last executing test programs: 13.315911235s ago: executing program 3 (id=2402): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x50}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r5, 0x20, &(0x7f0000000980)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}}, 0x10) 11.553369577s ago: executing program 3 (id=2404): ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x6, 'bond0\x00', {0x6}, 0x1000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4008084) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000000280)={0x4, {{0x2, 0x0, @remote}}, {{0x2, 0xfffe, @remote}}}, 0x108) 9.388793221s ago: executing program 3 (id=2413): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) mount(&(0x7f0000000300)=@md={'/dev/md', @num=0x0}, &(0x7f0000000000)='./config\x00', &(0x7f0000000100), 0x0, 0x0) 9.148520746s ago: executing program 3 (id=2415): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="3b07040000080000fe8000"/20], 0x40) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @loopback, 0x4}, 0x1c) 8.935924917s ago: executing program 3 (id=2417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)={0xc0, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x49}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_BEACON_TAIL={0x5b, 0xf, [@fast_bss_trans={0x37, 0x52, {0xa, 0x0, "13faa30b497bde3345ee237ff203ef39", "9f817b3acba4e747cef127d714d806aa6bea78518c0025365ca1cd9a25d5207e", "bec8a67c6b51d2acda1f25f8c8cc6c1ddcc8c73a07b1e0b676e1b28b58dacc51"}}, @dsss={0x3, 0x1, 0xb1}]}]]}, 0xc0}}, 0x0) 8.831677248s ago: executing program 3 (id=2418): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d0000002300000004000000020000004000", @ANYRES32=r2], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) 5.725340939s ago: executing program 1 (id=2429): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000340)="92", 0x1}], 0x1}}], 0x1, 0x20000800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe2600, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x2b00ad, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f737761702c6d706f6c3d64656661756c743d7374617469632c00f76c5bd887884f0ab7f6d7fb9f315c6a1b1328a4d436e120ee299691f247083f42052eb81fbffa50c6f2ee17e2800ea6fb6ec11ee538aa66fb6c8f74ae22b028ced0c6dc6a01ecfe5c2c5178defb7686f076e1c43fd380c94c8e9edffc9dacfb7fbf2448df49"]) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x100) read$dsp(r2, &(0x7f0000000140)=""/108, 0x6c) openat$kvm(0xffffffffffffff9c, &(0x7f0000019280), 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000003c0), 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 5.559782636s ago: executing program 1 (id=2431): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d0000002300000004000000020000004000", @ANYRES32=r2], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) 4.926681251s ago: executing program 2 (id=2434): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000008640)={0x18, 0x18, 0x1, 0x70bd25, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x6}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) 4.737524681s ago: executing program 2 (id=2435): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001580), 0x0, 0x400fe, 0x60000000, 0x0, 0x0, &(0x7f0000001680), &(0x7f00000016c0)}, 0x4c) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)="02510e0e27a4562f263ab227ffc529601ec9dd0f7ea06feffa7315114f2ebbb805e7e4665b231ab10e37227d14e668c74232899195a6743bc0cd84c6001482240e081b9281046a6f2dfa3f389919e28994dc48c0ed61a8662dc7e0f194b966443591dcdeb2fa9a0735b7fac1ab26ae8ede96e67e7f4a52d0952ab1d69d", 0x7d) read$FUSE(r2, &(0x7f0000002ac0)={0x2020}, 0xfffffffffffffed6) 4.506288145s ago: executing program 2 (id=2436): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000013c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r0, 0x18000000000002a0, 0x36, 0x6000002c, &(0x7f0000001480)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b18000890304000084500806325f003901050b038da1002125181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x400fe, 0x60000000, 0x0, 0xfffffffe, &(0x7f0000001580), &(0x7f0000002600)}, 0x2c) 4.287734107s ago: executing program 2 (id=2437): ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x6, 'bond0\x00', {0x6}, 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4008084) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000000280)={0x4, {{0x2, 0x0, @remote}}, {{0x2, 0xfffe, @remote}}}, 0x108) 3.783561519s ago: executing program 1 (id=2438): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000e40)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000e80)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000ec0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000000f40)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000001000), 0x4) 3.565468322s ago: executing program 1 (id=2439): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.482700217s ago: executing program 0 (id=2445): openat$fb0(0xffffff9c, &(0x7f0000000000), 0x24082, 0x0) 1.249439171s ago: executing program 0 (id=2446): prlimit64(0x0, 0xe, &(0x7f0000000e40)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000ec0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000f40)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001040)=0x6) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000480)=0x9, 0x4) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000500)={@empty}, 0x14) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x4000000, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, 0x0, 0x0) 1.126194943s ago: executing program 2 (id=2447): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000026c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002740)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000002840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000028c0)=0x6) socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000002900)={0x1, 0x0, 0x10001, 0x4}) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000002940)={@multicast1, @local}, 0xc) 214.899628ms ago: executing program 0 (id=2448): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendto(0xffffffffffffffff, &(0x7f0000000000)="2c0000003700050001", 0x9, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000480)={0x7f, 0xfffffffc, 0x2}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)=@gettfilter={0x5c, 0x2e, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0x5ff05e7183a9895f, 0x7}, {0x4, 0x1}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7fff}, {0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048000}, 0x24048001) io_submit(0x0, 0x0, &(0x7f0000000a40)) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100, 0x2}, 'syz1\x00', 0x2d}) syz_usb_connect(0x4, 0x24, &(0x7f0000000700)=ANY=[], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0003b37d76b5dc5a94083601fd3d7d74b8b8a9a99f79509e1ad0d49ec0fdc47d0a784f3a7ddb2df5249df130a217a680ec1fa75c11486575e52a32e0848a7e30a3ec5602765a55e8007b00c65f4f310f0937a207c276f470c1c51a94a984e1efbc61c0523efcc9febc8846130dbe55c59b6f8c4e02d981e7bd5206ff34ee86ca876d5ebcc219a14352d78fc60503af7db8bdc18fbacb52572e2b32421eac29f9e4af558e0179ef306c53f9772a6dbd3a6658a08b5e2deba8797c097df13337fed7eedee695eab0ffb01011cdf6cbec9bdc50cb550d9ccbf40a4f03d83e9cbaf8210d530f01563004586830e1e1074d841100f3989441cc8f4301a6d7a0ec0556f8e98d4857c288a943220d6183b2965bec347654ca424bce200d994948b6bff863ba62064a70203f4d3b5ac25c13e17707c14517ef6591c0d94aa1680d80958c17d44d5a04b56ddc2468b2736eb4ee3c39fec7e8f3c346529a1fc4c82841ea27e4b4ccb1ea78b2710601d42c12"]}]}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='252:0 1', 0x7) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0x48343a01, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x0, 0x404d, 0x2ba9}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xe608}) close_range(r6, 0xffffffffffffffff, 0x0) 3.366499ms ago: executing program 1 (id=2449): openat$panthor(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000440)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) r2 = getpgid(0x0) kcmp(r2, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="f5af24bd7018000000000e00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 0s ago: executing program 2 (id=2450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @random="0100003600"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb130, 0x5, 0x0, 0xea}, 0x60}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000440), 0x56) sendmsg$kcm(r8, &(0x7f0000000480)={&(0x7f0000000000)=@xdp={0x2c, 0x8, r7, 0x42}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="27030200dc0f14000e0000000025c1020000ff1b775ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000bc0)="02db0b9ef1cafdab", 0x8}], 0x2}, 0x4005) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 345.365017][ T5813] cgroup: Unknown subsys name 'net' [ 345.496545][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 346.948596][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 348.514231][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.522772][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.536975][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.544806][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.550936][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 348.552422][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.566244][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 348.569840][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.581680][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 348.582192][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.589518][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.596455][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.603808][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 348.617779][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.640301][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.640979][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.655220][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 348.655883][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 348.670262][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.677630][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 348.690480][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 348.707482][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.721711][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 348.729138][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.778073][ T5824] (null): rxe_set_mtu: Set mtu to 1024 [ 348.786413][ T5825] (null): rxe_set_mtu: Set mtu to 1024 [ 348.790014][ T5829] (null): rxe_set_mtu: Set mtu to 1024 [ 348.793449][ T5825] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 348.798304][ T5829] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 348.810125][ T5824] rxe_eth0 speed is unknown, defaulting to 1000 [ 348.818532][ T5824] rxe_eth0 speed is unknown, defaulting to 1000 [ 348.842712][ T5824] rxe_eth0 speed is unknown, defaulting to 1000 [ 348.864442][ T5832] (null): rxe_set_mtu: Set mtu to 1024 [ 348.877634][ T5832] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 349.180050][ T5824] infiniband rxe0: set active [ 349.190277][ T5824] infiniband rxe0: added rxe_eth0 [ 349.202935][ T790] rxe_eth0 speed is unknown, defaulting to 1000 [ 349.305456][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 349.319008][ T5824] RDS/IB: rxe0: added [ 349.350865][ T5824] smc: adding ib device rxe0 with port count 1 [ 349.357284][ T5824] smc: ib device rxe0 port 1 has pnetid [ 349.393505][ T174] rxe_eth0 speed is unknown, defaulting to 1000 [ 349.420118][ T5824] rxe_eth0 speed is unknown, defaulting to 1000 [ 349.449352][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 349.597120][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.610346][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.617790][ T5825] bridge_slave_0: entered allmulticast mode [ 349.640786][ T5825] bridge_slave_0: entered promiscuous mode [ 349.649495][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.656771][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.664061][ T5825] bridge_slave_1: entered allmulticast mode [ 349.670887][ T5825] bridge_slave_1: entered promiscuous mode [ 349.682789][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 349.699617][ T5824] rxe_eth0 speed is unknown, defaulting to 1000 [ 349.816580][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.867904][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.896380][ T5824] rxe_eth0 speed is unknown, defaulting to 1000 [ 349.910958][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.918352][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.928024][ T5832] bridge_slave_0: entered allmulticast mode [ 349.935538][ T5832] bridge_slave_0: entered promiscuous mode [ 349.966713][ T5825] team0: Port device team_slave_0 added [ 349.987119][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.994661][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.002465][ T5832] bridge_slave_1: entered allmulticast mode [ 350.009752][ T5832] bridge_slave_1: entered promiscuous mode [ 350.047726][ T5825] team0: Port device team_slave_1 added [ 350.116819][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.178356][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.193459][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.214004][ T5829] bridge_slave_0: entered allmulticast mode [ 350.235134][ T5829] bridge_slave_0: entered promiscuous mode [ 350.256380][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.273428][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.288242][ T5829] bridge_slave_1: entered allmulticast mode [ 350.299266][ T5829] bridge_slave_1: entered promiscuous mode [ 350.308674][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.322712][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.329774][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.361425][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.415330][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.422357][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.448640][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.476664][ T5824] rxe_eth0 speed is unknown, defaulting to 1000 [ 350.486367][ T5832] team0: Port device team_slave_0 added [ 350.535617][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.553326][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.565103][ T5832] team0: Port device team_slave_1 added [ 350.627820][ T5825] hsr_slave_0: entered promiscuous mode [ 350.634887][ T5825] hsr_slave_1: entered promiscuous mode [ 350.658767][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.666281][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.692833][ T52] Bluetooth: hci0: command tx timeout [ 350.698267][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.714038][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.721853][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.741580][ T52] Bluetooth: hci1: command tx timeout [ 350.748096][ T5835] Bluetooth: hci2: command tx timeout [ 350.756867][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.770653][ T5450] infiniband rxe0: set active [ 350.786356][ T5829] team0: Port device team_slave_0 added [ 350.799763][ T5829] team0: Port device team_slave_1 added [ 350.820296][ T5835] Bluetooth: hci3: command tx timeout [ 350.842086][ T790] rxe_eth0 speed is unknown, defaulting to 1000 [ 350.886833][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.894074][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.920262][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.933027][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.940002][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.966044][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.983181][ T5832] hsr_slave_0: entered promiscuous mode [ 350.989634][ T5832] hsr_slave_1: entered promiscuous mode [ 350.995976][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.003786][ T5832] Cannot create hsr debugfs directory [ 351.128147][ T5829] hsr_slave_0: entered promiscuous mode [ 351.134533][ T5829] hsr_slave_1: entered promiscuous mode [ 351.141188][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.148778][ T5829] Cannot create hsr debugfs directory [ 351.473652][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.489620][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 351.499480][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.511945][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 351.549833][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 351.643854][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.657108][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 351.666284][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.673981][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.681245][ T5824] bridge_slave_0: entered allmulticast mode [ 351.687920][ T5824] bridge_slave_0: entered promiscuous mode [ 351.696310][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.705979][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.713324][ T5824] bridge_slave_1: entered allmulticast mode [ 351.720360][ T5824] bridge_slave_1: entered promiscuous mode [ 351.745869][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 351.755840][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 351.773296][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.804387][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.891684][ T5824] team0: Port device team_slave_0 added [ 351.900962][ T5824] team0: Port device team_slave_1 added [ 351.907054][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 351.925757][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 351.938224][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 351.948666][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.974729][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.982186][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.010752][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.023727][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.031039][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.057008][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.102339][ T5824] hsr_slave_0: entered promiscuous mode [ 352.108613][ T5824] hsr_slave_1: entered promiscuous mode [ 352.115946][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.124593][ T5824] Cannot create hsr debugfs directory [ 352.364388][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.375844][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.385638][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.397799][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.407396][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.465626][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.478629][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.512748][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.519993][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.531705][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.538825][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.596564][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.616560][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.639066][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.652400][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.659532][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.694176][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.701316][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.727923][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.735175][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.742694][ T5835] Bluetooth: hci0: command tx timeout [ 352.810253][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.817408][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.831915][ T5835] Bluetooth: hci1: command tx timeout [ 352.832502][ T52] Bluetooth: hci2: command tx timeout [ 352.894813][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.911147][ T52] Bluetooth: hci3: command tx timeout [ 352.946761][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.994776][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.001975][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.014111][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.021241][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.118302][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.129405][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.177243][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.317690][ T5825] veth0_vlan: entered promiscuous mode [ 353.356428][ T5825] veth1_vlan: entered promiscuous mode [ 353.427492][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.459756][ T5825] veth0_macvtap: entered promiscuous mode [ 353.497353][ T5825] veth1_macvtap: entered promiscuous mode [ 353.566466][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.598036][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.617922][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.648940][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.659685][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.670085][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.679427][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.699074][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.707372][ T5832] veth0_vlan: entered promiscuous mode [ 353.732095][ T5832] veth1_vlan: entered promiscuous mode [ 353.870079][ T5824] veth0_vlan: entered promiscuous mode [ 353.889432][ T5829] veth0_vlan: entered promiscuous mode [ 353.898063][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.918312][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.918344][ T5832] veth0_macvtap: entered promiscuous mode [ 353.947011][ T5824] veth1_vlan: entered promiscuous mode [ 353.963568][ T5832] veth1_macvtap: entered promiscuous mode [ 353.994419][ T5829] veth1_vlan: entered promiscuous mode [ 354.004351][ T5905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.015569][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.027253][ T5905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.027678][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.047204][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.058383][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.071480][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.084086][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.123840][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.137429][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.146923][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.156340][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.204735][ T5824] veth0_macvtap: entered promiscuous mode [ 354.228251][ T5825] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 354.263566][ T5829] veth0_macvtap: entered promiscuous mode [ 354.278963][ T5824] veth1_macvtap: entered promiscuous mode [ 354.312594][ T5829] veth1_macvtap: entered promiscuous mode [ 354.373261][ T5922] FAULT_INJECTION: forcing a failure. [ 354.373261][ T5922] name failslab, interval 1, probability 0, space 0, times 1 [ 354.392248][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.392591][ T5922] CPU: 0 PID: 5922 Comm: syz.2.3 Not tainted syzkaller #0 [ 354.404447][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.409781][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 354.421299][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.429735][ T5922] Call Trace: [ 354.440589][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.443381][ T5922] [ 354.455095][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.456084][ T5922] dump_stack_lvl+0x18c/0x250 [ 354.468040][ T5922] ? show_regs_print_info+0x20/0x20 [ 354.473406][ T5922] ? load_image+0x420/0x420 [ 354.475140][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.477923][ T5922] ? __might_sleep+0xe0/0xe0 [ 354.493117][ T5922] ? __lock_acquire+0x7eb0/0x7eb0 [ 354.495109][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.498156][ T5922] should_fail_ex+0x394/0x4c0 [ 354.508434][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.512607][ T5922] should_failslab+0x9/0x20 [ 354.512629][ T5922] slab_pre_alloc_hook+0x59/0x300 [ 354.512649][ T5922] ? bpf_prepare_filter+0x746/0x1320 [ 354.512670][ T5922] ? bpf_prepare_filter+0x746/0x1320 [ 354.512689][ T5922] __kmem_cache_alloc_node+0x53/0x260 [ 354.512710][ T5922] ? bpf_prepare_filter+0x746/0x1320 [ 354.512730][ T5922] __kmalloc+0xa7/0x240 [ 354.512758][ T5922] bpf_prepare_filter+0x746/0x1320 [ 354.512780][ T5922] ? __get_filter+0x2ac/0x400 [ 354.512807][ T5922] ? bpf_prog_create+0x1f0/0x1f0 [ 354.512827][ T5922] ? kmemdup+0x55/0x70 [ 354.512851][ T5922] ? __get_filter+0x2db/0x400 [ 354.512878][ T5922] sk_attach_filter+0x24/0x140 [ 354.512903][ T5922] sk_setsockopt+0x2226/0x2b20 [ 354.512933][ T5922] ? sockopt_capable+0x60/0x60 [ 354.512962][ T5922] ? aa_sk_perm+0x7bb/0x8e0 [ 354.512989][ T5922] ? aa_af_perm+0x330/0x330 [ 354.513014][ T5922] ? __fget_files+0x28/0x460 [ 354.513038][ T5922] ? aa_sock_opt_perm+0x74/0x100 [ 354.513058][ T5922] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 354.513081][ T5922] ? security_socket_setsockopt+0x7e/0xa0 [ 354.513109][ T5922] do_sock_setsockopt+0x11b/0x1a0 [ 354.513133][ T5922] __x64_sys_setsockopt+0x182/0x200 [ 354.513158][ T5922] do_syscall_64+0x55/0xb0 [ 354.513180][ T5922] ? clear_bhb_loop+0x40/0x90 [ 354.513202][ T5922] ? clear_bhb_loop+0x40/0x90 [ 354.513227][ T5922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.513265][ T5922] RIP: 0033:0x7fa04d99f559 [ 354.513287][ T5922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.513303][ T5922] RSP: 002b:00007fa04e936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 354.513328][ T5922] RAX: ffffffffffffffda RBX: 00007fa04dc25fa0 RCX: 00007fa04d99f559 [ 354.513342][ T5922] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 354.513353][ T5922] RBP: 00007fa04da36b20 R08: 0000000000000010 R09: 0000000000000000 [ 354.513365][ T5922] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 354.513378][ T5922] R13: 00007fa04dc26038 R14: 00007fa04dc25fa0 R15: 00007ffc12591f58 [ 354.513406][ T5922] [ 354.735397][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.748721][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.759341][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.773324][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.799773][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.815015][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.831986][ T52] Bluetooth: hci0: command tx timeout [ 354.838039][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.849434][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.863012][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.876661][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.888307][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.898299][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.915045][ T52] Bluetooth: hci2: command tx timeout [ 354.915093][ T5835] Bluetooth: hci1: command tx timeout [ 354.921430][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.936179][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.946985][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.958595][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.972930][ T5889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.978621][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.989598][ T5835] Bluetooth: hci3: command tx timeout [ 354.991626][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.004877][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.010270][ T5889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.014030][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.093125][ T5926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.106211][ T5926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.121230][ T5926] bond0 (unregistering): Released all slaves [ 355.137695][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.148203][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.157835][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.166760][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.201737][ T5889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.209942][ T5889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.343074][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.365723][ T5889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.371617][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.388000][ T5889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.438069][ T5887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.446888][ T5887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.533380][ T5887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.558021][ T5887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.844970][ T5939] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 356.133991][ T5945] vlan2: entered allmulticast mode [ 356.139135][ T5945] bond0: entered allmulticast mode [ 356.144335][ T5945] bond_slave_0: entered allmulticast mode [ 356.150080][ T5945] bond_slave_1: entered allmulticast mode [ 356.900267][ T5835] Bluetooth: hci0: command tx timeout [ 356.987870][ T5835] Bluetooth: hci2: command tx timeout [ 356.987890][ T52] Bluetooth: hci1: command tx timeout [ 357.079065][ T52] Bluetooth: hci3: command tx timeout [ 357.465957][ T5957] syz.1.11[5957]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 357.498248][ T5957] loop1: detected capacity change from 0 to 1024 [ 357.607064][ T5957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.724425][ T5962] loop3: detected capacity change from 0 to 256 [ 357.845102][ T5962] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 357.987181][ T5964] loop0: detected capacity change from 0 to 32768 [ 358.002210][ T5964] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.9 (5964) [ 358.056268][ T5964] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 358.068158][ T5964] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 358.077045][ T5964] BTRFS info (device loop0): setting nodatacow, compression disabled [ 358.085654][ T5964] BTRFS info (device loop0): setting datasum, datacow enabled [ 358.093735][ T5964] BTRFS info (device loop0): force clearing of disk cache [ 358.102266][ T5964] BTRFS info (device loop0): enabling ssd optimizations [ 358.110281][ T5964] BTRFS info (device loop0): using spread ssd allocation scheme [ 358.117950][ T5964] BTRFS info (device loop0): turning on sync discard [ 358.124804][ T5964] BTRFS info (device loop0): turning on flush-on-commit [ 358.129347][ T5889] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 358.131835][ T5964] BTRFS info (device loop0): not using ssd optimizations [ 358.131892][ T5964] BTRFS info (device loop0): not using spread ssd allocation scheme [ 358.131920][ T5964] BTRFS info (device loop0): using free space tree [ 358.265755][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.315555][ T5964] BTRFS info (device loop0): rebuilding free space tree [ 358.397016][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 359.124559][ T28] audit: type=1800 audit(1793341726.592:2): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 359.423384][ T5964] BTRFS info (device loop0): balance: start -d -m [ 359.443144][ T5964] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 359.519201][ T6003] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 359.568793][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 360.399587][ T5964] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 360.523635][ T5964] BTRFS info (device loop0): balance: canceled [ 360.657727][ T5824] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 362.515661][ T5819] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 17 /dev/loop0 scanned by udevd (5819) [ 362.604617][ T5900] rxe_eth0 speed is unknown, defaulting to 1000 [ 364.028727][ T6049] loop1: detected capacity change from 0 to 32768 [ 364.053438][ T6051] xt_bpf: check failed: parse error [ 364.064966][ T5928] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 364.153928][ T6049] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.30 (6049) [ 364.296847][ T5928] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 364.304662][ T5898] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 364.313446][ T6049] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 364.323848][ T6049] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 364.332693][ T6049] BTRFS info (device loop1): use zlib compression, level 3 [ 364.339958][ T6049] BTRFS info (device loop1): turning on sync discard [ 364.343204][ T5928] usb 1-1: config 0 has no interface number 0 [ 364.346736][ T6049] BTRFS info (device loop1): using free space tree [ 364.389289][ T5928] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 364.415340][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.425893][ T6049] BTRFS info (device loop1): enabling ssd optimizations [ 364.439614][ T5928] usb 1-1: Product: syz [ 364.449441][ T5928] usb 1-1: Manufacturer: syz [ 364.459816][ T5928] usb 1-1: SerialNumber: syz [ 364.502894][ T5928] usb 1-1: config 0 descriptor?? [ 364.583280][ T5898] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 364.647303][ T5898] usb 4-1: config 0 has no interface number 0 [ 364.656303][ T5829] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 364.668397][ T5898] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.685273][ T5898] usb 4-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.737925][ T5898] usb 4-1: config 0 interface 16 has no altsetting 0 [ 364.746781][ T5928] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 364.750358][ T5898] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 364.765507][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.791227][ T5898] usb 4-1: config 0 descriptor?? [ 364.848758][ T5928] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 364.904222][ T5928] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 364.944993][ T5928] usb 1-1: media controller created [ 365.055282][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.193241][ T5928] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 365.271379][ T5898] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.16/0003:06A3:0CD0.0001/input/input5 [ 365.661956][ T5898] saitek 0003:06A3:0CD0.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.3-1/input16 [ 365.686330][ T5928] usb 1-1: USB disconnect, device number 2 [ 365.780397][ T5898] usb 4-1: USB disconnect, device number 2 [ 365.975081][ T6091] fido_id[6091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 366.284993][ T6101] loop0: detected capacity change from 0 to 1024 [ 367.369257][ T6093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33'. [ 367.565718][ T6113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.39'. [ 367.703075][ T6120] loop0: detected capacity change from 0 to 4096 [ 367.711352][ T6120] ======================================================= [ 367.711352][ T6120] WARNING: The mand mount option has been deprecated and [ 367.711352][ T6120] and is ignored by this kernel. Remove the mand [ 367.711352][ T6120] option from the mount to silence this warning. [ 367.711352][ T6120] ======================================================= [ 367.746270][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.017777][ T6122] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 368.769193][ T6126] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 371.262477][ T6151] loop2: detected capacity change from 0 to 512 [ 371.292166][ T6151] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 371.339596][ T6133] syz.3.46 uses obsolete (PF_INET,SOCK_PACKET) [ 371.341556][ T6151] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 371.395023][ T6133] loop3: detected capacity change from 0 to 1024 [ 371.586445][ T6133] hfsplus: failed to load catalog file [ 374.458657][ T6176] (null): rxe_set_mtu: Set mtu to 1024 [ 374.870180][ C1] sched: RT throttling activated [ 374.915420][ T6178] loop1: detected capacity change from 0 to 256 [ 374.975009][ T6176] infiniband syz0: set active [ 374.979749][ T6176] infiniband syz0: added veth1_to_bridge [ 374.986818][ T6176] syz0: rxe_create_cq: returned err = -12 [ 374.993630][ T6176] infiniband syz0: Couldn't create ib_mad CQ [ 374.999852][ T6176] infiniband syz0: Couldn't open port 1 [ 375.027954][ T6176] RDS/IB: syz0: added [ 375.032085][ T6176] smc: adding ib device syz0 with port count 1 [ 375.038272][ T6176] smc: ib device syz0 port 1 has pnetid [ 378.862095][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.880288][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.199358][ T6207] process 'syz.1.67' launched './file1' with NULL argv: empty string added [ 383.834721][ T6232] loop2: detected capacity change from 0 to 512 [ 383.864170][ T6232] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 383.917796][ T6232] EXT4-fs (loop2): 1 truncate cleaned up [ 383.968867][ T6232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.783028][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.855929][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.69'. [ 387.999155][ T6251] 9pnet_fd: Insufficient options for proto=fd [ 388.186326][ T6259] loop3: detected capacity change from 0 to 512 [ 388.265868][ T6259] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 388.333500][ T6259] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 389.262792][ T5826] IPVS: starting estimator thread 0... [ 389.400442][ T6270] IPVS: using max 35 ests per chain, 84000 per kthread [ 392.762209][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 392.951545][ T6293] 9pnet_fd: Insufficient options for proto=fd [ 395.790261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 398.818006][ T6343] netlink: 'syz.1.102': attribute type 2 has an invalid length. [ 399.106330][ T6348] 9pnet_fd: Insufficient options for proto=fd [ 404.902607][ T6395] xt_bpf: check failed: parse error [ 406.244116][ T6414] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 408.180214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 411.292641][ T6453] (null): rxe_set_mtu: Set mtu to 1024 [ 411.300597][ T6453] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 411.702045][ T6457] xt_bpf: check failed: parse error [ 414.751424][ T6483] block device autoloading is deprecated and will be removed. [ 424.217314][ T6535] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 424.659693][ T6542] xt_bpf: check failed: parse error [ 425.542818][ T6544] loop2: detected capacity change from 0 to 4096 [ 425.713637][ T6544] ntfs3: loop2: ino=19, mi_enum_attr [ 425.734194][ T6544] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 437.123206][ T6621] xt_bpf: check failed: parse error [ 438.430803][ T5900] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 438.690572][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 438.850710][ T5900] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 438.858753][ T5900] usb 3-1: config 0 has no interface number 0 [ 438.918692][ T5900] usb 3-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.042963][ T5900] usb 3-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 439.110266][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.342762][ T5900] usb 3-1: config 0 descriptor?? [ 439.420842][ T5900] usbhid 3-1:0.4: couldn't find an input interrupt endpoint [ 440.241476][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.247909][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.590498][ T5900] usb 3-1: USB disconnect, device number 2 [ 443.461050][ T5928] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 443.661619][ T6672] loop2: detected capacity change from 0 to 256 [ 443.822494][ T6672] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 453.003385][ T6724] loop2: detected capacity change from 0 to 256 [ 457.423527][ T6755] Zero length message leads to an empty skb [ 459.843272][ T6781] binder: 6777:6781 ioctl 4018620d 0 returned -22 [ 470.588417][ T6859] syz.3.242 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 471.091962][ T6862] jffs2: notice: (6862) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 473.070420][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 473.070643][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 473.070729][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 473.070814][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 493.275684][ T7020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.292'. [ 501.680399][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.686792][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.831638][ T7125] 9pnet_fd: Insufficient options for proto=fd [ 505.070426][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 505.222935][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 505.968305][ T7157] 9pnet_fd: Insufficient options for proto=fd [ 507.159632][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 507.370769][ T52] Bluetooth: hci0: unexpected event for opcode 0x080e [ 507.799015][ T7179] xt_bpf: check failed: parse error [ 509.383780][ T7202] capability: warning: `syz.0.345' uses deprecated v2 capabilities in a way that may be insecure [ 510.580463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 511.834560][ T7228] 9pnet_fd: Insufficient options for proto=fd [ 512.028163][ T7231] loop2: detected capacity change from 0 to 512 [ 514.208478][ T7255] loop2: detected capacity change from 0 to 512 [ 514.253305][ T7255] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 514.284123][ T7255] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 514.314619][ T7255] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 514.347627][ T7255] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 514.358057][ T7255] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e041e01c, mo2=0100] [ 514.376345][ T7255] EXT4-fs (loop2): failed to initialize system zone (-117) [ 514.384118][ T7255] EXT4-fs (loop2): mount failed [ 515.385114][ T7261] 9pnet_fd: Insufficient options for proto=fd [ 519.320473][ T7292] netlink: 'syz.2.362': attribute type 8 has an invalid length. [ 519.348171][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 519.407449][ T7297] 9pnet_fd: Insufficient options for proto=fd [ 523.328943][ T7327] 9pnet_fd: Insufficient options for proto=fd [ 523.925572][ T7333] loop2: detected capacity change from 0 to 512 [ 523.977058][ T7333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 524.092193][ T7333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.158177][ T7333] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.963229][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.151831][ T7343] loop2: detected capacity change from 0 to 512 [ 525.197728][ T7343] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 525.228149][ T7343] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 525.248728][ T7343] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 525.293386][ T7343] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 525.328494][ T7343] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e041e01c, mo2=0100] [ 525.337374][ T7343] EXT4-fs (loop2): failed to initialize system zone (-117) [ 525.344843][ T7343] EXT4-fs (loop2): mount failed [ 528.635784][ T7372] jffs2: notice: (7372) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 529.396767][ T7386] 9pnet_fd: Insufficient options for proto=fd [ 533.461633][ T7409] overlayfs: failed to clone upperpath [ 535.450051][ T7415] block device autoloading is deprecated and will be removed. [ 535.880904][ T7424] block device autoloading is deprecated and will be removed. [ 535.917388][ T7426] 9pnet_fd: Insufficient options for proto=fd [ 536.180507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 537.392076][ T7438] bond0: (slave bond_slave_0): Releasing backup interface [ 538.278519][ T7436] bond0: option mode: unable to set because the bond device has slaves [ 538.309453][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 538.694295][ T7451] xt_bpf: check failed: parse error [ 542.093337][ T7480] loop2: detected capacity change from 0 to 16 [ 542.186106][ T7480] erofs: (device loop2): mounted with root inode @ nid 36. [ 542.269932][ T7480] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 542.435787][ T7487] xt_bpf: check failed: parse error [ 542.562644][ T7480] syz.2.426: attempt to access beyond end of device [ 542.562644][ T7480] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 543.095115][ T7480] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 7 of nid 89 [ 543.140827][ T7480] erofs: (device loop2): z_erofs_readahead: readahead error at folio 7 @ nid 89 [ 543.193032][ T7480] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 543.220434][ T7480] syz.2.426: attempt to access beyond end of device [ 543.220434][ T7480] loop2: rw=524288, sector=16, nr_sectors = 24 limit=16 [ 543.279958][ T28] audit: type=1800 audit(1793341910.852:3): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.426" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 545.472259][ T7517] loop2: detected capacity change from 0 to 512 [ 545.534408][ T7517] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 545.557626][ T7517] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 545.589004][ T7517] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 545.614253][ T7517] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 545.633024][ T7517] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e041e01c, mo2=0100] [ 545.649421][ T7517] EXT4-fs (loop2): failed to initialize system zone (-117) [ 545.750379][ T7517] EXT4-fs (loop2): mount failed [ 548.603013][ T7538] netlink: 48 bytes leftover after parsing attributes in process `syz.0.436'. [ 551.562100][ T7557] rxe_eth0 speed is unknown, defaulting to 1000 [ 554.521264][ T7580] warning: `syz.3.448' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 556.152435][ T7591] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 557.288768][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.297761][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.357901][ T7602] bridge0: entered allmulticast mode [ 557.400935][ T7605] bridge_slave_1: left allmulticast mode [ 557.407271][ T7605] bridge_slave_1: left promiscuous mode [ 557.428895][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.481389][ T7605] bridge_slave_0: left allmulticast mode [ 557.507985][ T7605] bridge_slave_0: left promiscuous mode [ 557.528469][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.352609][ T7668] 9pnet_fd: Insufficient options for proto=fd [ 563.063781][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.070375][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.034408][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 570.032331][ T7757] 9pnet_fd: Insufficient options for proto=fd [ 571.683878][ T28] audit: type=1326 audit(1793341939.262:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7768 comm="syz.3.513" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f247a19f559 code=0x0 [ 571.885586][ T7775] xt_TCPMSS: Only works on TCP SYN packets [ 572.927171][ T7786] 9pnet_fd: Insufficient options for proto=fd [ 573.002266][ T7789] xt_bpf: check failed: parse error [ 575.060784][ T7811] 9pnet_fd: Insufficient options for proto=fd [ 575.189892][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 576.905863][ T7840] 9pnet_fd: Insufficient options for proto=fd [ 576.962069][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 577.350339][ T7851] xt_bpf: check failed: parse error [ 579.780717][ T7869] 9pnet_fd: Insufficient options for proto=fd [ 580.886064][ T7892] xt_CT: You must specify a L4 protocol and not use inversions on it [ 581.104022][ T7894] xt_bpf: check failed: parse error [ 581.576938][ T7897] 9pnet_fd: Insufficient options for proto=fd [ 584.016439][ T7931] 9pnet_fd: Insufficient options for proto=fd [ 584.374547][ T7935] 9pnet: Could not find request transport: fd0x0000000000000003 [ 584.994930][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 585.013821][ T7958] 9pnet_fd: Insufficient options for proto=fd [ 585.082117][ T7960] fuse: Bad value for 'fd' [ 585.480469][ T7968] block device autoloading is deprecated and will be removed. [ 585.758752][ T7979] 9pnet_fd: Insufficient options for proto=fd [ 585.761809][ T7978] fuse: Bad value for 'fd' [ 586.368379][ T7997] 9pnet_fd: Insufficient options for proto=fd [ 587.899354][ T8026] 9pnet_fd: Insufficient options for proto=fd [ 587.959617][ T8028] xt_bpf: check failed: parse error [ 588.322449][ T52] Bluetooth: hci3: unexpected event for opcode 0x041c [ 589.025685][ T5900] IPVS: starting estimator thread 0... [ 589.210531][ T8043] IPVS: using max 17 ests per chain, 40800 per kthread [ 590.674435][ T8056] 9pnet_fd: Insufficient options for proto=fd [ 590.728391][ T23] libceph: connect (1)[c::]:6789 error -101 [ 590.743038][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 590.754507][ T8053] ceph: No mds server is up or the cluster is laggy [ 590.805713][ T8061] v: renamed from macvlan1 (while UP) [ 591.905013][ T5949] rpcbind: server 127.0.0.1 not responding, timed out [ 593.334026][ T8103] tipc: Enabling of bearer rejected, failed to enable media [ 594.523472][ T8111] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 596.671236][ T8124] 9pnet_fd: Insufficient options for proto=fd [ 602.573536][ T8202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.660'. [ 602.690673][ T8199] v: renamed from macvlan1 [ 603.038091][ T8213] ip_tables: iptables: counters copy to user failed while replacing table [ 603.409190][ T8222] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 604.199199][ T8229] syz.0.680[8229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 604.199443][ T8229] syz.0.680[8229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 609.005733][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 611.725549][ T8357] jffs2: notice: (8357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 615.470911][ T8402] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8402] [ 616.287017][ T8404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.735'. [ 616.351467][ T8404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.735'. [ 619.644877][ T8436] xt_bpf: check failed: parse error [ 621.577331][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 624.520736][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.537478][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.957356][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 627.323068][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 628.012416][ T8552] overlayfs: failed to clone upperpath [ 630.407616][ T8572] fuse: Bad value for 'fd' [ 630.628404][ T8574] v: renamed from macvlan1 (while UP) [ 632.005503][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 632.162146][ T8585] netlink: 92 bytes leftover after parsing attributes in process `syz.0.786'. [ 633.265608][ T8598] netlink: 64 bytes leftover after parsing attributes in process `syz.0.789'. [ 642.312952][ T8671] netlink: 184 bytes leftover after parsing attributes in process `syz.0.813'. [ 653.224572][ T8737] trusted_key: encrypted_key: insufficient parameters specified [ 653.236943][ T8737] trusted_key: encrypted_key: insufficient parameters specified [ 653.642218][ T8741] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8741] [ 656.675010][ T8769] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8769] [ 657.692676][ T8779] netlink: 80 bytes leftover after parsing attributes in process `syz.3.849'. [ 658.749966][ T8793] MTDSB: Device #1 doesn't appear to exist [ 658.749966][ T8793] [ 658.765580][ T8793] bond0: option use_carrier: invalid value (9) [ 662.369048][ T8832] ip_tables: iptables: counters copy to user failed while replacing table [ 663.465315][ T8854] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 665.762585][ T8885] fuse: Bad value for 'fd' [ 682.197501][ T9004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.242717][ T9004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.598833][ T9004] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.608177][ T9004] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.700522][ T9004] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.747639][ T9004] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.982667][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.989459][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.795814][ T9180] MTDSB: Device #1 doesn't appear to exist [ 689.795814][ T9180] [ 691.314856][ T9194] syz.1.979 (9194) used greatest stack depth: 19336 bytes left [ 693.057714][ T9249] rxe_eth0 speed is unknown, defaulting to 1000 [ 693.818477][ T5450] veth1_macvtap: left promiscuous mode [ 694.748319][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 695.314751][ T9321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1009'. [ 696.301912][ T9334] bridge_slave_0: left allmulticast mode [ 696.317861][ T9334] bridge_slave_0: left promiscuous mode [ 696.328249][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.497991][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 697.635553][ T9361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1021'. [ 699.267026][ T9417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1036'. [ 699.577938][ T9427] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 699.953287][ T9443] overlayfs: failed to clone upperpath [ 700.889657][ T9458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1047'. [ 701.565109][ T9470] fuse: Bad value for 'fd' [ 702.445837][ T9495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 702.771633][ T9507] overlayfs: failed to clone upperpath [ 704.170610][ T9537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1073'. [ 704.836291][ T9556] overlayfs: failed to clone upperpath [ 704.883078][ T9556] overlayfs: failed to clone upperpath [ 705.497091][ T9571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1088'. [ 705.984781][ T9583] netlink: 'syz.2.1093': attribute type 4 has an invalid length. [ 709.808707][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'. [ 711.223581][ T9693] fuse: Bad value for 'fd' [ 720.197354][ T9817] overlayfs: failed to clone lowerpath [ 729.447965][ T9932] overlayfs: failed to clone upperpath [ 730.668443][ T9944] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9944] [ 731.343243][ T9945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1195'. [ 731.377748][ T9945] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1195'. [ 736.585117][ T9998] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1213'. [ 744.133653][T10081] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10081] [ 745.090409][ T28] audit: type=1804 audit(1793342380.625:5): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1236" name="bus" dev="ramfs" ino=17231 res=1 errno=0 [ 745.161388][ T28] audit: type=1804 audit(1793342380.625:6): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1236" name="bus" dev="ramfs" ino=17231 res=1 errno=0 [ 747.390902][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.397243][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.428611][T10111] overlayfs: failed to clone upperpath [ 748.529173][T10113] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10113] [ 751.425526][T10147] overlayfs: failed to resolve './bus': -2 [ 751.766773][T10151] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1256'. [ 757.468274][T10205] netlink: 'syz.2.1267': attribute type 12 has an invalid length. [ 762.901531][T10244] overlayfs: failed to clone upperpath [ 764.480974][T10256] rxe_eth0 speed is unknown, defaulting to 1000 [ 767.464575][T10275] rxe_eth0 speed is unknown, defaulting to 1000 [ 771.957807][T10306] rxe_eth0 speed is unknown, defaulting to 1000 [ 776.414392][T10342] 9pnet_fd: Insufficient options for proto=fd [ 779.122802][T10371] fuse: Bad value for 'fd' [ 780.512124][T10396] MTDSB: Device #1 doesn't appear to exist [ 780.512124][T10396] [ 780.591135][T10396] bond0: option use_carrier: invalid value (9) [ 780.605190][T10396] bond0 (unregistering): Released all slaves [ 782.868598][T10431] MTDSB: Device #1 doesn't appear to exist [ 782.868598][T10431] [ 782.891280][T10431] bond0: option use_carrier: invalid value (9) [ 785.769234][T10471] 9pnet_virtio: no channels available for device syz [ 786.085407][T10479] md3: using deprecated bitmap file support [ 786.115804][T10479] md3: error: bitmap file must be a regular file [ 787.424300][T10490] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10490] [ 788.404243][T10497] overlayfs: failed to clone upperpath [ 789.367661][T10523] ip_tables: iptables: counters copy to user failed while replacing table [ 790.531314][T10542] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10542] [ 792.657874][T10565] ip_tables: iptables: counters copy to user failed while replacing table [ 793.830718][T10574] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10574] [ 796.785016][T10598] ip_tables: iptables: counters copy to user failed while replacing table [ 797.420723][T10607] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5825] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10607] [ 797.909074][T10615] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10615] [ 798.584243][T10621] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5825] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10621] [ 800.684223][T10636] ip_tables: iptables: counters copy to user failed while replacing table [ 801.729561][T10648] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10648] [ 803.129367][T10663] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10663] [ 805.784212][T10686] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10686] [ 808.812697][T10714] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10714] [ 808.901214][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.915617][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.227715][T10760] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5825] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10760] [ 815.720166][T10799] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5825] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10799] [ 819.868407][T10850] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5825] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10850] [ 820.692602][T10860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1474'. [ 823.391458][T10892] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10892] [ 824.017731][T10899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1487'. [ 826.069468][T10927] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10927] [ 826.228201][T10934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1499'. [ 826.513865][T10941] netlink: 'syz.2.1501': attribute type 9 has an invalid length. [ 826.546717][T10941] netlink: 'syz.2.1501': attribute type 7 has an invalid length. [ 826.585775][T10941] netlink: 'syz.2.1501': attribute type 8 has an invalid length. [ 828.612022][T10965] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1508'. [ 829.551673][T10974] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10974] [ 830.483165][T10982] team0: Port device team_slave_0 removed [ 830.526423][T10982] team0: Port device team_slave_1 removed [ 830.540712][T10982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.553141][T10982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.591772][T11001] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1518'. [ 830.669174][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1519'. [ 831.370291][T11017] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5825] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11017] [ 831.890422][ T28] audit: type=1326 audit(1793342491.465:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.2.1526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d99f559 code=0x7ffc0000 [ 831.936025][T11025] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1526'. [ 831.952919][ T28] audit: type=1326 audit(1793342491.465:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.2.1526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d99f559 code=0x7ffc0000 [ 832.011783][ T28] audit: type=1326 audit(1793342491.475:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.2.1526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d99f559 code=0x7ffc0000 [ 832.065076][ T28] audit: type=1326 audit(1793342491.475:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.2.1526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d99f559 code=0x7ffc0000 [ 832.094597][ T28] audit: type=1326 audit(1793342491.495:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.2.1526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa04d99f559 code=0x7ffc0000 [ 832.194111][ T28] audit: type=1326 audit(1793342491.495:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.2.1526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d99f559 code=0x7ffc0000 [ 832.248012][ T28] audit: type=1326 audit(1793342491.495:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.2.1526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d99f559 code=0x7ffc0000 [ 832.310765][ T28] audit: type=1326 audit(1793342491.495:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.2.1526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d99f559 code=0x7ffc0000 [ 832.358716][ T28] audit: type=1326 audit(1793342491.495:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.2.1526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa04d99f559 code=0x7ffc0000 [ 832.401485][ T28] audit: type=1326 audit(1793342491.495:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.2.1526" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04d99f559 code=0x7ffc0000 [ 832.696040][T11044] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1531'. [ 832.792933][T11047] ip_tables: iptables: counters copy to user failed while replacing table [ 834.179171][T11057] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5825] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11057] [ 834.199840][T11060] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11060] [ 834.609082][ T52] Bluetooth: hci2: unexpected event for opcode 0x202a [ 835.506161][T11083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1543'. [ 836.001368][T11096] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11096] [ 836.335117][T11097] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11097] [ 836.388596][T11088] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1545'. [ 837.088931][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 837.527995][T11123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1556'. [ 839.385291][T11147] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11147] [ 839.608195][T11148] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11148] [ 841.778590][T11165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1566'. [ 843.646773][T11192] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11192] [ 843.850798][T11194] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11194] [ 844.347200][ T52] Bluetooth: hci3: unexpected event 0x3c length: 11 > 7 [ 846.600293][T11224] ip_tables: iptables: counters copy to user failed while replacing table [ 847.166940][T11227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1588'. [ 847.452305][T11231] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11231] [ 850.411183][T11264] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5825] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11264] [ 852.306507][T11275] 9pnet_fd: Insufficient options for proto=fd [ 852.444120][T11279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1606'. [ 852.524826][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 852.643786][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'. [ 855.157514][T11326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1621'. [ 856.809334][T11349] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1629'. [ 864.677684][ C1] hrtimer: interrupt took 51916 ns [ 870.156341][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.163890][T11546] ip_tables: iptables: counters copy to user failed while replacing table [ 870.164897][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.947706][T11580] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5825] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11580] [ 873.111088][T11595] ip_tables: iptables: counters copy to user failed while replacing table [ 873.318810][ T28] kauditd_printk_skb: 174 callbacks suppressed [ 873.318824][ T28] audit: type=1326 audit(1793866821.038:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11587 comm="syz.3.1712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f247a19f559 code=0x0 [ 874.757233][T11628] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 874.776753][T11628] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 874.804892][T11628] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 874.828030][T11628] One or more global auth toks could not properly register; rc = [-22] [ 874.839181][T11628] Error parsing options; rc = [-22] [ 875.367511][T11641] ip_tables: iptables: counters copy to user failed while replacing table [ 875.436409][ T52] Bluetooth: hci1: unexpected event for opcode 0x202a [ 876.526881][T11649] vlan2: entered allmulticast mode [ 876.542507][T11649] bond0: entered allmulticast mode [ 876.547667][T11649] bond_slave_0: entered allmulticast mode [ 876.565419][T11653] 9pnet_virtio: no channels available for device syz [ 876.572320][T11649] bond_slave_1: entered allmulticast mode [ 876.595210][T11649] bridge0: port 3(vlan2) entered blocking state [ 876.604753][T11649] bridge0: port 3(vlan2) entered disabled state [ 876.613747][T11649] vlan2: entered promiscuous mode [ 876.619177][T11649] bond0: entered promiscuous mode [ 876.624765][T11649] bond_slave_0: entered promiscuous mode [ 876.631452][T11649] bond_slave_1: entered promiscuous mode [ 876.640410][T11649] bridge0: port 3(vlan2) entered blocking state [ 876.646820][T11649] bridge0: port 3(vlan2) entered forwarding state [ 877.175413][T11677] ip_tables: iptables: counters copy to user failed while replacing table [ 878.522894][ T52] Bluetooth: hci2: unexpected event for opcode 0x202a [ 879.392623][T11699] vlan2: entered allmulticast mode [ 879.411553][T11699] bond0: entered allmulticast mode [ 879.438457][T11699] bond_slave_1: entered allmulticast mode [ 881.942513][ T52] Bluetooth: hci2: unexpected event for opcode 0x202a [ 882.189415][T11734] vlan2: entered allmulticast mode [ 884.350802][T11766] vlan2: entered allmulticast mode [ 884.392125][T11768] netlink: 'syz.2.1767': attribute type 9 has an invalid length. [ 884.412457][T11768] netlink: 'syz.2.1767': attribute type 7 has an invalid length. [ 884.442325][T11768] netlink: 'syz.2.1767': attribute type 8 has an invalid length. [ 886.300432][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1776'. [ 888.054669][T11814] 9pnet_virtio: no channels available for device syz [ 888.597715][T11829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1788'. [ 889.994432][T11864] UBIFS error (pid: 11864): cannot open "ubi:0", error -19 [ 890.794502][T11886] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11886] [ 891.036347][T11756] Bluetooth: Wrong link type (-71) [ 891.647056][T11900] 9pnet_virtio: no channels available for device syz [ 892.506079][T11922] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11922] [ 893.576647][T11945] 9pnet: Found fid 0 not clunked [ 893.925149][T11960] infiniband syz0: set active [ 893.938149][T11960] infiniband syz0: set active [ 893.952431][T11960] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.228051][T11965] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5825] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11965] [ 895.462978][T11988] overlay: Unknown parameter 'smackfsroot' [ 895.471976][T11988] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 895.482090][T11756] Bluetooth: hci0: unexpected subevent 0x1a length: 12 > 6 [ 896.002132][T11756] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 896.381927][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'. [ 896.404895][T12013] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12013] [ 896.568744][T12015] jffs2: notice: (12015) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 897.547262][T11756] Bluetooth: hci0: command 0x0406 tx timeout [ 898.359789][T12039] ip_tables: iptables: counters copy to user failed while replacing table [ 899.400522][T12068] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12068] [ 900.585578][T12081] ip_tables: iptables: counters copy to user failed while replacing table [ 902.118902][T12103] IPVS: set_ctl: invalid protocol: 59 172.30.0.4:7 [ 903.133000][T12113] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12113] [ 903.369796][T12120] ip_tables: iptables: counters copy to user failed while replacing table [ 906.820812][T12159] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5825] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12159] [ 907.736314][T12174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1899'. [ 908.433817][ T28] audit: type=1326 audit(1793866856.325:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.0.1904" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51dd9f559 code=0x7ffc0000 [ 908.459405][ T28] audit: type=1326 audit(1793866856.325:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.0.1904" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51dd9f559 code=0x7ffc0000 [ 908.489246][ T28] audit: type=1326 audit(1793866856.325:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.0.1904" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd51dd9f559 code=0x7ffc0000 [ 908.515963][ T28] audit: type=1326 audit(1793866856.325:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12185 comm="syz.0.1904" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd51dd9f559 code=0x7ffc0000 [ 908.747970][T12190] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12190] [ 910.831471][T12223] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12223] [ 912.177853][T12246] trusted_key: encrypted_key: insufficient parameters specified [ 913.189329][T12256] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12256] [ 914.604230][T12284] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12284] [ 917.144228][T12311] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12311] [ 918.360077][T12328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1953'. [ 921.121397][T12359] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12359] [ 924.378821][T12396] ip_tables: iptables: counters copy to user failed while replacing table [ 925.307747][T12405] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5825] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12405] [ 927.534270][T12438] ip_tables: iptables: counters copy to user failed while replacing table [ 928.411998][T12443] xt_bpf: check failed: parse error [ 930.568111][T12461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1993'. [ 931.366063][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.403904][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.923249][T12486] xt_bpf: check failed: parse error [ 932.801085][T12489] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5825] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12489] [ 933.534140][T12507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2007'. [ 935.124181][T12525] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12525] [ 935.548853][T12530] ip_tables: iptables: counters copy to user failed while replacing table [ 936.876026][T12547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2019'. [ 939.149481][T12582] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12582] [ 939.150230][T12580] ip_tables: iptables: counters copy to user failed while replacing table [ 939.588885][T12588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2035'. [ 942.617369][T12622] ip_tables: iptables: counters copy to user failed while replacing table [ 942.809437][T12624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2047'. [ 945.149918][T12649] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12649] [ 950.799558][T12703] ip_tables: iptables: counters copy to user failed while replacing table [ 950.819452][T12704] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12704] [ 952.684182][T12718] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2074'. [ 956.461044][T12758] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2085'. [ 957.290513][T12771] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12771] [ 960.084647][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2098'. [ 961.648675][T12826] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12826] [ 961.878992][T12827] ip_tables: iptables: counters copy to user failed while replacing table [ 962.407703][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2109'. [ 965.076752][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 966.104856][T12881] ip_tables: iptables: counters copy to user failed while replacing table [ 966.882516][T12896] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5825] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12896] [ 968.238315][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2131'. [ 969.918754][T12925] ip_tables: iptables: counters copy to user failed while replacing table [ 972.391422][T12952] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12952] [ 974.481778][T12968] ip_tables: iptables: counters copy to user failed while replacing table [ 976.279292][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 977.146110][T13004] ip_tables: iptables: counters copy to user failed while replacing table [ 980.871916][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2177'. [ 982.960283][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 985.831623][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 992.635345][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.641951][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.442715][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2228'. [ 998.670665][T13263] xt_bpf: check failed: parse error [ 999.376505][T13276] ip_tables: iptables: counters copy to user failed while replacing table [ 1001.529964][T13309] ip_tables: iptables: counters copy to user failed while replacing table [ 1005.112741][T13346] ip_tables: iptables: counters copy to user failed while replacing table [ 1008.644093][T13388] ip_tables: iptables: counters copy to user failed while replacing table [ 1010.380289][T13414] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13414] [ 1010.989021][T13410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1011.489000][T13418] ip_tables: iptables: counters copy to user failed while replacing table [ 1013.503663][T13451] ip_tables: iptables: counters copy to user failed while replacing table [ 1015.058197][T13481] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13481] [ 1015.574507][T13483] ip_tables: iptables: counters copy to user failed while replacing table [ 1017.599942][T13523] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13523] [ 1017.629138][T13518] ip_tables: iptables: counters copy to user failed while replacing table [ 1020.570551][T13558] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13558] [ 1021.363422][T13565] UBIFS error (pid: 13565): cannot open "ubi:0", error -19 [ 1022.837005][T13591] gre1: entered promiscuous mode [ 1023.453721][ T28] audit: type=1326 audit(1793866971.553:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13592 comm="syz.1.2353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f850d59f559 code=0x0 [ 1029.693987][T11756] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1029.709920][T11756] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1029.738673][T11756] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1029.751152][T11756] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1029.764210][T11756] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1029.773863][T11756] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1030.479500][T13659] rxe_eth0 speed is unknown, defaulting to 1000 [ 1033.833171][T11756] Bluetooth: hci4: command tx timeout [ 1035.723823][T13659] chnl_net:caif_netlink_parms(): no params data found [ 1035.861055][T11756] Bluetooth: hci4: command tx timeout [ 1036.932851][T13659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.960168][T13659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.767121][T13659] bridge_slave_0: entered allmulticast mode [ 1037.794574][T13659] bridge_slave_0: entered promiscuous mode [ 1037.822460][T13659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.848686][T13659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.874878][T13659] bridge_slave_1: entered allmulticast mode [ 1037.909324][T13659] bridge_slave_1: entered promiscuous mode [ 1037.949260][T11756] Bluetooth: hci4: command tx timeout [ 1037.997024][T13744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2390'. [ 1038.082286][T13746] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5829] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13746] [ 1038.110315][T13659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.192307][T13659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.334435][T13659] team0: Port device team_slave_0 added [ 1038.369853][T13659] team0: Port device team_slave_1 added [ 1038.497158][T13659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.538205][T13659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.686998][T13659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.777362][T13659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.817577][T13659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.904509][T13659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.000760][ T7523] hsr_slave_0: left promiscuous mode [ 1039.026130][ T7523] hsr_slave_1: left promiscuous mode [ 1040.027191][T11756] Bluetooth: hci4: command tx timeout [ 1041.440715][T13790] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5824] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13790] [ 1042.068813][T13659] hsr_slave_0: entered promiscuous mode [ 1042.226968][T13659] hsr_slave_1: entered promiscuous mode [ 1043.860607][ T7523] IPVS: stop unused estimator thread 0... [ 1044.667093][T13659] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1044.694557][T13659] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1044.723147][T13659] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1044.752169][T13659] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1044.871190][T13659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.917275][T13659] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.929652][ T7492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.936824][ T7492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.980962][ T7491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.988162][ T7491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.628316][T13659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.725407][T13659] veth0_vlan: entered promiscuous mode [ 1045.767907][T13659] veth1_vlan: entered promiscuous mode [ 1045.924472][T13659] veth0_macvtap: entered promiscuous mode [ 1045.944803][T13659] veth1_macvtap: entered promiscuous mode [ 1045.974818][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.015631][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.061847][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.098620][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.123530][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.148812][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.173064][T13659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.247903][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.291767][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.328694][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.351655][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.378437][T11756] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 1046.391743][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.408084][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.419706][T13659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.481063][T13659] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.526424][T13659] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.546847][T13659] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.571705][T13659] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.817909][ T7523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.847796][ T7523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.974321][ T7491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.011833][ T7491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.229343][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1050.241391][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1050.250040][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1050.268206][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1050.277490][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1050.288265][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1050.356891][T13941] rxe_eth0 speed is unknown, defaulting to 1000 [ 1050.918391][ T7490] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.145581][ T7490] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.309440][ T7490] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.471684][ T7490] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.996188][ T5831] Bluetooth: hci1: command tx timeout [ 1053.204066][T13941] chnl_net:caif_netlink_parms(): no params data found [ 1053.497649][T13941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.505109][T13941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.512737][T13941] bridge_slave_0: entered allmulticast mode [ 1053.520275][T13941] bridge_slave_0: entered promiscuous mode [ 1053.580761][T13941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.588349][T13941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.596429][T13941] bridge_slave_1: entered allmulticast mode [ 1053.603875][T13941] bridge_slave_1: entered promiscuous mode [ 1053.876353][T13941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.922533][T13941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.010326][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.018725][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.202079][T13941] team0: Port device team_slave_0 added [ 1054.265932][T13941] team0: Port device team_slave_1 added [ 1055.065882][T11756] Bluetooth: hci1: command tx timeout [ 1055.165755][T13941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.273577][T13941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.373679][T13941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.424781][T14028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2448'. [ 1055.482317][ T7490] ------------[ cut here ]------------ [ 1055.488903][ T7490] WARNING: CPU: 0 PID: 7490 at net/mac80211/chan.c:2043 ieee80211_link_release_channel+0x154/0x180 [ 1055.500281][ T7490] Modules linked in: [ 1055.504313][ T7490] CPU: 0 PID: 7490 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 1055.511901][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1055.522142][ T7490] Workqueue: netns cleanup_net [ 1055.527080][ T7490] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 1055.534254][ T7490] Code: 7c 2d 00 00 74 08 48 89 df e8 28 ac c7 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 51 66 86 00 e8 9c a6 6e f7 <0f> 0b eb c5 48 c7 c1 2c 0d 8e 8f 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1055.554104][ T7490] RSP: 0018:ffffc90005457568 EFLAGS: 00010293 [ 1055.560205][ T7490] RAX: ffffffff8a192d44 RBX: ffff88805c56d5f8 RCX: ffff88804fed5a00 [ 1055.568489][ T7490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1055.576576][ T7490] RBP: 0000000000000000 R08: ffffffff8f8dd86f R09: 1ffffffff1f1bb0d [ 1055.584655][ T7490] R10: dffffc0000000000 R11: fffffbfff1f1bb0e R12: ffff88805c56ec68 [ 1055.593212][ T7490] R13: 1ffff1100b8adabf R14: ffff88805c56e420 R15: dffffc0000000000 [ 1055.601716][ T7490] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1055.610748][ T7490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1055.617678][ T7490] CR2: 0000001b32622ff8 CR3: 0000000061433000 CR4: 00000000003506f0 [ 1055.625778][ T7490] Call Trace: [ 1055.629073][ T7490] [ 1055.632425][ T7490] ? trace_drv_return_void+0x1c0/0x1c0 [ 1055.638211][ T7490] unregister_netdevice_many_notify+0x1357/0x1910 [ 1055.644727][ T7490] ? unregister_netdevice_many+0x20/0x20 [ 1055.650365][ T7490] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1055.656128][ T7490] ? __lock_acquire+0x7eb0/0x7eb0 [ 1055.661153][ T7490] unregister_netdevice_queue+0x2e9/0x330 [ 1055.666934][ T7490] ? list_netdevice+0x730/0x730 [ 1055.671803][ T7490] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1055.677599][ T7490] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 1055.683252][ T7490] ieee80211_remove_interfaces+0x4b3/0x690 [ 1055.689186][ T7490] ? ieee80211_do_stop+0x2030/0x2030 [ 1055.695138][ T7490] ? rcu_is_watching+0x15/0xb0 [ 1055.699939][ T7490] ieee80211_unregister_hw+0x5d/0x2a0 [ 1055.705681][ T7490] mac80211_hwsim_del_radio+0x289/0x480 [ 1055.711253][ T7490] ? rhashtable_remove_fast+0xc00/0xc00 [ 1055.716953][ T7490] hwsim_exit_net+0x58d/0x650 [ 1055.721675][ T7490] ? hwsim_init_net+0x90/0x90 [ 1055.726463][ T7490] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1055.732304][ T7490] cleanup_net+0x6f7/0xb00 [ 1055.736855][ T7490] ? ops_free_list+0x3b0/0x3b0 [ 1055.741890][ T7490] ? _raw_spin_unlock_irq+0x23/0x50 [ 1055.747249][ T7490] ? process_scheduled_works+0x975/0x1600 [ 1055.753002][ T7490] ? process_scheduled_works+0x975/0x1600 [ 1055.758857][ T7490] process_scheduled_works+0xa60/0x1600 [ 1055.764551][ T7490] ? worker_attach_to_pool+0x370/0x370 [ 1055.770049][ T7490] ? assign_work+0x3cc/0x5d0 [ 1055.775037][ T7490] worker_thread+0xa5e/0xfe0 [ 1055.779878][ T7490] kthread+0x2fa/0x390 [ 1055.784005][ T7490] ? pr_cont_work+0x550/0x550 [ 1055.788714][ T7490] ? kthread_blkcg+0xd0/0xd0 [ 1055.793372][ T7490] ret_from_fork+0x48/0x80 [ 1055.798367][ T7490] ? kthread_blkcg+0xd0/0xd0 [ 1055.802986][ T7490] ret_from_fork_asm+0x11/0x20 [ 1055.808152][ T7490] [ 1055.811231][ T7490] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1055.818521][ T7490] CPU: 0 PID: 7490 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 1055.826083][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1055.836152][ T7490] Workqueue: netns cleanup_net [ 1055.840944][ T7490] Call Trace: [ 1055.844246][ T7490] [ 1055.847186][ T7490] dump_stack_lvl+0x18c/0x250 [ 1055.851881][ T7490] ? show_regs_print_info+0x20/0x20 [ 1055.857107][ T7490] ? load_image+0x420/0x420 [ 1055.861652][ T7490] panic+0x2ca/0x720 [ 1055.865555][ T7490] ? bpf_jit_dump+0xd0/0xd0 [ 1055.870063][ T7490] ? ret_from_fork_asm+0x11/0x20 [ 1055.875000][ T7490] __warn+0x2e0/0x470 [ 1055.878972][ T7490] ? ieee80211_link_release_channel+0x154/0x180 [ 1055.885209][ T7490] ? ieee80211_link_release_channel+0x154/0x180 [ 1055.891442][ T7490] report_bug+0x2be/0x4f0 [ 1055.895766][ T7490] ? ieee80211_link_release_channel+0x154/0x180 [ 1055.902002][ T7490] ? ieee80211_link_release_channel+0x154/0x180 [ 1055.908251][ T7490] ? ieee80211_link_release_channel+0x156/0x180 [ 1055.914484][ T7490] handle_bug+0xcf/0x120 [ 1055.918727][ T7490] exc_invalid_op+0x1a/0x50 [ 1055.923234][ T7490] asm_exc_invalid_op+0x1a/0x20 [ 1055.928144][ T7490] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 1055.935015][ T7490] Code: 7c 2d 00 00 74 08 48 89 df e8 28 ac c7 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 51 66 86 00 e8 9c a6 6e f7 <0f> 0b eb c5 48 c7 c1 2c 0d 8e 8f 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1055.954628][ T7490] RSP: 0018:ffffc90005457568 EFLAGS: 00010293 [ 1055.960692][ T7490] RAX: ffffffff8a192d44 RBX: ffff88805c56d5f8 RCX: ffff88804fed5a00 [ 1055.968666][ T7490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1055.976629][ T7490] RBP: 0000000000000000 R08: ffffffff8f8dd86f R09: 1ffffffff1f1bb0d [ 1055.984593][ T7490] R10: dffffc0000000000 R11: fffffbfff1f1bb0e R12: ffff88805c56ec68 [ 1055.992556][ T7490] R13: 1ffff1100b8adabf R14: ffff88805c56e420 R15: dffffc0000000000 [ 1056.000534][ T7490] ? ieee80211_link_release_channel+0x154/0x180 [ 1056.006877][ T7490] ? ieee80211_link_release_channel+0x154/0x180 [ 1056.013118][ T7490] ? trace_drv_return_void+0x1c0/0x1c0 [ 1056.018591][ T7490] unregister_netdevice_many_notify+0x1357/0x1910 [ 1056.025023][ T7490] ? unregister_netdevice_many+0x20/0x20 [ 1056.030664][ T7490] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1056.036395][ T7490] ? __lock_acquire+0x7eb0/0x7eb0 [ 1056.041502][ T7490] unregister_netdevice_queue+0x2e9/0x330 [ 1056.047278][ T7490] ? list_netdevice+0x730/0x730 [ 1056.052211][ T7490] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1056.058036][ T7490] _cfg80211_unregister_wdev+0x16c/0x5a0 [ 1056.063677][ T7490] ieee80211_remove_interfaces+0x4b3/0x690 [ 1056.069509][ T7490] ? ieee80211_do_stop+0x2030/0x2030 [ 1056.074811][ T7490] ? rcu_is_watching+0x15/0xb0 [ 1056.079585][ T7490] ieee80211_unregister_hw+0x5d/0x2a0 [ 1056.084962][ T7490] mac80211_hwsim_del_radio+0x289/0x480 [ 1056.090509][ T7490] ? rhashtable_remove_fast+0xc00/0xc00 [ 1056.096063][ T7490] hwsim_exit_net+0x58d/0x650 [ 1056.100742][ T7490] ? hwsim_init_net+0x90/0x90 [ 1056.105416][ T7490] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1056.111245][ T7490] cleanup_net+0x6f7/0xb00 [ 1056.115657][ T7490] ? ops_free_list+0x3b0/0x3b0 [ 1056.120452][ T7490] ? _raw_spin_unlock_irq+0x23/0x50 [ 1056.125664][ T7490] ? process_scheduled_works+0x975/0x1600 [ 1056.131391][ T7490] ? process_scheduled_works+0x975/0x1600 [ 1056.137115][ T7490] process_scheduled_works+0xa60/0x1600 [ 1056.142678][ T7490] ? worker_attach_to_pool+0x370/0x370 [ 1056.148139][ T7490] ? assign_work+0x3cc/0x5d0 [ 1056.152733][ T7490] worker_thread+0xa5e/0xfe0 [ 1056.157339][ T7490] kthread+0x2fa/0x390 [ 1056.161400][ T7490] ? pr_cont_work+0x550/0x550 [ 1056.166078][ T7490] ? kthread_blkcg+0xd0/0xd0 [ 1056.170657][ T7490] ret_from_fork+0x48/0x80 [ 1056.175064][ T7490] ? kthread_blkcg+0xd0/0xd0 [ 1056.179644][ T7490] ret_from_fork_asm+0x11/0x20 [ 1056.184417][ T7490] [ 1056.187697][ T7490] Kernel Offset: disabled [ 1056.192099][ T7490] Rebooting in 86400 seconds..