves [ 102.714223][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 102.766473][ T5921] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 102.768971][ T5924] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 102.771230][ T5925] netlink: 'syz.4.482': attribute type 4 has an invalid length. [ 102.794618][ T5926] netlink: 'syz.4.482': attribute type 4 has an invalid length. [ 102.809210][ T5934] batman_adv: batadv0: Adding interface: dummy0 [ 102.810949][ T5934] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.825583][ T5934] batman_adv: batadv0: Interface activated: dummy0 [ 102.852934][ T5937] batadv0: mtu less than device minimum [ 102.858809][ T5937] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.897867][ T5946] 9pnet_fd: Insufficient options for proto=fd [ 102.937325][ T5711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.024157][ T5952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.042602][ T5952] bridge0: port 3(bond1) entered blocking state [ 103.063022][ T5952] bridge0: port 3(bond1) entered disabled state [ 103.099169][ T5952] device bond1 entered promiscuous mode [ 103.101093][ T5952] bridge0: port 3(bond1) entered blocking state [ 103.102775][ T5952] bridge0: port 3(bond1) entered forwarding state [ 103.104834][ T5711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.146199][ T5711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.190572][ T5711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.380775][ T5711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.416333][ T11] bridge0: port 3(bond1) entered disabled state [ 103.418611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.421118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.432847][ T5711] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.439769][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.442544][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.445525][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.447402][ T4367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.479284][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.484514][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.500566][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.505250][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.507250][ T4367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.509548][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.532397][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.550766][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.560844][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.564530][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.568191][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.577410][ T5711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.584865][ T5711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.634338][ T5961] overlayfs: failed to clone upperpath [ 103.639367][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.648604][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.651287][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.673731][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.688727][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.697835][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.931607][ T112] net_ratelimit: 19 callbacks suppressed [ 103.931622][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.047299][ T5461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.081903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.084065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.098468][ T5711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.847701][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.996318][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.999240][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.023978][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.027678][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.030621][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.036007][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.164868][ T5461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.167172][ T5711] device veth0_vlan entered promiscuous mode [ 105.167866][ T5465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.196248][ T5998] device netdevsim0 entered promiscuous mode [ 105.204185][ T5998] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 105.224288][ T5711] device veth1_vlan entered promiscuous mode [ 105.675463][ C1] batman_adv: batadv0: Local translation table size (120) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 105.992884][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.995586][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.038718][ T5711] device veth0_macvtap entered promiscuous mode [ 106.068891][ T5711] device veth1_macvtap entered promiscuous mode [ 106.101602][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.110232][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.114225][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.118095][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.122331][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.125539][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.128078][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.131976][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.137544][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.140059][ T6014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.142678][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.145281][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.148114][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.177946][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.180789][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.191464][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.193963][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.196748][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.201569][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.210930][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.214890][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.217771][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.220298][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.241925][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.244518][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.247294][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.253407][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.256206][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.258908][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.273568][ T5711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.275962][ T5711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.278309][ T5711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.280692][ T5711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.290171][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'. [ 106.429649][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 106.518755][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 106.543464][ T4433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.550374][ T4433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.655640][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.754960][ T4433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.758057][ T4433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.913690][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.718114][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 108.931000][ T6058] UBIFS error (pid: 6058): cannot open "./file0", error -22 [ 108.951295][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.527'. [ 109.385228][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.536'. [ 109.402129][ T6099] netlink: 'syz.1.537': attribute type 1 has an invalid length. [ 109.419489][ T6099] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.465141][ T6099] bond2: (slave gretap1): making interface the new active one [ 109.468731][ T6099] net_ratelimit: 59 callbacks suppressed [ 109.468744][ T6099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.473349][ T6099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.475668][ T6099] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 109.478096][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 109.493355][ T4433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.511613][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.711343][ T6115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.713721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.720128][ T6115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.722657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.731550][ T6114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.734507][ T4433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.541664][ T6141] netlink: 'syz.0.553': attribute type 1 has an invalid length. [ 110.564743][ T6141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.604900][ T6141] bond1: (slave gretap1): making interface the new active one [ 110.608428][ T6141] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 110.610989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 110.706967][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 110.714532][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 110.730571][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 111.506537][ T4433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.960475][ T4301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.964351][ T4301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.969139][ T4309] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.975902][ T4309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.979197][ T4309] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 111.981380][ T4309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.069154][ T4433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.432103][ T4433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.014235][ T4433] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.020693][ T6170] chnl_net:caif_netlink_parms(): no params data found [ 114.043760][ T6170] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.057228][ T6170] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.066285][ T4303] Bluetooth: hci2: command 0x0409 tx timeout [ 114.109864][ T6170] device bridge_slave_0 entered promiscuous mode [ 114.908241][ T112] net_ratelimit: 64 callbacks suppressed [ 114.908257][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.915662][ T5461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.080679][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.082700][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.085325][ T6170] device bridge_slave_1 entered promiscuous mode [ 115.181935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.204514][ T6170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.620399][ T4396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.885937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.173140][ T5461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.185201][ T4303] Bluetooth: hci2: command 0x041b tx timeout [ 116.206970][ T6170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.466427][ T6170] team0: Port device team_slave_0 added [ 116.570409][ T6170] team0: Port device team_slave_1 added [ 116.710815][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.713983][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.721030][ T6170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.779799][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.781806][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.812488][ T6170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.963842][ T4434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.035140][ T6170] device hsr_slave_0 entered promiscuous mode [ 117.094699][ T6170] device hsr_slave_1 entered promiscuous mode [ 117.153509][ T6170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.155627][ T6170] Cannot create hsr debugfs directory [ 117.243406][ T5461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.674569][ T6236] loop4: detected capacity change from 0 to 262144 [ 117.680026][ T6236] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.580 (6236) [ 117.688340][ T6236] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 117.691226][ T6236] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 117.693870][ T6236] BTRFS info (device loop4): using free space tree [ 117.875674][ T6236] BTRFS info (device loop4): enabling ssd optimizations [ 117.971034][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.065230][ T4396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.122852][ T6289] netlink: 'syz.1.585': attribute type 4 has an invalid length. [ 118.182812][ T6294] netlink: 'syz.1.585': attribute type 4 has an invalid length. [ 118.201361][ T4309] Bluetooth: hci2: command 0x040f tx timeout [ 118.234626][ T4296] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 118.858447][ T4433] device hsr_slave_0 left promiscuous mode [ 119.049057][ T4433] device hsr_slave_1 left promiscuous mode [ 119.110315][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.112513][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.115182][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.117325][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.141120][ T4433] device bridge_slave_1 left promiscuous mode [ 119.143025][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.189882][ T4433] device bridge_slave_0 left promiscuous mode [ 119.191707][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.416058][ T4433] device veth1_macvtap left promiscuous mode [ 119.417869][ T4433] device veth0_macvtap left promiscuous mode [ 119.420062][ T4433] device veth1_vlan left promiscuous mode [ 119.421760][ T4433] device veth0_vlan left promiscuous mode [ 120.170265][ T6330] loop4: detected capacity change from 0 to 1024 [ 120.279121][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 120.438080][ T1515] net_ratelimit: 3 callbacks suppressed [ 120.438094][ T1515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.007057][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.243035][ T6345] 9pnet_fd: Insufficient options for proto=fd [ 121.476495][ T4347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.879784][ T4433] team0 (unregistering): Port device team_slave_1 removed [ 122.157487][ T4433] team0 (unregistering): Port device team_slave_0 removed [ 122.365138][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.368000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.371633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.377090][ T4433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.806394][ T4433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.834833][ T1515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.564338][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.873652][ T1515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.043142][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.242842][ T4432] hfsplus: b-tree write err: -5, ino 4 [ 125.273865][ T4433] bond0 (unregistering): Released all slaves [ 125.473112][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.475074][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.488670][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.598'. [ 125.569854][ T6349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.607'. [ 125.721220][ C1] net_ratelimit: 1 callbacks suppressed [ 125.721234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.725232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.727535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.729842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.751208][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 125.761345][ T6361] futex_wake_op: syz.0.609 tries to shift op by -1; fix this program [ 125.776485][ T6364] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.778767][ T6363] device bond1 left promiscuous mode [ 125.779217][ T6364] FAT-fs (loop9): unable to read boot sector [ 125.780732][ T6363] bridge0: port 3(bond1) entered disabled state [ 125.832703][ T6363] device bridge_slave_1 left promiscuous mode [ 125.834532][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.872129][ T6363] device bridge_slave_0 left promiscuous mode [ 125.873888][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.959932][ T1515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.045303][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.611'. [ 126.048003][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 126.092090][ T6370] bridge0: port 1(syz_tun) entered blocking state [ 126.094176][ T6370] bridge0: port 1(syz_tun) entered disabled state [ 126.097257][ T6370] device syz_tun entered promiscuous mode [ 126.115885][ T6370] bridge0: port 1(syz_tun) entered blocking state [ 126.117928][ T6370] bridge0: port 1(syz_tun) entered forwarding state [ 126.150464][ T6170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 126.189415][ T6170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 126.232134][ T6170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 126.293397][ T6170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 126.403604][ T6170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.426212][ T6170] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.432013][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.435474][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.445629][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.448262][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.454547][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.456508][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.459244][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.467022][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.502689][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.504728][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.507167][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.521205][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.540044][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.599770][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.608797][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.621109][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.645538][ T6409] vxcan1 speed is unknown, defaulting to 1000 [ 126.645593][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.651241][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.657621][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.661430][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.671521][ T6170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.676882][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.684066][ T6409] vxcan1 speed is unknown, defaulting to 1000 [ 126.686243][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'. [ 126.806012][ T6418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.808519][ T6418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.811047][ T6418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.816040][ T6418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.818633][ T6418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.862653][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.865397][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.869279][ T6409] vxcan1 speed is unknown, defaulting to 1000 [ 126.946693][ T6409] infiniband syz2: set down [ 126.947946][ T4903] infiniband syz2: ib_query_port failed (-19) [ 126.949665][ T6409] infiniband syz2: added vxcan1 [ 126.983879][ T6409] RDS/IB: syz2: added [ 126.985124][ T6409] smc: adding ib device syz2 with port count 1 [ 126.987863][ T6409] smc: ib device syz2 port 1 has pnetid [ 126.998000][ T6409] smc: removing ib device syz2 [ 127.142861][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.145589][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.161314][ T6170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.197188][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.204097][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.234894][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.237651][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.245293][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.252218][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.256603][ T6170] device veth0_vlan entered promiscuous mode [ 127.262481][ T6409] rdma_rxe: rxe_register_device failed with error -19 [ 127.263509][ T6170] device veth1_vlan entered promiscuous mode [ 127.268810][ T6409] rdma_rxe: failed to add vxcan1 [ 127.295139][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.297804][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.304569][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.307296][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.317036][ T6170] device veth0_macvtap entered promiscuous mode [ 127.324192][ T6170] device veth1_macvtap entered promiscuous mode [ 127.335799][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.339037][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.342652][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.346084][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.349002][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.352490][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.355480][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.358785][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.363688][ T6170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.366114][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.369104][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.377284][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.381834][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.386480][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.391309][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.397572][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.404040][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.408107][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.411582][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.414365][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.417312][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.421789][ T6170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.425039][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.427807][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.438240][ T6170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.441166][ T6170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.446439][ T6170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.472855][ T6170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.573922][ T4432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.576263][ T4432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.611075][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.643301][ T4432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.645777][ T4432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.652218][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.128398][ T6482] overlayfs: failed to clone upperpath [ 128.679572][ T6507] loop4: detected capacity change from 0 to 16 [ 128.691643][ T6507] erofs: (device loop4): mounted with root inode @ nid 36. [ 128.705166][ T4309] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 128.709994][ T6507] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 128.713296][ T6507] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 128.716517][ T6507] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 128.720484][ T6507] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 128.725947][ T6507] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[8192] [ 128.731090][ T6507] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[8192] [ 129.365246][ T6537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.367743][ T6537] IPv6: NLM_F_CREATE should be set when creating new route [ 129.893398][ T6560] netlink: 'syz.3.669': attribute type 1 has an invalid length. [ 129.908189][ T6560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.330891][ T4432] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.727335][ T6568] netlink: 'syz.3.673': attribute type 10 has an invalid length. [ 130.737082][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 130.869320][ T6578] binder: 6577:6578 tried to acquire reference to desc 0, got 1 instead [ 130.881951][ T4903] binder: release 6577:6578 transaction 18 out, still active [ 130.883979][ T4903] binder: undelivered TRANSACTION_COMPLETE [ 130.913357][ T4433] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 130.927229][ T4903] binder: send failed reply for transaction 18, target dead [ 130.931590][ T4303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.936350][ T4303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.939482][ T4303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.942085][ T4303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.944446][ T4303] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 130.946849][ T4303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.146891][ T4903] net_ratelimit: 15 callbacks suppressed [ 131.146904][ T4903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.159617][ T6590] tipc: Started in network mode [ 131.160971][ T6590] tipc: Node identity 4, cluster identity 4711 [ 131.162724][ T6590] tipc: Node number set to 4 [ 131.202824][ T6579] chnl_net:caif_netlink_parms(): no params data found [ 131.273877][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.281007][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.286063][ T6579] device bridge_slave_0 entered promiscuous mode [ 131.304371][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.309617][ T6579] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.315013][ T6579] device bridge_slave_1 entered promiscuous mode [ 131.354094][ T6579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.371662][ T6579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.430274][ T6579] team0: Port device team_slave_0 added [ 131.444153][ T6579] team0: Port device team_slave_1 added [ 131.469262][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.474741][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.491411][ T6579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.501804][ T6579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.506261][ T6579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.524504][ T6579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.607840][ T6579] device hsr_slave_0 entered promiscuous mode [ 131.644101][ T6614] overlayfs: failed to clone upperpath [ 131.646576][ T6579] device hsr_slave_1 entered promiscuous mode [ 131.676604][ T6579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.679115][ T6579] Cannot create hsr debugfs directory [ 131.682915][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 132.173913][ T4432] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.345706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.348141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.350571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.353829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.356432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.964172][ T4903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.985073][ T4303] Bluetooth: hci2: command 0x0409 tx timeout [ 133.046698][ T4432] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.052545][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'. [ 133.146187][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.150657][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.158521][ T4432] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.307194][ T6654] netlink: 277 bytes leftover after parsing attributes in process `syz.1.705'. [ 134.498019][ T4903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.611570][ T6688] binder: 6685:6688 tried to acquire reference to desc 0, got 1 instead [ 134.617070][ T6688] binder: 6685:6688 got transaction with unaligned buffers size, 4348 [ 134.619435][ T6688] binder: 6685:6688 transaction async to 6685:0 failed 27/29201/-22, size 0-24 line 3295 [ 134.625071][ T4342] binder: undelivered TRANSACTION_ERROR: 29201 [ 135.063781][ T4303] Bluetooth: hci2: command 0x041b tx timeout [ 135.316806][ T6579] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.355267][ T6579] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.411572][ T6723] loop4: detected capacity change from 0 to 32768 [ 135.417537][ T6723] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.717 (6723) [ 135.430554][ T6723] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.433337][ T6723] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 135.438757][ T6723] BTRFS info (device loop4): setting nodatacow, compression disabled [ 135.440965][ T6723] BTRFS info (device loop4): force clearing of disk cache [ 135.442916][ T6723] BTRFS info (device loop4): doing ref verification [ 135.450907][ T6579] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.453215][ T6723] BTRFS info (device loop4): enabling ssd optimizations [ 135.456100][ T6723] BTRFS info (device loop4): using spread ssd allocation scheme [ 135.458214][ T6723] BTRFS info (device loop4): using free space tree [ 135.475293][ T6579] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.532808][ T6723] BTRFS info (device loop4): rebuilding free space tree [ 136.109054][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.127448][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.130098][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.138214][ T6579] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.183402][ T14] net_ratelimit: 4 callbacks suppressed [ 136.183415][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.381559][ T4296] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.463513][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.515546][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.524914][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.526976][ T4396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.530488][ T6762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.726'. [ 136.552186][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.726'. [ 136.565352][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.567970][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.570802][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.577154][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.579156][ T4396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.583520][ T5459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.603184][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.606011][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.619579][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.626320][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.653088][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.655959][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.658931][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.674564][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.733542][ T4432] device hsr_slave_0 left promiscuous mode [ 136.737347][ T6760] overlayfs: failed to clone upperpath [ 136.817431][ T6773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.820173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.832648][ T4432] device hsr_slave_1 left promiscuous mode [ 137.065909][ T4432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.098048][ T4432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.182753][ T4303] Bluetooth: hci2: command 0x040f tx timeout [ 137.356434][ T4432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.420857][ T4432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.605319][ T4432] device bridge_slave_1 left promiscuous mode [ 137.607213][ T4432] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.660790][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.720146][ T4432] device bridge_slave_0 left promiscuous mode [ 137.721925][ T4432] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.853186][ T4432] device veth1_macvtap left promiscuous mode [ 137.861823][ T4432] device veth0_macvtap left promiscuous mode [ 137.863838][ T4432] device veth1_vlan left promiscuous mode [ 137.865409][ T4432] device veth0_vlan left promiscuous mode [ 138.662435][ T5459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.221919][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 139.222041][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.381703][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.384266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.386600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.686630][ T4432] team0 (unregistering): Port device team_slave_1 removed [ 139.872709][ T4432] team0 (unregistering): Port device team_slave_0 removed [ 140.063112][ T4432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.271981][ T4432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.781106][ T4345] net_ratelimit: 3 callbacks suppressed [ 141.781120][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.261351][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.622226][ T4432] bond0 (unregistering): Released all slaves [ 142.750560][ T4348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.820580][ T5459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.878422][ T6579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.882987][ T6579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.885727][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.888629][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.891326][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.900418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.902808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.905121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.932410][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'. [ 142.941985][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 143.186629][ T6579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.188890][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.193034][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.227634][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.231113][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.259257][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.267485][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.272830][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.279432][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.294659][ T6579] device veth0_vlan entered promiscuous mode [ 143.319101][ T6579] device veth1_vlan entered promiscuous mode [ 143.357012][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 143.361502][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 143.364375][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.367227][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.372273][ T6579] device veth0_macvtap entered promiscuous mode [ 143.376717][ T6579] device veth1_macvtap entered promiscuous mode [ 143.386411][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.389301][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.392564][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.395288][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.397974][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.401836][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.404831][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.408537][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.414432][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.420737][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.423281][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.425955][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.429106][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.436453][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.439492][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.443073][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.445939][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.448666][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.458920][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.462950][ T6579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.465757][ T6579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.476335][ T6579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.481953][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.485608][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.491870][ T6852] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.752'. [ 143.517890][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.537393][ T6579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.539972][ T6579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.542532][ T6579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.548325][ T6579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.650883][ T387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.653367][ T387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.717487][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.782370][ T6232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.784838][ T6232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.790074][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.860577][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.110972][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'. [ 144.477435][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 144.592639][ T6906] netlink: 165 bytes leftover after parsing attributes in process `syz.4.774'. [ 144.890783][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.276995][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.444680][ T6232] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.987665][ T6959] binder: 6953:6959 tried to acquire reference to desc 0, got 1 instead [ 145.989982][ T6959] binder: 6953:6959 ioctl c0306201 200003c0 returned -14 [ 146.005951][ T6959] binder: 6953:6959 got transaction with out-of-order buffer fixup [ 146.008214][ T6959] binder: 6959:6953 failed to fixup parent [ 146.009865][ T6959] binder: 6953:6959 transaction call to 6953:0 failed 32/29201/-22, size 120-24 line 3549 [ 146.013912][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.102702][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 146.105139][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 146.147018][ T4303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.151484][ T4303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.154191][ T4303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.163963][ T4303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.167109][ T4303] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.169312][ T4303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.361739][ T6966] chnl_net:caif_netlink_parms(): no params data found [ 146.406896][ T6985] device team_slave_1 entered promiscuous mode [ 146.409328][ T6985] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 146.449281][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.460567][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.463792][ T6966] device bridge_slave_0 entered promiscuous mode [ 146.467339][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.469515][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.472608][ T6966] device bridge_slave_1 entered promiscuous mode [ 146.482330][ T6991] binder: 6990:6991 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 146.486570][ T6991] binder: 6991 RLIMIT_NICE not set [ 146.492974][ T6966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.497664][ T6966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.513664][ T6966] team0: Port device team_slave_0 added [ 146.519055][ T6966] team0: Port device team_slave_1 added [ 146.537544][ T6991] binder: 6990:6991 ioctl c0306201 20000240 returned -14 [ 146.547888][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.558502][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.590858][ T6966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.601481][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.603426][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.613998][ T6998] binder: 6997:6998 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 146.618197][ T6998] binder: 6998 RLIMIT_NICE not set [ 146.619782][ T6966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.666720][ T6966] device hsr_slave_0 entered promiscuous mode [ 146.669675][ T7001] binder: 6997:7001 tried to acquire reference to desc 0, got 1 instead [ 146.674325][ T22] binder: undelivered TRANSACTION_COMPLETE [ 146.694847][ T6966] device hsr_slave_1 entered promiscuous mode [ 146.725553][ T6966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.727653][ T6966] Cannot create hsr debugfs directory [ 146.752143][ T7007] net_ratelimit: 10 callbacks suppressed [ 146.752155][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.758367][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.761243][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.765619][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.768187][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.777758][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.982851][ T6232] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.986547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.992055][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.019755][ T7005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.300207][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 147.371235][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.749065][ T7027] netlink: 168 bytes leftover after parsing attributes in process `syz.4.824'. [ 147.972158][ T6232] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.061064][ T6232] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.154979][ T4303] Bluetooth: hci2: command 0x0409 tx timeout [ 148.255249][ T7045] binder: 7044:7045 tried to acquire reference to desc 0, got 1 instead [ 148.257643][ T7045] binder: 7044:7045 ioctl c0306201 200003c0 returned -14 [ 148.294056][ T7045] binder: 7044:7045 got transaction with out-of-order buffer fixup [ 148.296697][ T7045] binder: 7044:7045 transaction call to 7044:0 failed 44/29201/-22, size 104-24 line 3461 [ 148.299382][ T7045] binder: 7044:7045 ioctl c0306201 200001c0 returned -14 [ 148.322141][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.143950][ C0] vcan0: j1939_tp_rxtimer: 0x000000001cbc8a74: rx timeout, send abort [ 150.148180][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a7dbcdd0: rx timeout, send abort [ 150.336570][ T4303] Bluetooth: hci2: command 0x041b tx timeout [ 150.508399][ T6966] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.599062][ T6966] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.636637][ C0] vcan0: j1939_tp_rxtimer: 0x000000001cbc8a74: abort rx timeout. Force session deactivation [ 150.640008][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a7dbcdd0: abort rx timeout. Force session deactivation [ 151.403828][ T6966] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 151.449339][ T6966] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 151.498525][ T7115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.845'. [ 151.516124][ T7114] tipc: Enabled bearer , priority 10 [ 151.645071][ C1] net_ratelimit: 11 callbacks suppressed [ 151.645087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.692893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.908451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.314758][ T4303] Bluetooth: hci2: command 0x040f tx timeout [ 152.381388][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.401163][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.427851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.686274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.924243][ T6966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.986980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.989576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.014567][ T6966] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.056964][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.059913][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.067885][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.069792][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.071962][ T7151] loop4: detected capacity change from 0 to 16 [ 154.093984][ T6810] udevd[6810]: incorrect erofs checksum on /dev/loop4 [ 154.101911][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.106347][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.129996][ T7151] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0xde366481, 0xc32427af expected [ 154.193270][ T7151] binder: 7148:7151 tried to acquire reference to desc 0, got 1 instead [ 154.216975][ T7151] binder: 7148:7151 got transaction with invalid fd, 1377316925 [ 154.219172][ T7151] binder: 7151:7148 translate fd array failed [ 154.220806][ T7151] binder: 7148:7151 transaction async to 7148:0 failed 49/29201/-9, size 96-24 line 3495 [ 154.238956][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.241861][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.251846][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.253848][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.256400][ T5459] binder: undelivered TRANSACTION_ERROR: 29201 [ 154.261742][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.274032][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.278527][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.301769][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.306663][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.324146][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.337230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.340266][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.346299][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.352997][ T4309] Bluetooth: hci2: command 0x0419 tx timeout [ 154.353200][ T6966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.359280][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.702132][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.704872][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.708496][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.714863][ T7164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.858'. [ 154.735795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.661146][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.666006][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.708276][ T6966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.777204][ T6232] device hsr_slave_0 left promiscuous mode [ 156.116177][ T6232] device hsr_slave_1 left promiscuous mode [ 156.989615][ C1] net_ratelimit: 5 callbacks suppressed [ 156.989630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.000759][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.272057][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.326395][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.328532][ T6232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.331001][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.333052][ T6232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.336213][ T6232] device bridge_slave_1 left promiscuous mode [ 157.338072][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.738094][ T6232] device bridge_slave_0 left promiscuous mode [ 157.767031][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.045243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.048409][ T5463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.173366][ T6232] device veth1_macvtap left promiscuous mode [ 158.175226][ T6232] device veth0_macvtap left promiscuous mode [ 158.177998][ T6232] device veth1_vlan left promiscuous mode [ 158.179778][ T6232] device veth0_vlan left promiscuous mode [ 159.071516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.073958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.076211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.078559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.565944][ T5462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.895106][ T6232] team0 (unregistering): Port device team_slave_1 removed [ 160.971908][ T4303] ------------[ cut here ]------------ [ 160.973687][ T4303] WARNING: CPU: 0 PID: 4303 at net/bluetooth/hci_conn.c:667 hci_conn_timeout+0x1fc/0x424 [ 160.976272][ T4303] Modules linked in: [ 160.977329][ T4303] CPU: 0 PID: 4303 Comm: kworker/u5:3 Not tainted 6.1.141-syzkaller #0 [ 160.979643][ T4303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.982371][ T4303] Workqueue: hci3 hci_conn_timeout [ 160.983843][ T4303] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 160.986009][ T4303] pc : hci_conn_timeout+0x1fc/0x424 [ 160.987417][ T4303] lr : hci_conn_timeout+0x1fc/0x424 [ 160.988878][ T4303] sp : ffff800020827b30 [ 160.990021][ T4303] x29: ffff800020827b30 x28: ffff0000d8725c00 x27: ffff0000dda5e330 [ 160.992248][ T4303] x26: ffff0000c3133e18 x25: 1fffe000186267c3 x24: dfff800000000000 [ 160.994483][ T4303] x23: ffff0000c4b7c800 x22: dfff800000000000 x21: 00000000ffffffff [ 160.996816][ T4303] x20: ffff0000dda5e000 x19: ffff0000dda5e330 x18: ffff800011a7bce0 [ 160.999072][ T4303] x17: ffff8000181a1000 x16: ffff800008042940 x15: ffff800017c81fc0 [ 161.001295][ T4303] x14: ffff0000d5948a98 x13: 0000000000000000 x12: 0000000000ff0100 [ 161.003457][ T4303] x11: ff00800010b2751c x10: 0000000000000000 x9 : ffff800010b2751c [ 161.005674][ T4303] x8 : ffff0000d5948000 x7 : 0000000000000000 x6 : 0000000000000000 [ 161.007844][ T4303] x5 : ffff8000181c2290 x4 : 0000000000000008 x3 : ffff800010b27358 [ 161.010093][ T4303] x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000 [ 161.012356][ T4303] Call trace: [ 161.013240][ T4303] hci_conn_timeout+0x1fc/0x424 [ 161.014540][ T4303] process_one_work+0x7f4/0x13a8 [ 161.015940][ T4303] worker_thread+0x8c8/0xfbc [ 161.017227][ T4303] kthread+0x250/0x2d8 [ 161.018365][ T4303] ret_from_fork+0x10/0x20 [ 161.019650][ T4303] irq event stamp: 8234 [ 161.020832][ T4303] hardirqs last enabled at (8233): [] _raw_spin_unlock_irq+0x3c/0x90 [ 161.023637][ T4303] hardirqs last disabled at (8234): [] el1_dbg+0x24/0x80 [ 161.026065][ T4303] softirqs last enabled at (7822): [] handle_softirqs+0xaf8/0xc6c [ 161.028775][ T4303] softirqs last disabled at (7813): [] __do_softirq+0x14/0x20 [ 161.031299][ T4303] ---[ end trace 0000000000000000 ]--- [ 161.136667][ T6232] team0 (unregistering): Port device team_slave_0 removed [ 161.308397][ T6232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.507204][ T6232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.155356][ C1] net_ratelimit: 11 callbacks suppressed [ 162.155372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.630549][ T5462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.640310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.642779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.645011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.026313][ T4303] Bluetooth: hci1: command 0x0406 tx timeout [ 163.028021][ T4303] Bluetooth: hci0: command 0x0406 tx timeout [ 163.184675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.660045][ T5462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.821448][ T6232] bond0 (unregistering): Released all slaves [ 164.037826][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 164.061124][ T7218] netlink: 'syz.0.876': attribute type 1 has an invalid length. [ 164.066414][ T7220] device ip6erspan0 entered promiscuous mode [ 164.112271][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.121141][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.158001][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.160722][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.165610][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.168554][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.171513][ T6966] device veth0_vlan entered promiscuous mode [ 164.187843][ T6966] device veth1_vlan entered promiscuous mode [ 164.215939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.218691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 164.221202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.224390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.226866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.237371][ T6966] device veth0_macvtap entered promiscuous mode [ 164.241995][ T6966] device veth1_macvtap entered promiscuous mode [ 164.251331][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.254690][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.257320][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.260200][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.262834][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.267261][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.269977][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.272776][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.277410][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.279498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.282230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.287125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.290069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.295774][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.298660][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.301339][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.304719][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.307295][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.310052][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.312681][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.316032][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.319806][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.322008][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.328077][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.334938][ T6966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.337434][ T6966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.339772][ T6966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.342215][ T6966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.410938][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.424245][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.429864][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.435086][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.437524][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.441836][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.611119][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.690580][ T5462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.815124][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.308687][ C1] net_ratelimit: 8 callbacks suppressed [ 167.308702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.462393][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.579121][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.635867][ T4342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.684544][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.785193][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.340654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.827129][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.293889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.297439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.299785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.302080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.373329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.902197][ T9] device hsr_slave_0 left promiscuous mode [ 169.949498][ T9] device hsr_slave_1 left promiscuous mode [ 170.018988][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.021061][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.023593][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.025581][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.028058][ T9] device bridge_slave_1 left promiscuous mode [ 170.031490][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.090145][ T9] device bridge_slave_0 left promiscuous mode [ 170.092148][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.237837][ T9] device veth1_macvtap left promiscuous mode [ 170.239692][ T9] device veth0_macvtap left promiscuous mode [ 170.241541][ T9] device veth1_vlan left promiscuous mode [ 170.243159][ T9] device veth0_vlan left promiscuous mode