last executing test programs: 3m34.088869449s ago: executing program 3 (id=64): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000003c0)={0x1d, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0x3, {}, 0xfe}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000100)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000007a40)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 3m33.580734172s ago: executing program 3 (id=65): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="010000000300"/18], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000000, 0x13, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) 3m33.240347021s ago: executing program 3 (id=69): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r1], 0x14) 3m32.292424565s ago: executing program 3 (id=73): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf2502202fc8", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22b96}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x2400c000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3m31.343698129s ago: executing program 3 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x144) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 3m30.228672766s ago: executing program 3 (id=85): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 3m15.099183168s ago: executing program 32 (id=85): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 7.199296868s ago: executing program 4 (id=1069): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f00000006c0)={[{@nodelalloc}, {@noblock_validity}, {@bh}, {@inlinecrypt}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9a, 0x4f4, &(0x7f0000000080)="$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") openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x400000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x1, 0x2, 0x7, 0x3110, 0x1, 0xe94}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 6.761402519s ago: executing program 0 (id=1072): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) 6.419989078s ago: executing program 0 (id=1075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x2a0280, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x4, 0x400, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000a80)={&(0x7f0000000ac0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b80)="27030200affd14000600002fb96d", 0xe}], 0x1, 0x0, 0x0, 0x1000000}, 0x4000) 5.051026812s ago: executing program 4 (id=1077): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x4a8e) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 4.75928628s ago: executing program 0 (id=1079): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000020, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@fat=@flush}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@fat=@check_normal}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@numtail}, {@shortname_win95}, {@uni_xlateno}, {@numtail}, {@fat=@errors_remount}, {@uni_xlate}, {@utf8no}, {@numtail}, {@uni_xlate}, {@rodir}, {@shortname_win95}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) setgroups(0x3, &(0x7f0000000080)=[r2, r2, r2]) socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) 4.495636767s ago: executing program 1 (id=1082): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 4.488402397s ago: executing program 0 (id=1083): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3c, r2, 0x1, 0x70ad2c, 0x3, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 4.298170331s ago: executing program 5 (id=1085): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000140)=0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2800884c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 3.840650783s ago: executing program 2 (id=1086): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r0, r0, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000200)=0x10000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="05", 0x1, 0x0, 0x0, 0x2}]) 3.544211891s ago: executing program 0 (id=1087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffef6, 0x10, 0x0, 0x3d}, 0x48) 3.481378372s ago: executing program 2 (id=1088): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x3004}], 0x1, 0x0, 0x0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.313954176s ago: executing program 4 (id=1089): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000000500)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) userfaultfd(0x1) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x85, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4840) landlock_restrict_self(0xffffffffffffffff, 0x8) 3.008714014s ago: executing program 5 (id=1091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x2a0280, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x4, 0x400, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000a80)={&(0x7f0000000ac0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b80)="27030200affd14000600002fb96d", 0xe}], 0x1, 0x0, 0x0, 0x1000000}, 0x4000) 2.900779907s ago: executing program 1 (id=1092): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 2.814936939s ago: executing program 5 (id=1093): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000020, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@fat=@flush}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@fat=@check_normal}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@numtail}, {@shortname_win95}, {@uni_xlateno}, {@numtail}, {@fat=@errors_remount}, {@uni_xlate}, {@utf8no}, {@numtail}, {@uni_xlate}, {@rodir}, {@shortname_win95}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$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") r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) setgroups(0x3, &(0x7f0000000080)=[r2, r2, r2]) socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) 2.813397769s ago: executing program 2 (id=1094): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18, 0xb, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x4, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}]}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000001a40)={0xb0, 0x0, 0x0, [{{0x2, 0x2, 0x7, 0x7fffffffffffffff, 0x4, 0x2, {0x3, 0x6, 0x4, 0x10001, 0x3, 0x9e41, 0x4, 0xfffffc00, 0xfff, 0x6000, 0x5, 0x0, 0x0, 0x2, 0x7ce}}, {0x0, 0x200, 0x7, 0x2, '\xce#{,}*\\'}}]}, 0xb0) newfstatat(0xffffffffffffff9c, &(0x7f00000062c0)='./file0\x00', 0x0, 0x6000) write$FUSE_DIRENTPLUS(r2, 0x0, 0x0) listxattr(&(0x7f0000001bc0)='./file0\x00', 0x0, 0x0) 2.648433343s ago: executing program 1 (id=1095): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x800, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 2.648292663s ago: executing program 2 (id=1096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x5) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000080)=0xd4) 2.545294636s ago: executing program 0 (id=1097): syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.745233716s ago: executing program 5 (id=1098): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r2, &(0x7f0000000100)={r1, r2}) 1.689224978s ago: executing program 4 (id=1099): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0xa) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1c8080, 0x81) getdents(r3, &(0x7f0000000200)=""/4096, 0x1000) 1.500643982s ago: executing program 2 (id=1100): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004340)="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", 0x2000, &(0x7f0000006340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006400)={0x20, 0x0, 0x8000000000000000, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000006440)={0x50, 0x0, r3, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x7, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000064c0)='./file0\x00', 0x101042, 0x10d) close(r2) read$dsp(r0, 0x0, 0x0) 1.358770546s ago: executing program 2 (id=1101): prlimit64(0x0, 0xe, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 1.267652898s ago: executing program 5 (id=1102): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 1.149804271s ago: executing program 4 (id=1103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) 1.147763031s ago: executing program 1 (id=1104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x2a0280, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x4, 0x400, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000a80)={&(0x7f0000000ac0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b80)="27030200affd14000600002fb96d", 0xe}], 0x1, 0x0, 0x0, 0x1000000}, 0x4000) 485.372798ms ago: executing program 1 (id=1105): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 126.423597ms ago: executing program 4 (id=1106): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x10800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x2, 0x195, &(0x7f0000002440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 1.59675ms ago: executing program 5 (id=1107): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x9e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0xab0b, 0x1) 0s ago: executing program 1 (id=1117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000500)="0802110000010802110000000800", 0xe) write(r4, &(0x7f0000000640)="c29b85f1f8c2b96bf0b77687c08d70", 0xf) kernel console output (not intermixed with test programs): 95.011151][ T4651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.044081][ T4656] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 95.159319][ T4656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.176499][ T4656] bond1: (slave lo): Enslaving as an active interface with an up link [ 95.197815][ T4656] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 95.214699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 96.005410][ T4665] process 'syz.1.84' launched './file1' with NULL argv: empty string added [ 97.242353][ T4681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 97.276274][ T4681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.940304][ T4681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.523981][ T4708] FAULT_INJECTION: forcing a failure. [ 98.523981][ T4708] name failslab, interval 1, probability 0, space 0, times 0 [ 98.551997][ T4708] CPU: 1 PID: 4708 Comm: syz.0.97 Not tainted syzkaller #0 [ 98.559260][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.569345][ T4708] Call Trace: [ 98.572640][ T4708] [ 98.575589][ T4708] dump_stack_lvl+0x188/0x24e [ 98.580309][ T4708] ? show_regs_print_info+0x12/0x12 [ 98.585537][ T4708] ? load_image+0x410/0x410 [ 98.590043][ T4708] ? __might_sleep+0xd0/0xd0 [ 98.594645][ T4708] ? __lock_acquire+0x7ea0/0x7ea0 [ 98.599675][ T4708] should_fail_ex+0x390/0x4c0 [ 98.604356][ T4708] should_failslab+0x5/0x20 [ 98.608855][ T4708] slab_pre_alloc_hook+0x59/0x300 [ 98.613876][ T4708] ? rcu_is_watching+0x11/0xa0 [ 98.618636][ T4708] ? __vb2_init_fileio+0x1a0/0xc60 [ 98.623742][ T4708] __kmem_cache_alloc_node+0x4f/0x270 [ 98.629111][ T4708] ? __vb2_init_fileio+0x1a0/0xc60 [ 98.634218][ T4708] kmalloc_trace+0x26/0xe0 [ 98.638628][ T4708] __vb2_init_fileio+0x1a0/0xc60 [ 98.643562][ T4708] ? mutex_lock_nested+0x10/0x10 [ 98.648513][ T4708] vb2_core_poll+0x5a4/0x7a0 [ 98.653100][ T4708] vb2_fop_poll+0x14b/0x310 [ 98.657605][ T4708] ? vb2_fop_read+0x340/0x340 [ 98.662299][ T4708] v4l2_poll+0x13d/0x2b0 [ 98.666539][ T4708] ? v4l2_write+0x2b0/0x2b0 [ 98.671040][ T4708] do_sys_poll+0x8d3/0x1270 [ 98.675556][ T4708] ? poll_select_finish+0x5d0/0x5d0 [ 98.680755][ T4708] ? __schedule+0x1087/0x4030 [ 98.685439][ T4708] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 98.691682][ T4708] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 98.697925][ T4708] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 98.704169][ T4708] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 98.710422][ T4708] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 98.716666][ T4708] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 98.722946][ T4708] ? set_user_sigmask+0xca/0x1c0 [ 98.727876][ T4708] ? sigprocmask+0x190/0x190 [ 98.732465][ T4708] __se_sys_ppoll+0x206/0x2a0 [ 98.737149][ T4708] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 98.743131][ T4708] ? __x64_sys_ppoll+0xc0/0xc0 [ 98.747897][ T4708] ? lockdep_hardirqs_on+0x94/0x140 [ 98.753097][ T4708] ? __x64_sys_ppoll+0x1c/0xc0 [ 98.757860][ T4708] do_syscall_64+0x4c/0xa0 [ 98.762272][ T4708] ? clear_bhb_loop+0x60/0xb0 [ 98.766948][ T4708] ? clear_bhb_loop+0x60/0xb0 [ 98.771617][ T4708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.777505][ T4708] RIP: 0033:0x7f225679e2d9 [ 98.781916][ T4708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.801518][ T4708] RSP: 002b:00007f2257738028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 98.809929][ T4708] RAX: ffffffffffffffda RBX: 00007f2256a25fa0 RCX: 00007f225679e2d9 [ 98.817896][ T4708] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 98.825864][ T4708] RBP: 00007f2256835888 R08: 0000000000000000 R09: 0000000000000000 [ 98.833828][ T4708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.841794][ T4708] R13: 00007f2256a26038 R14: 00007f2256a25fa0 R15: 00007ffe5122f848 [ 98.849775][ T4708] [ 99.214952][ T4723] netlink: 'syz.0.99': attribute type 11 has an invalid length. [ 99.805263][ T4741] Zero length message leads to an empty skb [ 100.000197][ T4744] capability: warning: `syz.0.104' uses 32-bit capabilities (legacy support in use) [ 100.017984][ T4744] loop0: detected capacity change from 0 to 256 [ 100.286260][ T4744] FAT-fs (loop0): IO charset is not found [ 104.008211][ T4786] xt_hashlimit: max too large, truncated to 1048576 [ 104.027860][ T4788] netlink: 'syz.0.118': attribute type 5 has an invalid length. [ 104.059549][ T4788] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.069045][ T4788] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.077829][ T4788] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.086720][ T4788] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.126837][ T4788] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.136021][ T4788] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.145015][ T4788] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.154004][ T4788] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.206437][ T4791] netlink: 'syz.0.118': attribute type 5 has an invalid length. [ 104.235230][ T4791] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.244308][ T4791] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.253171][ T4791] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.261948][ T4791] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.305184][ T4791] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.314789][ T4791] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.323744][ T4791] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.332675][ T4791] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.442272][ T4791] netlink: 'syz.0.118': attribute type 5 has an invalid length. [ 104.464390][ T4791] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.473264][ T4791] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.482082][ T4791] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.490818][ T4791] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.508437][ T4791] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.517459][ T4791] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.526459][ T4791] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.537526][ T4791] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.491858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 109.403558][ T4889] tipc: Started in network mode [ 109.408907][ T4889] tipc: Node identity 4, cluster identity 4711 [ 109.497976][ T4889] tipc: Node number set to 4 [ 110.701306][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 110.955247][ T4939] bond0: (slave bond_slave_0): Releasing backup interface [ 110.986965][ T4939] bond0: (slave bond_slave_1): Releasing backup interface [ 111.131776][ T4939] bond0: (slave dummy0): Enslaving as a backup interface with an up link [ 111.181396][ T4939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.181974][ T4325] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 111.192153][ T4946] loop2: detected capacity change from 0 to 1024 [ 111.230856][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 111.273304][ T4946] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.339775][ T4946] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 111.393395][ T4735] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 111.396501][ T4946] EXT4-fs (loop2): orphan cleanup on readonly fs [ 111.497683][ T4946] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 3: comm syz.2.163: lblock 3 mapped to illegal pblock 3 (length 1) [ 111.530571][ T4952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 111.572442][ T4946] Quota error (device loop2): write_blk: dquota write failed [ 111.579955][ T4946] Quota error (device loop2): find_free_dqentry: Can't write quota data block 3 [ 111.632144][ T4946] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 111.669048][ T4946] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.163: Failed to acquire dquot type 0 [ 111.701045][ T4946] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 3: comm syz.2.163: lblock 3 mapped to illegal pblock 3 (length 1) [ 111.734835][ T4946] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 111.757147][ T4946] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.163: Failed to acquire dquot type 0 [ 111.778456][ T4946] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.163: Freeing blocks not in datazone - block = 0, count = 4096 [ 111.836522][ T4946] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 3: comm syz.2.163: lblock 3 mapped to illegal pblock 3 (length 1) [ 112.734873][ T4946] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 112.787139][ T4946] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.163: Failed to acquire dquot type 0 [ 112.854863][ T4946] EXT4-fs (loop2): 1 orphan inode deleted [ 112.857117][ T4971] netlink: 'syz.4.168': attribute type 46 has an invalid length. [ 112.890841][ T4946] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 112.909436][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.920646][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.935940][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.960434][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.960780][ T4971] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 112.983622][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 112.990943][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.141289][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 113.160922][ T4735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.254709][ T4735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.493712][ T4735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.202803][ T4993] ip_tables: iptables: counters copy to user failed while replacing table [ 114.306633][ T4735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.422134][ T4972] chnl_net:caif_netlink_parms(): no params data found [ 114.751357][ T4972] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.834452][ T4972] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.852819][ T4972] device bridge_slave_0 entered promiscuous mode [ 114.961600][ T4972] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.970884][ T4972] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.999310][ T4972] device bridge_slave_1 entered promiscuous mode [ 115.012064][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 115.159837][ T4972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.210350][ T4972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.293525][ T4972] team0: Port device team_slave_0 added [ 115.321895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 116.191893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 116.201891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 116.211894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 116.221888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 116.231888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 116.392744][ T4972] team0: Port device team_slave_1 added [ 116.831882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 116.891882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 117.000057][ T4972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.091954][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 117.119537][ T4972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.366632][ T4972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.756416][ T5052] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.913357][ T4972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.002175][ T4972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.261981][ T4972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.773847][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 120.019550][ T4972] device hsr_slave_0 entered promiscuous mode [ 120.039242][ T4972] device hsr_slave_1 entered promiscuous mode [ 120.066690][ T4972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.108397][ T4972] Cannot create hsr debugfs directory [ 120.137523][ T5133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 120.342150][ T5137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.194'. [ 120.421589][ T5139] bond0: (slave dummy0): Removing an active aggregator [ 120.465297][ T5148] fuse: Bad value for 'fd' [ 120.468634][ T4373] bond0: Warning: Found an uninitialized port [ 120.479141][ T5139] bond0: (slave dummy0): Releasing backup interface [ 120.510035][ T5139] bridge1: port 1(dummy0) entered blocking state [ 120.537151][ T5139] bridge1: port 1(dummy0) entered disabled state [ 120.564082][ T5139] device dummy0 entered promiscuous mode [ 120.611716][ T5142] netlink: 'syz.0.194': attribute type 10 has an invalid length. [ 120.642523][ T5142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.194'. [ 120.662537][ T5142] bridge1: port 1(dummy0) entered blocking state [ 120.669101][ T5142] bridge1: port 1(dummy0) entered forwarding state [ 120.683523][ T5142] bridge1: port 1(dummy0) entered disabled state [ 121.340928][ T4735] device hsr_slave_0 left promiscuous mode [ 121.359244][ T4735] device hsr_slave_1 left promiscuous mode [ 121.381734][ T4735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.392268][ T4735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.408083][ T4735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.421930][ T4735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.462083][ T4735] device bridge_slave_1 left promiscuous mode [ 121.469739][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.504092][ T4735] device bridge_slave_0 left promiscuous mode [ 121.510336][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.613656][ T4735] device veth1_macvtap left promiscuous mode [ 121.620444][ T4735] device veth0_macvtap left promiscuous mode [ 121.652939][ T4735] device veth1_vlan left promiscuous mode [ 121.659111][ T4735] device veth0_vlan left promiscuous mode [ 121.823779][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 122.608884][ T4735] team0 (unregistering): Port device team_slave_1 removed [ 122.647180][ T4735] team0 (unregistering): Port device team_slave_0 removed [ 122.687297][ T4735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.724951][ T4735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.001525][ T4735] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 123.010795][ T4735] bond0 (unregistering): Released all slaves [ 123.017124][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 123.111487][ T4972] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.155644][ T4972] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.185227][ T4972] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.196602][ T4972] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.292982][ T4972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.321375][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.330246][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.347090][ T4972] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.360344][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.369536][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.381645][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.388824][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.403982][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.415826][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.433995][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.447307][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.454488][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.463974][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.489041][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.498229][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.511988][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.520800][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.532288][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.540930][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.550414][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.570770][ T4972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.583493][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.599939][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.618234][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.626948][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.876439][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.893005][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.906239][ T4972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.309158][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.324253][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.354965][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.365250][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.382694][ T4972] device veth0_vlan entered promiscuous mode [ 124.399374][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.407844][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.418049][ T4972] device veth1_vlan entered promiscuous mode [ 124.450303][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.460175][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.468527][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.478825][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.491325][ T4972] device veth0_macvtap entered promiscuous mode [ 124.503382][ T4972] device veth1_macvtap entered promiscuous mode [ 124.520168][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.532329][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.545086][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.559067][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.571379][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.589329][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.608648][ T4972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.617715][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.631984][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.640259][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.656602][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.669016][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.680062][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.691221][ T4972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.702125][ T4972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.715159][ T4972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.728529][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.740802][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.754259][ T4972] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.766991][ T4972] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.776075][ T4972] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.785363][ T4972] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.871283][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.882375][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.903033][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.919768][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.941460][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.952033][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.097601][ T5221] tipc: Started in network mode [ 125.112007][ T5221] tipc: Node identity ac14140f, cluster identity 4711 [ 125.130441][ T5221] tipc: New replicast peer: 255.255.255.255 [ 125.140841][ T5221] tipc: Enabled bearer , priority 10 [ 126.882507][ T130] tipc: Node number set to 2886997007 [ 126.952541][ T5237] ip_tables: iptables: counters copy to user failed while replacing table [ 127.960361][ T5262] netlink: 'syz.4.211': attribute type 1 has an invalid length. [ 128.126872][ T5262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.156501][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 128.199618][ T5264] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.208464][ T5264] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.217570][ T5264] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.226482][ T5264] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.286459][ T5265] bond1: (slave veth3): Enslaving as an active interface with a down link [ 129.295575][ T5268] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.303699][ T5268] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.329514][ T5269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 129.341423][ T5288] loop5: detected capacity change from 0 to 2048 [ 129.357097][ T5271] bond1: (slave veth0_to_bond): making interface the new active one [ 129.385077][ T5271] device veth0_to_bond entered promiscuous mode [ 129.422262][ T5271] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 129.437587][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 129.481956][ T5288] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 129.605716][ T5288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.629335][ T5153] udevd[5153]: symlink '../../loop5' '/dev/disk/by-diskseq/87.tmp-b7:5' failed: Read-only file system [ 129.694239][ T5153] udevd[5153]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system [ 129.755499][ T5153] udevd[5153]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system [ 129.765171][ T5294] netlink: 14 bytes leftover after parsing attributes in process `syz.0.223'. [ 129.984032][ T5153] udevd[5153]: symlink '../../loop5' '/dev/disk/by-diskseq/87.tmp-b7:5' failed: Read-only file system [ 130.024934][ T5153] udevd[5153]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system [ 130.066687][ T5153] udevd[5153]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system [ 130.168209][ T5153] udevd[5153]: symlink '../../loop5' '/dev/disk/by-diskseq/87.tmp-b7:5' failed: Read-only file system [ 130.229781][ T5311] netlink: 'syz.1.230': attribute type 1 has an invalid length. [ 130.242299][ T5153] udevd[5153]: symlink '../../loop5' '/dev/disk/by-diskseq/87.tmp-b7:5' failed: Read-only file system [ 130.430650][ T5316] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.441497][ T5316] bond2: (slave bond3): making interface the new active one [ 130.450387][ T5316] bond2: (slave bond3): Enslaving as an active interface with an up link [ 130.498590][ T5317] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 130.657953][ T5323] netlink: 32 bytes leftover after parsing attributes in process `syz.5.231'. [ 131.278589][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 132.694594][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.702204][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.915858][ T5384] netlink: 36 bytes leftover after parsing attributes in process `syz.2.247'. [ 133.823680][ T5403] FAULT_INJECTION: forcing a failure. [ 133.823680][ T5403] name failslab, interval 1, probability 0, space 0, times 0 [ 133.871481][ T5403] CPU: 1 PID: 5403 Comm: syz.2.252 Not tainted syzkaller #0 [ 133.879283][ T5403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.891046][ T5403] Call Trace: [ 133.894707][ T5403] [ 133.898902][ T5403] dump_stack_lvl+0x188/0x24e [ 133.904958][ T5403] ? show_regs_print_info+0x12/0x12 [ 133.910319][ T5403] ? load_image+0x410/0x410 [ 133.916200][ T5403] ? __might_sleep+0xd0/0xd0 [ 133.922240][ T5403] ? __lock_acquire+0x7ea0/0x7ea0 [ 133.929246][ T5403] ? ops_init+0x360/0x5e0 [ 133.933807][ T5403] ? copy_net_ns+0x33e/0x5b0 [ 133.938769][ T5403] should_fail_ex+0x390/0x4c0 [ 133.943899][ T5403] should_failslab+0x5/0x20 [ 133.948555][ T5403] slab_pre_alloc_hook+0x59/0x300 [ 133.954318][ T5403] ? fib_rules_register+0x2b/0x3f0 [ 133.960106][ T5403] __kmem_cache_alloc_node+0x4f/0x270 [ 133.966678][ T5403] ? fib_rules_register+0x2b/0x3f0 [ 133.972010][ T5403] __kmalloc_node_track_caller+0xa0/0x240 [ 133.977889][ T5403] kmemdup+0x27/0x60 [ 133.982360][ T5403] fib_rules_register+0x2b/0x3f0 [ 133.987351][ T5403] fib4_rules_init+0x1d/0x160 [ 133.992131][ T5403] fib_net_init+0x177/0x370 [ 133.996798][ T5403] ? __in_dev_get_rtnl+0xb0/0xb0 [ 134.002308][ T5403] ? _raw_spin_unlock+0x24/0x40 [ 134.009027][ T5403] ? __register_sysctl_table+0xe06/0xed0 [ 134.014712][ T5403] ? devinet_init_net+0x364/0x590 [ 134.019793][ T5403] ops_init+0x360/0x5e0 [ 134.024001][ T5403] setup_net+0x4f2/0xbd0 [ 134.028377][ T5403] ? copy_net_ns+0x5b0/0x5b0 [ 134.033015][ T5403] ? copy_net_ns+0x324/0x5b0 [ 134.037828][ T5403] ? down_read_killable+0x1cc/0x340 [ 134.043778][ T5403] copy_net_ns+0x33e/0x5b0 [ 134.048512][ T5403] create_new_namespaces+0x3ce/0x700 [ 134.053849][ T5403] unshare_nsproxy_namespaces+0x116/0x160 [ 134.059613][ T5403] ksys_unshare+0x4f6/0x8e0 [ 134.064162][ T5403] ? sighand_ctor+0x40/0x40 [ 134.068701][ T5403] ? lock_chain_count+0x20/0x20 [ 134.073606][ T5403] ? syscall_enter_from_user_mode+0x21/0x80 [ 134.079548][ T5403] __x64_sys_unshare+0x34/0x40 [ 134.084351][ T5403] do_syscall_64+0x4c/0xa0 [ 134.089262][ T5403] ? clear_bhb_loop+0x60/0xb0 [ 134.094017][ T5403] ? clear_bhb_loop+0x60/0xb0 [ 134.098832][ T5403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.104788][ T5403] RIP: 0033:0x7f701a79e2d9 [ 134.109505][ T5403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.129569][ T5403] RSP: 002b:00007f701b688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 134.138982][ T5403] RAX: ffffffffffffffda RBX: 00007f701aa25fa0 RCX: 00007f701a79e2d9 [ 134.147007][ T5403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 134.155016][ T5403] RBP: 00007f701a835888 R08: 0000000000000000 R09: 0000000000000000 [ 134.163020][ T5403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.171286][ T5403] R13: 00007f701aa26038 R14: 00007f701aa25fa0 R15: 00007ffd7388a858 [ 134.180446][ T5403] [ 134.429458][ T5420] netlink: 'syz.5.259': attribute type 10 has an invalid length. [ 134.440173][ T5420] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.448241][ T5420] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.476515][ T5420] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.483845][ T5420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.491282][ T5420] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.498587][ T5420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.516116][ T5420] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 135.997896][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 137.622689][ T5447] ip_tables: iptables: counters copy to user failed while replacing table [ 139.305698][ T5496] loop2: detected capacity change from 0 to 32768 [ 139.484428][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 139.965512][ T5530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.973388][ T5530] IPv6: NLM_F_CREATE should be set when creating new route [ 140.326493][ T5530] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.334062][ T5530] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.812648][ T5530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.495159][ T5530] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.510502][ T5530] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.521567][ T5530] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.541165][ T5530] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.707189][ T5563] loop5: detected capacity change from 0 to 16 [ 142.834411][ T5530] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.845737][ T5530] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.855706][ T5530] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.865326][ T5530] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.995937][ T5090] device veth0_to_bond left promiscuous mode [ 144.376453][ T5604] loop2: detected capacity change from 0 to 512 [ 144.449146][ T5604] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 144.511140][ T5609] FAULT_INJECTION: forcing a failure. [ 144.511140][ T5609] name failslab, interval 1, probability 0, space 0, times 0 [ 144.589544][ T5609] CPU: 0 PID: 5609 Comm: syz.5.304 Not tainted syzkaller #0 [ 144.596998][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.607366][ T5609] Call Trace: [ 144.610905][ T5609] [ 144.613877][ T5609] dump_stack_lvl+0x188/0x24e [ 144.618603][ T5609] ? show_regs_print_info+0x12/0x12 [ 144.624723][ T5609] ? load_image+0x410/0x410 [ 144.629433][ T5609] ? __lock_acquire+0x7ea0/0x7ea0 [ 144.634572][ T5609] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 144.640850][ T5609] ? __lock_acquire+0x7ea0/0x7ea0 [ 144.647307][ T5609] should_fail_ex+0x390/0x4c0 [ 144.652031][ T5609] should_failslab+0x5/0x20 [ 144.656553][ T5609] slab_pre_alloc_hook+0x59/0x300 [ 144.661755][ T5609] ? _raw_spin_unlock_irq+0x2a/0x40 [ 144.667053][ T5609] ? alloc_mnt_ns+0xaf/0x3b0 [ 144.671646][ T5609] __kmem_cache_alloc_node+0x4f/0x270 [ 144.677034][ T5609] ? alloc_mnt_ns+0xaf/0x3b0 [ 144.682074][ T5609] kmalloc_trace+0x26/0xe0 [ 144.686607][ T5609] alloc_mnt_ns+0xaf/0x3b0 [ 144.691264][ T5609] __se_sys_fsmount+0x5ac/0x9a0 [ 144.696139][ T5609] ? __x64_sys_fsmount+0x80/0x80 [ 144.701118][ T5609] ? lockdep_hardirqs_on+0x94/0x140 [ 144.706415][ T5609] do_syscall_64+0x4c/0xa0 [ 144.710905][ T5609] ? clear_bhb_loop+0x60/0xb0 [ 144.716474][ T5609] ? clear_bhb_loop+0x60/0xb0 [ 144.721262][ T5609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.727340][ T5609] RIP: 0033:0x7f9652d9e2d9 [ 144.732408][ T5609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.752747][ T5609] RSP: 002b:00007f9650ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 144.761341][ T5609] RAX: ffffffffffffffda RBX: 00007f9653025fa0 RCX: 00007f9652d9e2d9 [ 144.769859][ T5609] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 144.777834][ T5609] RBP: 00007f9652e35888 R08: 0000000000000000 R09: 0000000000000000 [ 144.785809][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.793972][ T5609] R13: 00007f9653026038 R14: 00007f9653025fa0 R15: 00007ffc4f3867d8 [ 144.801988][ T5609] [ 144.813930][ T5614] ip_tables: iptables: counters copy to user failed while replacing table [ 145.611323][ T5643] mmap: syz.4.312 (5643) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.595550][ T5677] device lo left promiscuous mode [ 146.608449][ T5677] device tunl0 left promiscuous mode [ 146.622127][ T5677] device gre0 left promiscuous mode [ 146.627661][ T5677] device gretap0 left promiscuous mode [ 146.653579][ T5677] device erspan0 left promiscuous mode [ 146.677793][ T5677] device ip_vti0 left promiscuous mode [ 146.704386][ T5677] device ip6_vti0 left promiscuous mode [ 146.732181][ T5677] device sit0 left promiscuous mode [ 146.751223][ T5677] device ip6tnl0 left promiscuous mode [ 146.772944][ T5677] device ip6gre0 left promiscuous mode [ 146.795617][ T5677] device ip6gretap0 left promiscuous mode [ 146.822128][ T5677] device bridge0 left promiscuous mode [ 146.828054][ T5677] device vcan0 left promiscuous mode [ 146.852434][ T5677] device bond0 left promiscuous mode [ 146.868468][ T5677] device team0 left promiscuous mode [ 146.884078][ T5677] device dummy0 left promiscuous mode [ 146.920141][ T5677] device nlmon0 left promiscuous mode [ 146.942873][ T5677] device caif0 left promiscuous mode [ 146.949430][ T5677] device batadv0 left promiscuous mode [ 146.966580][ T5677] device veth0 left promiscuous mode [ 146.989675][ T5677] device veth1 left promiscuous mode [ 147.012320][ T5677] device wg0 left promiscuous mode [ 147.047669][ T5677] device wg1 left promiscuous mode [ 147.062299][ T5677] device wg2 left promiscuous mode [ 147.068595][ T5677] device veth0_to_bridge left promiscuous mode [ 147.080858][ T5677] device veth1_to_bridge left promiscuous mode [ 147.087506][ T5677] device veth0_to_bond left promiscuous mode [ 147.103746][ T5677] device bond_slave_0 left promiscuous mode [ 147.113541][ T5677] device veth1_to_bond left promiscuous mode [ 147.120374][ T5677] device bond_slave_1 left promiscuous mode [ 147.127191][ T5677] device veth0_to_team left promiscuous mode [ 147.134116][ T5677] device team_slave_0 left promiscuous mode [ 147.140872][ T5677] device veth1_to_team left promiscuous mode [ 147.147210][ T5677] device team_slave_1 left promiscuous mode [ 147.162191][ T5677] device veth0_to_batadv left promiscuous mode [ 147.182374][ T5677] device batadv_slave_0 left promiscuous mode [ 147.199119][ T5677] device veth1_to_batadv left promiscuous mode [ 147.216450][ T5677] device batadv_slave_1 left promiscuous mode [ 147.238595][ T5677] device xfrm0 left promiscuous mode [ 147.256786][ T5677] device veth0_to_hsr left promiscuous mode [ 147.276658][ T5677] device veth1_to_hsr left promiscuous mode [ 147.300416][ T5677] device hsr0 left promiscuous mode [ 147.325248][ T5677] device veth1_virt_wifi left promiscuous mode [ 147.344032][ T5677] device veth0_virt_wifi left promiscuous mode [ 147.363323][ T5677] device virt_wifi0 left promiscuous mode [ 147.383019][ T5677] device vlan0 left promiscuous mode [ 147.388610][ T5677] device vlan1 left promiscuous mode [ 147.396359][ T5677] device macvlan0 left promiscuous mode [ 147.402373][ T5677] device macvlan1 left promiscuous mode [ 147.408137][ T5677] device ipvlan0 left promiscuous mode [ 147.414769][ T5677] device ipvlan1 left promiscuous mode [ 147.420558][ T5677] device macvtap0 left promiscuous mode [ 147.427022][ T5677] device macsec0 left promiscuous mode [ 147.432740][ T5677] device geneve0 left promiscuous mode [ 147.438972][ T5677] device geneve1 left promiscuous mode [ 147.445015][ T5677] device netdevsim0 left promiscuous mode [ 147.451078][ T5677] device netdevsim1 left promiscuous mode [ 147.457889][ T5677] device netdevsim2 left promiscuous mode [ 147.464150][ T5677] device netdevsim3 left promiscuous mode [ 147.470559][ T5677] device wlan0 left promiscuous mode [ 147.476631][ T5677] device wlan1 left promiscuous mode [ 147.485567][ T5696] netlink: 1355 bytes leftover after parsing attributes in process `syz.1.322'. [ 147.622860][ T5707] tipc: Failed to remove unknown binding: 66,0,0/4:1780060621/1780060623 [ 147.649491][ T5707] tipc: Failed to remove unknown binding: 66,0,0/4:1780060621/1780060622 [ 147.676760][ T5713] tipc: Failed to remove unknown binding: 66,0,0/4:1780060621/1780060622 [ 147.713827][ T5713] tipc: Failed to remove unknown binding: 66,0,0/4:1780060621/1780060623 [ 147.725795][ T5712] futex_wake_op: syz.1.330 tries to shift op by 144; fix this program [ 147.767040][ T5713] tipc: Failed to remove unknown binding: 66,0,0/4:1780060621/1780060622 [ 147.787534][ T5715] capability: warning: `syz.0.331' uses deprecated v2 capabilities in a way that may be insecure [ 148.142754][ T4278] Bluetooth: Wrong link type (-22) [ 148.276699][ T5735] FAULT_INJECTION: forcing a failure. [ 148.276699][ T5735] name failslab, interval 1, probability 0, space 0, times 0 [ 148.299592][ T5735] CPU: 1 PID: 5735 Comm: syz.2.338 Not tainted syzkaller #0 [ 148.306954][ T5735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.318733][ T5735] Call Trace: [ 148.322261][ T5735] [ 148.325271][ T5735] dump_stack_lvl+0x188/0x24e [ 148.330105][ T5735] ? show_regs_print_info+0x12/0x12 [ 148.335364][ T5735] ? load_image+0x410/0x410 [ 148.340097][ T5735] ? __lock_acquire+0x7ea0/0x7ea0 [ 148.345533][ T5735] should_fail_ex+0x390/0x4c0 [ 148.350275][ T5735] should_failslab+0x5/0x20 [ 148.355028][ T5735] slab_pre_alloc_hook+0x59/0x300 [ 148.360361][ T5735] kmem_cache_alloc+0x56/0x2f0 [ 148.365599][ T5735] ? security_inode_alloc+0x30/0x110 [ 148.371978][ T5735] security_inode_alloc+0x30/0x110 [ 148.377135][ T5735] inode_init_always+0x910/0xc90 [ 148.382226][ T5735] new_inode_pseudo+0x91/0x1c0 [ 148.387078][ T5735] alloc_anon_inode+0x1b/0x300 [ 148.392717][ T5735] __anon_inode_getfile+0x141/0x350 [ 148.397960][ T5735] ? anon_inode_getfile+0x1a0/0x1a0 [ 148.403317][ T5735] ? __might_fault+0xa6/0x120 [ 148.408050][ T5735] ? __might_fault+0xc2/0x120 [ 148.412778][ T5735] ? __might_fault+0xa6/0x120 [ 148.417762][ T5735] io_uring_create+0x8ae/0xd6c [ 148.422563][ T5735] __x64_sys_io_uring_setup+0x21b/0x230 [ 148.429206][ T5735] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 148.435307][ T5735] ? lockdep_hardirqs_on+0x94/0x140 [ 148.440601][ T5735] do_syscall_64+0x4c/0xa0 [ 148.445174][ T5735] ? clear_bhb_loop+0x60/0xb0 [ 148.450429][ T5735] ? clear_bhb_loop+0x60/0xb0 [ 148.455607][ T5735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.461722][ T5735] RIP: 0033:0x7f701a79e2d9 [ 148.466261][ T5735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.487728][ T5735] RSP: 002b:00007f701b687fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 148.496457][ T5735] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f701a79e2d9 [ 148.505204][ T5735] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000020 [ 148.513301][ T5735] RBP: 00007f701a835888 R08: 0000000000000000 R09: 0000000000000000 [ 148.521912][ T5735] R10: 0000200000000740 R11: 0000000000000206 R12: 0000200000000000 [ 148.529957][ T5735] R13: 0000200000000740 R14: 00002000000000c0 R15: 00007ffd7388a858 [ 148.538076][ T5735] [ 149.344416][ T5763] netlink: 'syz.5.348': attribute type 1 has an invalid length. [ 149.450777][ T5763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.472729][ T5766] device bridge_slave_0 left promiscuous mode [ 149.496070][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.578582][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.590889][ T5768] bond1: (slave team0): Enslaving as a backup interface with an up link [ 149.601250][ T5769] device bridge_slave_1 left promiscuous mode [ 149.608012][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.749598][ T5763] bond0: (slave bridge0): Releasing backup interface [ 149.791678][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.799877][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.866216][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.898481][ T5763] bond1: (slave team0): Removing an active aggregator [ 149.921533][ T5763] bond1: (slave team0): Releasing backup interface [ 149.962948][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.992599][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.015637][ T5763] device bridge_slave_0 left promiscuous mode [ 150.028917][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.079395][ T5763] device bridge_slave_1 left promiscuous mode [ 150.102567][ T5788] overlayfs: failed to clone lowerpath [ 150.110089][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.190096][ T5763] bond0: (slave bond_slave_0): Releasing backup interface [ 150.462869][ T5763] bond0: (slave bond_slave_1): Releasing backup interface [ 150.977107][ T5763] team0: Port device team_slave_0 removed [ 150.997229][ T5763] team0: Port device team_slave_1 removed [ 151.034359][ T5763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.064266][ T5763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.095787][ T5763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.117254][ T5763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.444048][ T5813] netlink: 'syz.5.361': attribute type 1 has an invalid length. [ 151.555137][ T5813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.631296][ T5816] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 151.685805][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 151.845256][ T5822] loop2: detected capacity change from 0 to 512 [ 151.878289][ T5822] EXT4-fs (loop2): Test dummy encryption mode enabled [ 152.017550][ T5822] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 152.383547][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 153.142056][ T5859] nftables ruleset with unbound set [ 154.357383][ T5863] loop5: detected capacity change from 0 to 1024 [ 154.414458][ T5863] EXT4-fs: Ignoring removed orlov option [ 154.420176][ T5863] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.523007][ T5863] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 154.545631][ T5872] bond0 speed is unknown, defaulting to 1000 [ 154.628263][ T5872] bond0 speed is unknown, defaulting to 1000 [ 154.709941][ T5872] bond0 speed is unknown, defaulting to 1000 [ 154.797018][ T5874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.372'. [ 155.001000][ T5879] netlink: 48 bytes leftover after parsing attributes in process `syz.0.373'. [ 155.128561][ T5872] infiniband syz2: set down [ 155.136296][ T4315] bond0 speed is unknown, defaulting to 1000 [ 155.161485][ T5872] infiniband syz2: added bond0 [ 155.169603][ T4972] EXT4-fs (loop5): unmounting filesystem. [ 155.330232][ T5872] RDS/IB: syz2: added [ 155.335696][ T5872] smc: adding ib device syz2 with port count 1 [ 155.346987][ T5872] smc: ib device syz2 port 1 has pnetid [ 155.356169][ T4318] bond0 speed is unknown, defaulting to 1000 [ 155.371119][ T5872] bond0 speed is unknown, defaulting to 1000 [ 155.705462][ T5872] bond0 speed is unknown, defaulting to 1000 [ 156.107083][ T5872] bond0 speed is unknown, defaulting to 1000 [ 156.961028][ T5908] loop2: detected capacity change from 0 to 256 [ 157.291251][ T5872] bond0 speed is unknown, defaulting to 1000 [ 157.673993][ T5935] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(1357119492.32662.0), cmd(2) [ 157.748790][ T5872] bond0 speed is unknown, defaulting to 1000 [ 158.384856][ T4377] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 158.606548][ T4377] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 158.623851][ T4377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.648631][ T4377] usb 6-1: Product: syz [ 158.659129][ T4377] usb 6-1: Manufacturer: syz [ 158.668776][ T4377] usb 6-1: SerialNumber: syz [ 158.910710][ T4377] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 158.945326][ T4377] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 160.099433][ T5988] netlink: 'syz.1.399': attribute type 1 has an invalid length. [ 160.190582][ T4377] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 160.244162][ T5990] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 160.303881][ T5993] netlink: 'syz.4.400': attribute type 10 has an invalid length. [ 160.413388][ T5993] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 160.413986][ T4377] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 160.453548][ T5996] netlink: 'syz.4.400': attribute type 4 has an invalid length. [ 160.484996][ T5996] netlink: 156 bytes leftover after parsing attributes in process `syz.4.400'. [ 160.491238][ T4377] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 160.515920][ T5996] wlan1: mtu less than device minimum [ 160.530484][ T4377] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 160.556681][ T4377] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 160.559547][ T5988] device macvlan2 entered promiscuous mode [ 160.600957][ T4377] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 160.627000][ T4377] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 160.633057][ T5988] device bond4 entered promiscuous mode [ 160.640275][ T4377] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 160.673171][ T4377] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 160.675471][ T5988] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 160.705280][ T4377] lan78xx: probe of 6-1:1.0 failed with error -71 [ 160.724961][ T5988] device bond4 left promiscuous mode [ 160.744640][ T4377] usb 6-1: USB disconnect, device number 2 [ 161.733517][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.017211][ T6031] loop5: detected capacity change from 0 to 512 [ 162.515422][ T6031] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 162.715699][ T6031] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.068199][ T4972] EXT4-fs (loop5): unmounting filesystem. [ 163.261567][ T6060] loop5: detected capacity change from 0 to 512 [ 163.390146][ T6060] device ip6gre1 entered promiscuous mode [ 163.533423][ T6060] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.382401][ T4381] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.408374][ T4381] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.446405][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.461449][ T6077] batman_adv: batadv0: Adding interface: veth0 [ 164.477791][ T6077] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.496505][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.418'. [ 164.523257][ T6077] batman_adv: batadv0: Interface activated: veth0 [ 164.618803][ T6089] batman_adv: batadv0: Interface deactivated: veth0 [ 164.717012][ T6089] batman_adv: batadv0: Removing interface: veth0 [ 164.830571][ T6090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.422'. [ 164.932224][ T4381] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.172480][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.267520][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.280959][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.720332][ T6112] net_ratelimit: 3 callbacks suppressed [ 165.720342][ T6112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.318878][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.177497][ T6229] netlink: 'syz.5.453': attribute type 49 has an invalid length. [ 171.399743][ T6229] device veth0_to_bond entered promiscuous mode [ 173.471589][ T6278] xt_socket: unknown flags 0x4 [ 175.354317][ T6302] loop2: detected capacity change from 0 to 40427 [ 175.457834][ T6302] F2FS-fs (loop2): Found nat_bits in checkpoint [ 175.774975][ T6302] F2FS-fs (loop2): Start checkpoint disabled! [ 176.080736][ T6302] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 176.211989][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.991160][ T6334] bond0 speed is unknown, defaulting to 1000 [ 177.571851][ C0] sched: RT throttling activated [ 177.709127][ T6342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.473'. [ 177.898873][ T5096] kworker/u4:22: attempt to access beyond end of device [ 177.898873][ T5096] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 177.926248][ T6348] netlink: 'syz.1.477': attribute type 1 has an invalid length. [ 177.940406][ T6348] netlink: 'syz.1.477': attribute type 4 has an invalid length. [ 177.977482][ T6348] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.477'. [ 178.020577][ T6352] netlink: 'syz.1.477': attribute type 1 has an invalid length. [ 178.042236][ T6352] netlink: 'syz.1.477': attribute type 4 has an invalid length. [ 178.067772][ T6352] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.477'. [ 178.430134][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 178.440372][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 178.448042][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.458112][ T4286] Workqueue: hci4 hci_rx_work [ 178.462898][ T4286] Call Trace: [ 178.466198][ T4286] [ 178.469134][ T4286] dump_stack_lvl+0x188/0x24e [ 178.473825][ T4286] ? show_regs_print_info+0x12/0x12 [ 178.479084][ T4286] ? load_image+0x410/0x410 [ 178.483649][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 178.488787][ T4286] ? __lock_acquire+0x7ea0/0x7ea0 [ 178.493821][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 178.498504][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 178.503708][ T4286] kobject_add_internal+0x617/0xca0 [ 178.508926][ T4286] kobject_add+0x160/0x230 [ 178.513353][ T4286] ? kobject_init+0x1c0/0x1c0 [ 178.518041][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 178.523510][ T4286] ? klist_children_get+0x50/0x50 [ 178.528541][ T4286] ? get_device_parent+0x121/0x3e0 [ 178.533663][ T4286] device_add+0x470/0x1050 [ 178.538092][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 178.543037][ T4286] hci_sync_conn_complete_evt+0x707/0xab0 [ 178.548772][ T4286] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 178.554753][ T4286] hci_event_packet+0x806/0x1290 [ 178.559702][ T4286] ? lock_chain_count+0x20/0x20 [ 178.564563][ T4286] ? bis_list+0x280/0x280 [ 178.569722][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 178.575638][ T4286] ? kcov_remote_start+0x50f/0x810 [ 178.580758][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 178.585962][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 178.591165][ T4286] hci_rx_work+0x3eb/0xd40 [ 178.595585][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 178.600443][ T4286] ? process_one_work+0x7b4/0x1160 [ 178.605555][ T4286] process_one_work+0x8ab/0x1160 [ 178.610508][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 178.616146][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 178.621170][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 178.626718][ T4286] ? wq_worker_running+0x97/0x190 [ 178.631742][ T4286] worker_thread+0xaf5/0x12a0 [ 178.636446][ T4286] kthread+0x29d/0x330 [ 178.640511][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 178.645538][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 178.650134][ T4286] ret_from_fork+0x1f/0x30 [ 178.654649][ T4286] [ 178.668289][ T4286] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 178.682118][ T4286] Bluetooth: hci4: failed to register connection device [ 179.167463][ T6374] loop5: detected capacity change from 0 to 1024 [ 180.020867][ T6383] FAULT_INJECTION: forcing a failure. [ 180.020867][ T6383] name failslab, interval 1, probability 0, space 0, times 0 [ 180.057273][ T6383] CPU: 0 PID: 6383 Comm: syz.5.487 Not tainted syzkaller #0 [ 180.064632][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.074710][ T6383] Call Trace: [ 180.077990][ T6383] [ 180.080935][ T6383] dump_stack_lvl+0x188/0x24e [ 180.085625][ T6383] ? show_regs_print_info+0x12/0x12 [ 180.090826][ T6383] ? load_image+0x410/0x410 [ 180.095334][ T6383] ? __might_sleep+0xd0/0xd0 [ 180.099926][ T6383] ? __lock_acquire+0x7ea0/0x7ea0 [ 180.104988][ T6383] ? key_task_permission+0x360/0x4a0 [ 180.110286][ T6383] should_fail_ex+0x390/0x4c0 [ 180.114984][ T6383] should_failslab+0x5/0x20 [ 180.119502][ T6383] slab_pre_alloc_hook+0x59/0x300 [ 180.124553][ T6383] ? x509_cert_parse+0x57/0x7a0 [ 180.129693][ T6383] __kmem_cache_alloc_node+0x4f/0x270 [ 180.135070][ T6383] ? x509_cert_parse+0x57/0x7a0 [ 180.139927][ T6383] kmalloc_trace+0x26/0xe0 [ 180.144350][ T6383] x509_cert_parse+0x57/0x7a0 [ 180.149065][ T6383] x509_key_preparse+0x60/0x660 [ 180.153915][ T6383] ? down_read+0x1a8/0x2d0 [ 180.158336][ T6383] asymmetric_key_preparse+0xa5/0x140 [ 180.163709][ T6383] key_create_or_update+0x432/0xa40 [ 180.168913][ T6383] ? security_key_permission+0x7c/0xa0 [ 180.174376][ T6383] ? key_type_put+0x20/0x20 [ 180.178901][ T6383] ? lookup_user_key_possessed+0x40/0x40 [ 180.184545][ T6383] ? __might_fault+0xc2/0x120 [ 180.189223][ T6383] ? __might_fault+0xa6/0x120 [ 180.194072][ T6383] __se_sys_add_key+0x34b/0x410 [ 180.198959][ T6383] ? __x64_sys_add_key+0xc0/0xc0 [ 180.203918][ T6383] ? lockdep_hardirqs_on+0x94/0x140 [ 180.209125][ T6383] ? __x64_sys_add_key+0x1c/0xc0 [ 180.214071][ T6383] do_syscall_64+0x4c/0xa0 [ 180.218490][ T6383] ? clear_bhb_loop+0x60/0xb0 [ 180.223375][ T6383] ? clear_bhb_loop+0x60/0xb0 [ 180.228259][ T6383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.234167][ T6383] RIP: 0033:0x7f9652d9e2d9 [ 180.238788][ T6383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.258424][ T6383] RSP: 002b:00007f9650ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 180.266843][ T6383] RAX: ffffffffffffffda RBX: 00007f9653025fa0 RCX: 00007f9652d9e2d9 [ 180.274834][ T6383] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 180.282812][ T6383] RBP: 00007f9652e35888 R08: 000000003036c0cc R09: 0000000000000000 [ 180.290797][ T6383] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 180.298766][ T6383] R13: 00007f9653026038 R14: 00007f9653025fa0 R15: 00007ffc4f3867d8 [ 180.306753][ T6383] [ 180.451936][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 180.620056][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 180.722059][ T6391] device bond2 entered promiscuous mode [ 180.757378][ T6391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.910824][ T6397] device erspan1 entered promiscuous mode [ 180.959205][ T6397] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 180.981770][ T6411] loop5: detected capacity change from 0 to 256 [ 181.007422][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 181.022629][ T6411] exfat: Deprecated parameter 'namecase' [ 181.061895][ T6411] exfat: Deprecated parameter 'namecase' [ 181.088881][ T6411] exfat: Deprecated parameter 'namecase' [ 181.181974][ T6411] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 181.271099][ T27] audit: type=1800 audit(1791888945.179:3): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.495" name="file0" dev="loop5" ino=1048646 res=0 errno=0 [ 181.318299][ T6418] tipc: Started in network mode [ 181.333924][ T6418] tipc: Node identity ac14140f, cluster identity 4711 [ 181.402103][ T6418] tipc: New replicast peer: 255.255.255.255 [ 181.450958][ T6418] tipc: Enabled bearer , priority 10 [ 181.819791][ T6435] loop5: detected capacity change from 0 to 512 [ 183.092106][ T4318] tipc: Node number set to 2886997007 [ 184.760893][ T6473] loop5: detected capacity change from 0 to 512 [ 185.127462][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.186328][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.998999][ T6456] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.008799][ T6456] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.031129][ T6456] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.043517][ T6456] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.316405][ T6469] tipc: Started in network mode [ 186.321346][ T6469] tipc: Node identity ac14140f, cluster identity 4711 [ 186.352279][ T6469] tipc: New replicast peer: 255.255.255.255 [ 186.372935][ T6469] tipc: Enabled bearer , priority 10 [ 186.380726][ T6473] netlink: 1 bytes leftover after parsing attributes in process `syz.5.514'. [ 186.409911][ T6474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.417250][ T6474] IPv6: NLM_F_CREATE should be set when creating new route [ 186.625292][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 186.711321][ T6489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.722389][ T6491] bridge1: port 1(dummy0) entered blocking state [ 186.728830][ T6491] bridge1: port 1(dummy0) entered disabled state [ 186.827576][ T6491] device dummy0 entered promiscuous mode [ 186.883230][ T6485] netlink: 'syz.2.517': attribute type 10 has an invalid length. [ 186.914118][ T6485] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 186.941459][ T6485] bridge1: port 1(dummy0) entered blocking state [ 186.947960][ T6485] bridge1: port 1(dummy0) entered forwarding state [ 186.979746][ T6485] bridge1: port 1(dummy0) entered disabled state [ 187.002725][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 187.046576][ T6500] bridge2: port 1(veth3) entered blocking state [ 187.059898][ T6500] bridge2: port 1(veth3) entered disabled state [ 187.068345][ T6500] device veth3 entered promiscuous mode [ 187.124920][ T6503] bridge2: port 2(veth5) entered blocking state [ 187.143696][ T6503] bridge2: port 2(veth5) entered disabled state [ 187.151229][ T6503] device veth5 entered promiscuous mode [ 187.492100][ T4377] tipc: Node number set to 2886997007 [ 188.156131][ T4377] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 188.343808][ T4377] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 188.496120][ T4377] usb 6-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 188.584042][ T4377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 188.750542][ T4377] usb 6-1: Product: syz [ 188.839539][ T4377] usb 6-1: Manufacturer: syz [ 189.136340][ T4377] hso 6-1:1.0: Can't find INT IN endpoint [ 189.273423][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 189.372077][ T4377] usb 6-1: USB disconnect, device number 3 [ 189.388217][ T6549] bridge0: port 1(dummy0) entered blocking state [ 189.405263][ T6549] bridge0: port 1(dummy0) entered disabled state [ 189.424524][ T6549] device dummy0 entered promiscuous mode [ 189.461378][ T6547] netlink: 'syz.4.535': attribute type 10 has an invalid length. [ 189.480155][ T6547] netlink: 40 bytes leftover after parsing attributes in process `syz.4.535'. [ 189.570990][ T6547] bridge0: port 1(dummy0) entered blocking state [ 189.577746][ T6547] bridge0: port 1(dummy0) entered forwarding state [ 189.648828][ T6547] bridge0: port 1(dummy0) entered disabled state [ 190.463020][ T6564] netlink: 'syz.0.540': attribute type 1 has an invalid length. [ 190.538060][ T6569] loop5: detected capacity change from 0 to 2048 [ 190.619262][ T6569] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 190.628695][ T6570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.636858][ T6570] bond1: (slave bond2): making interface the new active one [ 190.644732][ T6570] bond1: (slave bond2): Enslaving as an active interface with an up link [ 190.657317][ T6569] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.689787][ T6564] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 190.933201][ T6566] EXT4-fs (loop5): unmounting filesystem. [ 191.295460][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.551'. [ 191.362622][ T6601] bridge1: port 1(dummy0) entered blocking state [ 191.384301][ T6601] bridge1: port 1(dummy0) entered disabled state [ 191.398922][ T6601] device dummy0 entered promiscuous mode [ 191.406670][ T6603] netlink: 'syz.5.551': attribute type 10 has an invalid length. [ 191.434681][ T6603] netlink: 40 bytes leftover after parsing attributes in process `syz.5.551'. [ 191.448793][ T6603] bridge1: port 1(dummy0) entered blocking state [ 191.455330][ T6603] bridge1: port 1(dummy0) entered forwarding state [ 191.468696][ T6603] bridge1: port 1(dummy0) entered disabled state [ 191.628601][ T6611] device syzkaller0 entered promiscuous mode [ 192.212063][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.811586][ T6626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.834702][ T6626] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.861212][ T6626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.707741][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.566'. [ 193.802860][ T6643] bridge1: port 1(dummy0) entered blocking state [ 193.827422][ T6643] bridge1: port 1(dummy0) entered disabled state [ 193.873140][ T6643] device dummy0 entered promiscuous mode [ 193.921080][ T6646] netlink: 'syz.1.566': attribute type 10 has an invalid length. [ 194.116471][ T6646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.566'. [ 194.136707][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.152644][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.719780][ T6646] bridge1: port 1(dummy0) entered blocking state [ 194.726433][ T6646] bridge1: port 1(dummy0) entered forwarding state [ 194.771265][ T6646] bridge1: port 1(dummy0) entered disabled state [ 196.053455][ T6678] binder: 6677:6678 ioctl c0306201 2000000002c0 returned -14 [ 196.212079][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 196.218163][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 196.224329][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 196.519736][ T6692] CIFS: Attempting to mount \\127.0.0.1\share [ 196.557865][ T6689] loop5: detected capacity change from 0 to 1024 [ 196.611999][ T6696] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 196.651093][ T6696] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 196.657909][ T6689] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 196.687808][ T6689] EXT4-fs (loop5): orphan cleanup on readonly fs [ 196.784616][ T6689] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.581: Freeing blocks not in datazone - block = 0, count = 4096 [ 196.871084][ T6689] EXT4-fs (loop5): 1 orphan inode deleted [ 196.920034][ T6689] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 197.202658][ T4972] EXT4-fs (loop5): unmounting filesystem. [ 197.344974][ T6692] CIFS: VFS: cifs_mount failed w/return code = -112 [ 197.942063][ T4320] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 197.967625][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 198.132320][ T4320] usb 6-1: device descriptor read/64, error -32 [ 198.492000][ T4320] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 198.695898][ T4320] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.721059][ T4320] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.762991][ T4320] usb 6-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 198.784528][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.815017][ T4320] usb 6-1: SerialNumber: syz [ 199.051688][ T4320] usb 6-1: 0:2 : does not exist [ 199.155139][ T4320] usb 6-1: USB disconnect, device number 5 [ 199.309379][ T6548] udevd[6548]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.052401][ T6726] device wg1 entered promiscuous mode [ 200.191767][ T6731] netlink: 'syz.2.596': attribute type 1 has an invalid length. [ 200.364713][ T6735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.428629][ T6735] bond1: (slave bond2): making interface the new active one [ 200.469421][ T6735] bond1: (slave bond2): Enslaving as an active interface with an up link [ 200.549324][ T6731] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 200.592727][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.597'. [ 200.711137][ T6743] device dummy0 left promiscuous mode [ 200.767247][ T6743] bridge2: port 1(dummy0) entered blocking state [ 200.818111][ T6743] bridge2: port 1(dummy0) entered disabled state [ 200.856427][ T6743] device dummy0 entered promiscuous mode [ 200.890731][ T6744] netlink: 'syz.1.597': attribute type 10 has an invalid length. [ 200.911800][ T6744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.597'. [ 200.946637][ T6744] bridge2: port 1(dummy0) entered blocking state [ 200.953132][ T6744] bridge2: port 1(dummy0) entered forwarding state [ 200.969531][ T6744] bridge2: port 1(dummy0) entered disabled state [ 201.012490][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 201.070009][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.600'. [ 201.072227][ T6748] netlink: 32 bytes leftover after parsing attributes in process `syz.2.600'. [ 201.232213][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 201.247689][ T27] audit: type=1326 audit(2000000009.970:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7ab9e2d9 code=0x7ffc0000 [ 201.261987][ T6748] netlink: 2 bytes leftover after parsing attributes in process `syz.2.600'. [ 201.323447][ T6748] netlink: 32 bytes leftover after parsing attributes in process `syz.2.600'. [ 201.337561][ T27] audit: type=1326 audit(2000000010.000:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fba7ab9e2d9 code=0x7ffc0000 [ 201.492507][ T27] audit: type=1326 audit(2000000010.000:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7ab9e2d9 code=0x7ffc0000 [ 201.605188][ T27] audit: type=1326 audit(2000000010.000:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7ab9e2d9 code=0x7ffc0000 [ 201.693787][ T27] audit: type=1326 audit(2000000010.000:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fba7ab9e2d9 code=0x7ffc0000 [ 201.770171][ T27] audit: type=1326 audit(2000000010.000:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7ab9e2d9 code=0x7ffc0000 [ 201.841205][ T6767] loop2: detected capacity change from 0 to 256 [ 201.843838][ T27] audit: type=1326 audit(2000000010.000:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7ab9e2d9 code=0x7ffc0000 [ 201.952831][ T27] audit: type=1326 audit(2000000010.010:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fba7ab9e2d9 code=0x7ffc0000 [ 202.019609][ T27] audit: type=1326 audit(2000000010.010:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7ab9e2d9 code=0x7ffc0000 [ 202.089191][ T6771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.110268][ T27] audit: type=1326 audit(2000000010.010:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.602" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7ab9e2d9 code=0x7ffc0000 [ 203.571977][ T4286] Bluetooth: hci1: command 0x2016 tx timeout [ 204.092311][ T6790] ip_tables: iptables: counters copy to user failed while replacing table [ 205.662301][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 206.364074][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.621'. [ 206.434994][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 206.435008][ T27] audit: type=1326 audit(2000000015.160:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 206.512028][ T27] audit: type=1326 audit(2000000015.160:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 206.590066][ T27] audit: type=1326 audit(2000000015.190:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 206.652400][ T27] audit: type=1326 audit(2000000015.190:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 206.760549][ T27] audit: type=1326 audit(2000000015.190:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 206.818202][ T27] audit: type=1326 audit(2000000015.190:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 206.867998][ T27] audit: type=1326 audit(2000000015.190:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 206.874680][ T6822] netlink: 'syz.1.625': attribute type 1 has an invalid length. [ 206.897290][ T27] audit: type=1326 audit(2000000015.190:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 206.987606][ T27] audit: type=1326 audit(2000000015.190:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 207.054215][ T6822] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.105005][ T27] audit: type=1326 audit(2000000015.190:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.0.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f225679e042 code=0x7ffc0000 [ 207.148518][ T6833] bond4: (slave veth0_to_bond): Releasing active interface [ 207.236376][ T6833] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 207.290703][ T6830] bond5: (slave veth1): Enslaving as an active interface with a down link [ 208.097247][ T6849] ip_tables: iptables: counters copy to user failed while replacing table [ 208.882893][ T6864] loop2: detected capacity change from 0 to 16 [ 209.495375][ T6837] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.690438][ T6870] netlink: 'syz.5.640': attribute type 1 has an invalid length. [ 209.719035][ T6870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.749167][ T6870] bond3: (slave veth3): Enslaving as an active interface with a down link [ 210.125111][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.643'. [ 211.097210][ T6881] bond3: (slave veth5): Enslaving as an active interface with an up link [ 214.363106][ T6948] netlink: 36 bytes leftover after parsing attributes in process `syz.5.663'. [ 214.459438][ T6950] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 218.461485][ T6969] ip_tables: iptables: counters copy to user failed while replacing table [ 218.870229][ T6998] netlink: 300 bytes leftover after parsing attributes in process `syz.2.674'. [ 219.131684][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 219.131697][ T27] audit: type=1326 audit(2000000027.850:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 219.183333][ T27] audit: type=1326 audit(2000000027.850:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 219.207594][ T27] audit: type=1326 audit(2000000027.910:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 219.240034][ T27] audit: type=1326 audit(2000000027.910:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 219.433318][ T27] audit: type=1326 audit(2000000027.910:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 219.467650][ T27] audit: type=1326 audit(2000000027.910:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 219.531942][ T27] audit: type=1326 audit(2000000027.910:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 219.687193][ T27] audit: type=1326 audit(2000000027.910:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225679e2d9 code=0x7ffc0000 [ 220.420506][ T7007] loop5: detected capacity change from 0 to 512 [ 220.484082][ T27] audit: type=1326 audit(2000000027.910:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f225675eb0e code=0x7ffc0000 [ 220.507877][ T7007] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 220.612127][ T27] audit: type=1326 audit(2000000027.910:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.0.679" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f225675eb0e code=0x7ffc0000 [ 222.122068][ T7027] tipc: Failed to remove unknown binding: 66,0,0/2886997007:715308448/715308450 [ 222.178588][ T7027] tipc: Failed to remove unknown binding: 66,0,0/2886997007:715308448/715308449 [ 222.217208][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 222.237106][ T7027] tipc: Failed to remove unknown binding: 66,0,0/2886997007:715308448/715308449 [ 222.285700][ T7027] tipc: Failed to remove unknown binding: 66,0,0/2886997007:715308448/715308450 [ 222.328730][ T7027] tipc: Failed to remove unknown binding: 66,0,0/2886997007:715308448/715308449 [ 223.069558][ T7033] ip_tables: iptables: counters copy to user failed while replacing table [ 223.431496][ T7056] MPTCP: kernel_bind error, err=-98 [ 223.599351][ T7061] loop5: detected capacity change from 0 to 128 [ 224.200339][ T7069] syz.5.702: attempt to access beyond end of device [ 224.200339][ T7069] loop5: rw=2049, sector=145, nr_sectors = 448 limit=128 [ 224.214171][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.259175][ T7068] nvmet: Invalid value 'ip' for adrfam [ 224.261606][ T7067] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 224.380825][ T7061] syz.5.702: attempt to access beyond end of device [ 224.380825][ T7061] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 224.418536][ T7068] nvmet: transport type 0 not supported [ 224.423342][ T7061] syz.5.702: attempt to access beyond end of device [ 224.423342][ T7061] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 224.438070][ T7061] syz.5.702: attempt to access beyond end of device [ 224.438070][ T7061] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 224.457743][ T7061] syz.5.702: attempt to access beyond end of device [ 224.457743][ T7061] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 224.474851][ T7069] syz.5.702: attempt to access beyond end of device [ 224.474851][ T7069] loop5: rw=0, sector=150, nr_sectors = 1 limit=128 [ 224.513346][ T7061] syz.5.702: attempt to access beyond end of device [ 224.513346][ T7061] loop5: rw=0, sector=145, nr_sectors = 1 limit=128 [ 224.597236][ T7061] Buffer I/O error on dev loop5, logical block 145, async page read [ 224.670315][ T7061] syz.5.702: attempt to access beyond end of device [ 224.670315][ T7061] loop5: rw=0, sector=146, nr_sectors = 1 limit=128 [ 224.697787][ T14] smpboot: CPU 1 is now offline [ 224.820976][ T7061] Buffer I/O error on dev loop5, logical block 146, async page read [ 224.866267][ T7090] x86: Booting SMP configuration: [ 224.877737][ T7061] syz.5.702: attempt to access beyond end of device [ 224.877737][ T7061] loop5: rw=0, sector=147, nr_sectors = 1 limit=128 [ 224.906801][ T7090] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 224.928934][ T7061] Buffer I/O error on dev loop5, logical block 147, async page read [ 224.984853][ T7061] syz.5.702: attempt to access beyond end of device [ 224.984853][ T7061] loop5: rw=0, sector=148, nr_sectors = 1 limit=128 [ 225.046407][ T7061] Buffer I/O error on dev loop5, logical block 148, async page read [ 225.083441][ T7061] Buffer I/O error on dev loop5, logical block 149, async page read [ 225.113887][ T7061] Buffer I/O error on dev loop5, logical block 150, async page read [ 225.132269][ T7061] Buffer I/O error on dev loop5, logical block 151, async page read [ 225.150748][ T7061] Buffer I/O error on dev loop5, logical block 152, async page read [ 226.628813][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 227.535365][ T7133] smc: net device lo applied user defined pnetid SYZ0 [ 228.447327][ T4286] Bluetooth: Wrong link type (-22) [ 228.918006][ T7180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.770789][ T7196] loop2: detected capacity change from 0 to 128 [ 230.033144][ T7199] bio_check_eod: 4 callbacks suppressed [ 230.033162][ T7199] syz.2.739: attempt to access beyond end of device [ 230.033162][ T7199] loop2: rw=2049, sector=145, nr_sectors = 712 limit=128 [ 230.256453][ T7196] syz.2.739: attempt to access beyond end of device [ 230.256453][ T7196] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 230.315201][ T7199] syz.2.739: attempt to access beyond end of device [ 230.315201][ T7199] loop2: rw=0, sector=150, nr_sectors = 1 limit=128 [ 230.365413][ T7196] syz.2.739: attempt to access beyond end of device [ 230.365413][ T7196] loop2: rw=0, sector=145, nr_sectors = 1 limit=128 [ 230.427081][ T7196] Buffer I/O error on dev loop2, logical block 145, async page read [ 230.462374][ T7196] syz.2.739: attempt to access beyond end of device [ 230.462374][ T7196] loop2: rw=0, sector=146, nr_sectors = 1 limit=128 [ 230.515255][ T7196] Buffer I/O error on dev loop2, logical block 146, async page read [ 230.544074][ T7196] syz.2.739: attempt to access beyond end of device [ 230.544074][ T7196] loop2: rw=0, sector=147, nr_sectors = 1 limit=128 [ 230.592902][ T7196] Buffer I/O error on dev loop2, logical block 147, async page read [ 230.672611][ T7196] syz.2.739: attempt to access beyond end of device [ 230.672611][ T7196] loop2: rw=0, sector=148, nr_sectors = 1 limit=128 [ 230.723334][ T7196] Buffer I/O error on dev loop2, logical block 148, async page read [ 230.756684][ T7196] syz.2.739: attempt to access beyond end of device [ 230.756684][ T7196] loop2: rw=0, sector=149, nr_sectors = 1 limit=128 [ 230.819433][ T7196] Buffer I/O error on dev loop2, logical block 149, async page read [ 230.858697][ T7196] syz.2.739: attempt to access beyond end of device [ 230.858697][ T7196] loop2: rw=0, sector=150, nr_sectors = 1 limit=128 [ 230.903138][ T7196] Buffer I/O error on dev loop2, logical block 150, async page read [ 230.933208][ T7196] syz.2.739: attempt to access beyond end of device [ 230.933208][ T7196] loop2: rw=0, sector=151, nr_sectors = 1 limit=128 [ 230.981423][ T7196] Buffer I/O error on dev loop2, logical block 151, async page read [ 231.010137][ T7196] Buffer I/O error on dev loop2, logical block 152, async page read [ 231.408069][ T7180] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.426983][ T7180] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.462018][ T7180] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.497495][ T7180] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.902768][ T7216] device syzkaller0 entered promiscuous mode [ 232.035600][ T7232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.042913][ T7232] IPv6: NLM_F_CREATE should be set when creating new route [ 232.129903][ T7234] loop5: detected capacity change from 0 to 512 [ 232.179479][ T7234] EXT4-fs: inline encryption not supported [ 232.229651][ T7234] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 232.285579][ T7234] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 232.378110][ T7234] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 232.458811][ T7234] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.750: bg 0: block 248: padding at end of block bitmap is not set [ 232.522304][ T7234] __quota_error: 26 callbacks suppressed [ 232.522321][ T7234] Quota error (device loop5): write_blk: dquota write failed [ 232.573161][ T7234] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 232.611318][ T7234] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.750: Failed to acquire dquot type 1 [ 232.666431][ T7234] EXT4-fs (loop5): 1 truncate cleaned up [ 232.688991][ T7234] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 232.799614][ T7234] netlink: 48 bytes leftover after parsing attributes in process `syz.5.750'. [ 232.937716][ T4972] EXT4-fs (loop5): unmounting filesystem. [ 232.967722][ T4737] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 232.978759][ T4737] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:15: Failed to release dquot type 1 [ 233.781530][ T7266] device bridge_slave_0 left promiscuous mode [ 233.804129][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.837450][ T7269] device bridge_slave_1 left promiscuous mode [ 233.858545][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.633245][ T7287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.640558][ T7287] IPv6: NLM_F_CREATE should be set when creating new route [ 234.848764][ T7290] futex_wake_op: syz.0.767 tries to shift op by 144; fix this program [ 234.873453][ T7291] loop2: detected capacity change from 0 to 512 [ 234.899412][ T7291] EXT4-fs: inline encryption not supported [ 234.935137][ T7291] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 234.978791][ T7291] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 235.040202][ T7291] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 235.134301][ T7291] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.766: bg 0: block 248: padding at end of block bitmap is not set [ 235.168116][ T7294] loop5: detected capacity change from 0 to 1024 [ 235.211039][ T7291] Quota error (device loop2): write_blk: dquota write failed [ 235.254578][ T7291] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 235.302565][ T7291] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.766: Failed to acquire dquot type 1 [ 235.357109][ T7291] EXT4-fs (loop2): 1 truncate cleaned up [ 235.381483][ T7291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 235.478247][ T27] audit: type=1800 audit(2000000044.200:103): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.776" name="file2" dev="loop5" ino=5 res=0 errno=0 [ 236.281123][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.497409][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.172069][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 237.349768][ T7287] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.359036][ T7287] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.369540][ T7287] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.378622][ T7287] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.601366][ T7295] netlink: 48 bytes leftover after parsing attributes in process `syz.2.766'. [ 237.640883][ T7339] device bridge_slave_0 left promiscuous mode [ 237.684490][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.734343][ T7340] device bridge_slave_1 left promiscuous mode [ 237.740542][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.772984][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 237.838676][ T5096] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 237.847826][ T5096] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:22: Failed to release dquot type 1 [ 238.149435][ T7355] device syzkaller0 entered promiscuous mode [ 238.802933][ T7363] netlink: 1355 bytes leftover after parsing attributes in process `syz.5.784'. [ 239.269633][ T7372] netlink: 'syz.2.788': attribute type 10 has an invalid length. [ 239.292156][ T7372] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 239.362093][ T7373] netlink: 'syz.2.788': attribute type 4 has an invalid length. [ 239.378221][ T7373] netlink: 156 bytes leftover after parsing attributes in process `syz.2.788'. [ 239.399121][ T7373] wlan1: mtu less than device minimum [ 240.672152][ T7378] netlink: 48 bytes leftover after parsing attributes in process `syz.4.792'. [ 241.894662][ T7417] smc: net device lo applied user defined pnetid SYZ0 [ 242.756894][ T7436] netlink: 'syz.1.804': attribute type 10 has an invalid length. [ 242.768806][ T7436] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 242.786658][ T7436] netlink: 'syz.1.804': attribute type 4 has an invalid length. [ 242.794711][ T7436] netlink: 156 bytes leftover after parsing attributes in process `syz.1.804'. [ 242.808751][ T7436] wlan1: mtu less than device minimum [ 242.930743][ T7438] loop2: detected capacity change from 0 to 1024 [ 243.170966][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.729430][ T7454] netlink: 'syz.4.811': attribute type 1 has an invalid length. [ 243.856079][ T7459] bond1: (slave veth0_to_bond): Releasing active interface [ 244.049340][ T7459] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 244.447865][ T7454] device macvlan2 entered promiscuous mode [ 244.627182][ T7454] device bond4 entered promiscuous mode [ 244.650102][ T7454] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 245.039039][ T7454] device bond4 left promiscuous mode [ 245.067157][ T7470] loop2: detected capacity change from 0 to 512 [ 245.140711][ T7470] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.819: bg 0: block 7: invalid block bitmap [ 245.205282][ T7470] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 245.261166][ T7470] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2921: inode #11: comm syz.2.819: corrupted xattr block 95 [ 245.376659][ T7470] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117) [ 245.416391][ T7470] EXT4-fs (loop2): 1 orphan inode deleted [ 245.439218][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.448749][ T7470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 245.472291][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.510088][ T7479] device bridge_slave_0 entered promiscuous mode [ 245.546024][ T7480] device bridge_slave_0 left promiscuous mode [ 245.574856][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.585731][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 245.650788][ T7482] rdma_rxe: already configured on bond0 [ 246.013410][ T7484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.068702][ T7484] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.124438][ T7484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.275480][ T7499] netlink: 'syz.0.826': attribute type 10 has an invalid length. [ 246.399159][ T7499] bond0: (slave wlan1): Enslaving as a backup interface with a down link [ 246.462343][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.478901][ T7495] netlink: 'syz.0.826': attribute type 4 has an invalid length. [ 246.497010][ T7495] netlink: 156 bytes leftover after parsing attributes in process `syz.0.826'. [ 246.516699][ T7495] wlan1: mtu less than device minimum [ 246.710826][ T7506] loop2: detected capacity change from 0 to 1024 [ 246.857774][ T7510] hfsplus: cannot replace xattr [ 246.880945][ T7506] hfsplus: b-tree write err: -5, ino 8 [ 246.901034][ T7510] hfsplus: b-tree write err: -5, ino 8 [ 246.982301][ T4735] hfsplus: b-tree write err: -5, ino 8 [ 247.649532][ T7519] netlink: 'syz.0.832': attribute type 1 has an invalid length. [ 247.754243][ T7526] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 247.907304][ T7519] device macvlan2 entered promiscuous mode [ 247.941734][ T7519] device bond3 entered promiscuous mode [ 247.975951][ T7519] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 248.016369][ T7519] device bond3 left promiscuous mode [ 248.247432][ T7534] device bridge_slave_0 left promiscuous mode [ 248.276101][ T7534] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.319706][ T7535] device bridge_slave_1 left promiscuous mode [ 248.350550][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.898930][ T7551] device syzkaller0 entered promiscuous mode [ 249.863726][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 251.587999][ T7587] loop5: detected capacity change from 0 to 128 [ 251.754565][ T7587] bio_check_eod: 1 callbacks suppressed [ 251.754579][ T7587] syz.5.855: attempt to access beyond end of device [ 251.754579][ T7587] loop5: rw=2049, sector=145, nr_sectors = 688 limit=128 [ 251.849119][ T7587] syz.5.855: attempt to access beyond end of device [ 251.849119][ T7587] loop5: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 251.880045][ T7587] syz.5.855: attempt to access beyond end of device [ 251.880045][ T7587] loop5: rw=0, sector=145, nr_sectors = 8 limit=128 [ 251.907589][ T7588] syz.5.855: attempt to access beyond end of device [ 251.907589][ T7588] loop5: rw=0, sector=150, nr_sectors = 1 limit=128 [ 251.935601][ T7587] syz.5.855: attempt to access beyond end of device [ 251.935601][ T7587] loop5: rw=0, sector=145, nr_sectors = 1 limit=128 [ 251.979080][ T7587] Buffer I/O error on dev loop5, logical block 145, async page read [ 251.996228][ T7587] syz.5.855: attempt to access beyond end of device [ 251.996228][ T7587] loop5: rw=0, sector=146, nr_sectors = 1 limit=128 [ 252.023119][ T7587] Buffer I/O error on dev loop5, logical block 146, async page read [ 252.040378][ T7587] syz.5.855: attempt to access beyond end of device [ 252.040378][ T7587] loop5: rw=0, sector=147, nr_sectors = 1 limit=128 [ 252.084996][ T7587] Buffer I/O error on dev loop5, logical block 147, async page read [ 252.123306][ T7587] syz.5.855: attempt to access beyond end of device [ 252.123306][ T7587] loop5: rw=0, sector=148, nr_sectors = 1 limit=128 [ 252.177214][ T7587] Buffer I/O error on dev loop5, logical block 148, async page read [ 252.207632][ T7587] syz.5.855: attempt to access beyond end of device [ 252.207632][ T7587] loop5: rw=0, sector=149, nr_sectors = 1 limit=128 [ 252.248704][ T7587] Buffer I/O error on dev loop5, logical block 149, async page read [ 252.289441][ T7587] syz.5.855: attempt to access beyond end of device [ 252.289441][ T7587] loop5: rw=0, sector=150, nr_sectors = 1 limit=128 [ 252.362015][ T7587] Buffer I/O error on dev loop5, logical block 150, async page read [ 252.382448][ T7587] Buffer I/O error on dev loop5, logical block 151, async page read [ 252.462334][ T7587] Buffer I/O error on dev loop5, logical block 152, async page read [ 254.294406][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.300791][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.519187][ T4381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 254.630809][ T4381] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 255.037207][ T7636] loop2: detected capacity change from 0 to 136 [ 255.153208][ T7636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.867'. [ 255.257790][ T7636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.867'. [ 255.854090][ T7650] batman_adv: batadv0: Adding interface: veth0 [ 257.089743][ T7650] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.269145][ T7650] batman_adv: batadv0: Interface activated: veth0 [ 257.336666][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'. [ 257.450627][ T7656] device bond3 entered promiscuous mode [ 257.473029][ T7656] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.521617][ T7652] batman_adv: batadv0: Interface deactivated: veth0 [ 257.635615][ T7652] batman_adv: batadv0: Removing interface: veth0 [ 257.794292][ T7659] device erspan1 entered promiscuous mode [ 257.807792][ T7659] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 257.844341][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 259.613823][ T7694] xt_CT: No such helper "pptp" [ 260.421074][ T7699] loop5: detected capacity change from 0 to 40427 [ 260.522002][ T7699] F2FS-fs (loop5): Found nat_bits in checkpoint [ 260.782501][ T7699] F2FS-fs (loop5): Start checkpoint disabled! [ 260.822336][ T7699] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 260.832164][ T7714] netlink: 27 bytes leftover after parsing attributes in process `syz.0.898'. [ 261.631221][ T7730] batman_adv: batadv0: Adding interface: veth0 [ 261.667703][ T7730] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.781203][ T7730] batman_adv: batadv0: Interface activated: veth0 [ 261.872922][ T7730] batman_adv: batadv0: Interface deactivated: veth0 [ 262.013680][ T7730] batman_adv: batadv0: Removing interface: veth0 [ 262.098035][ T5096] bio_check_eod: 2 callbacks suppressed [ 262.098050][ T5096] kworker/u4:22: attempt to access beyond end of device [ 262.098050][ T5096] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 262.182998][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 262.192951][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 262.200487][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.210582][ T4286] Workqueue: hci2 hci_rx_work [ 262.215272][ T4286] Call Trace: [ 262.215284][ T4286] [ 262.215293][ T4286] dump_stack_lvl+0x188/0x24e [ 262.215325][ T4286] ? show_regs_print_info+0x12/0x12 [ 262.215348][ T4286] ? load_image+0x410/0x410 [ 262.215376][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 262.215403][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 262.219008][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 262.226597][ T4286] kobject_add_internal+0x617/0xca0 [ 262.236281][ T4286] kobject_add+0x160/0x230 [ 262.236319][ T4286] ? kobject_init+0x1c0/0x1c0 [ 262.236344][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 262.246642][ T4286] ? klist_children_get+0x50/0x50 [ 262.257028][ T4286] ? get_device_parent+0x121/0x3e0 [ 262.257066][ T4286] device_add+0x470/0x1050 [ 262.257093][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 262.261792][ T4286] hci_sync_conn_complete_evt+0x707/0xab0 [ 262.261825][ T4286] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 262.272048][ T4286] hci_event_packet+0x806/0x1290 [ 262.272084][ T4286] ? lock_chain_count+0x20/0x20 [ 262.282188][ T4286] ? bis_list+0x280/0x280 [ 262.282215][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 262.282242][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 262.282265][ T4286] hci_rx_work+0x3eb/0xd40 [ 262.282285][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 262.282309][ T4286] ? process_one_work+0x7b4/0x1160 [ 262.291967][ T4286] process_one_work+0x8ab/0x1160 [ 262.292006][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 262.297725][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 262.297747][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 262.297767][ T4286] ? wq_worker_running+0x97/0x190 [ 262.308640][ T4286] worker_thread+0xaf5/0x12a0 [ 262.308697][ T4286] kthread+0x29d/0x330 [ 262.318220][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 262.328580][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 262.337987][ T4286] ret_from_fork+0x1f/0x30 [ 262.348014][ T4286] [ 262.362351][ T4286] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 262.369169][ T4286] Bluetooth: hci2: failed to register connection device [ 264.451950][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 265.507964][ T7785] loop2: detected capacity change from 0 to 128 [ 265.696393][ T7789] syz.2.912: attempt to access beyond end of device [ 265.696393][ T7789] loop2: rw=2049, sector=145, nr_sectors = 736 limit=128 [ 266.029952][ T7785] syz.2.912: attempt to access beyond end of device [ 266.029952][ T7785] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 266.075874][ T7789] syz.2.912: attempt to access beyond end of device [ 266.075874][ T7789] loop2: rw=0, sector=150, nr_sectors = 1 limit=128 [ 267.207260][ T7785] syz.2.912: attempt to access beyond end of device [ 267.207260][ T7785] loop2: rw=0, sector=145, nr_sectors = 1 limit=128 [ 267.283986][ T7785] Buffer I/O error on dev loop2, logical block 145, async page read [ 267.339910][ T7785] syz.2.912: attempt to access beyond end of device [ 267.339910][ T7785] loop2: rw=0, sector=146, nr_sectors = 1 limit=128 [ 267.458369][ T7785] Buffer I/O error on dev loop2, logical block 146, async page read [ 267.513074][ T7785] syz.2.912: attempt to access beyond end of device [ 267.513074][ T7785] loop2: rw=0, sector=147, nr_sectors = 1 limit=128 [ 267.601632][ T7785] Buffer I/O error on dev loop2, logical block 147, async page read [ 267.650914][ T7785] syz.2.912: attempt to access beyond end of device [ 267.650914][ T7785] loop2: rw=0, sector=148, nr_sectors = 1 limit=128 [ 267.723850][ T7785] Buffer I/O error on dev loop2, logical block 148, async page read [ 267.745908][ T5107] net_ratelimit: 28 callbacks suppressed [ 267.780615][ T7785] syz.2.912: attempt to access beyond end of device [ 267.780615][ T7785] loop2: rw=0, sector=149, nr_sectors = 1 limit=128 [ 267.879485][ T7785] Buffer I/O error on dev loop2, logical block 149, async page read [ 267.979263][ T7785] syz.2.912: attempt to access beyond end of device [ 267.979263][ T7785] loop2: rw=0, sector=150, nr_sectors = 1 limit=128 [ 268.049695][ T7785] Buffer I/O error on dev loop2, logical block 150, async page read [ 268.077645][ T7820] device dummy0 left promiscuous mode [ 268.091331][ T7785] syz.2.912: attempt to access beyond end of device [ 268.091331][ T7785] loop2: rw=0, sector=151, nr_sectors = 1 limit=128 [ 268.114612][ T7820] device bond2 left promiscuous mode [ 268.161316][ T7820] device erspan1 left promiscuous mode [ 268.168764][ T7785] Buffer I/O error on dev loop2, logical block 151, async page read [ 268.204017][ T7785] syz.2.912: attempt to access beyond end of device [ 268.204017][ T7785] loop2: rw=0, sector=152, nr_sectors = 1 limit=128 [ 268.250611][ T7785] Buffer I/O error on dev loop2, logical block 152, async page read [ 269.519288][ T7839] loop2: detected capacity change from 0 to 1024 [ 270.632697][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.929'. [ 270.852517][ T7859] bridge0: port 1(veth1) entered blocking state [ 270.874373][ T7859] bridge0: port 1(veth1) entered disabled state [ 270.899252][ T7859] device veth1 entered promiscuous mode [ 271.065301][ T7856] bridge0: port 2(veth5) entered blocking state [ 271.146357][ T7856] bridge0: port 2(veth5) entered disabled state [ 271.188003][ T7856] device veth5 entered promiscuous mode [ 271.947553][ T7876] Bluetooth: MGMT ver 1.22 [ 272.753645][ T7895] debugfs: out of free dentries, can not create file 'halt_wait_ns' [ 272.877908][ T7897] IPVS: fo: FWM 3 0x00000003 - no destination available [ 273.162304][ T7903] loop5: detected capacity change from 0 to 512 [ 273.169532][ T7903] EXT4-fs: Ignoring removed bh option [ 273.226242][ T7903] EXT4-fs: inline encryption not supported [ 273.272074][ T7903] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 273.317647][ T7903] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 273.357027][ T7903] EXT4-fs (loop5): orphan cleanup on readonly fs [ 273.389844][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 273.399904][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 273.407622][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.415581][ T7903] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 273.417686][ T4286] Workqueue: hci3 hci_rx_work [ 273.417714][ T4286] Call Trace: [ 273.417723][ T4286] [ 273.417733][ T4286] dump_stack_lvl+0x188/0x24e [ 273.417761][ T4286] ? show_regs_print_info+0x12/0x12 [ 273.417789][ T4286] ? load_image+0x410/0x410 [ 273.449357][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 273.457705][ T7903] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 273.458954][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 273.458989][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 273.483560][ T4286] kobject_add_internal+0x617/0xca0 [ 273.488809][ T4286] kobject_add+0x160/0x230 [ 273.493362][ T4286] ? kobject_init+0x1c0/0x1c0 [ 273.498053][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 273.498079][ T4286] ? klist_children_get+0x50/0x50 [ 273.498099][ T4286] ? get_device_parent+0x121/0x3e0 [ 273.498127][ T4286] device_add+0x470/0x1050 [ 273.498155][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 273.503825][ T4286] hci_sync_conn_complete_evt+0x707/0xab0 [ 273.503857][ T4286] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 273.503880][ T4286] hci_event_packet+0x806/0x1290 [ 273.523610][ T4286] ? lock_chain_count+0x20/0x20 [ 273.538407][ T7903] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 273.540310][ T4286] ? bis_list+0x280/0x280 [ 273.540345][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 273.552141][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 273.552176][ T4286] hci_rx_work+0x3eb/0xd40 [ 273.552197][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 273.552221][ T4286] ? process_one_work+0x7b4/0x1160 [ 273.552243][ T4286] process_one_work+0x8ab/0x1160 [ 273.552275][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 273.552299][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 273.552315][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 273.552336][ T4286] ? wq_worker_running+0x97/0x190 [ 273.552357][ T4286] worker_thread+0xaf5/0x12a0 [ 273.552408][ T4286] kthread+0x29d/0x330 [ 273.552424][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 273.581732][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 273.608611][ T7903] EXT4-fs error (device loop5): mb_free_blocks:1839: group 0, [ 273.608837][ T4286] ret_from_fork+0x1f/0x30 [ 273.608882][ T4286] [ 273.614314][ T7903] inode 12: [ 273.623924][ T4286] kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 273.623953][ T4286] Bluetooth: hci3: failed to register connection device [ 273.628687][ T7903] block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 273.802589][ T7903] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.950: corrupted inode contents [ 273.873822][ T7903] EXT4-fs error (device loop5): ext4_dirty_inode:6166: inode #12: comm syz.5.950: mark_inode_dirty error [ 273.914420][ T7903] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.950: corrupted inode contents [ 273.956792][ T7903] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.950: mark_inode_dirty error [ 273.993707][ T7903] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.950: corrupted inode contents [ 274.045781][ T7903] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.950: mark_inode_dirty error [ 274.092650][ T7903] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.950: corrupted inode contents [ 274.131770][ T7903] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 274.171696][ T7903] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #12: comm syz.5.950: corrupted inode contents [ 274.211961][ T7903] EXT4-fs error (device loop5): ext4_truncate:4325: inode #12: comm syz.5.950: mark_inode_dirty error [ 274.253880][ T7903] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 274.292619][ T7903] EXT4-fs (loop5): 1 truncate cleaned up [ 274.315051][ T7903] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 275.119496][ T4972] EXT4-fs (loop5): unmounting filesystem. [ 275.732228][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 276.524408][ T7955] loop2: detected capacity change from 0 to 128 [ 276.695883][ T7960] syz.2.965: attempt to access beyond end of device [ 276.695883][ T7960] loop2: rw=2049, sector=145, nr_sectors = 784 limit=128 [ 276.921995][ T7964] netlink: 'syz.4.967': attribute type 10 has an invalid length. [ 276.957589][ T5096] kworker/u4:22: attempt to access beyond end of device [ 276.957589][ T5096] loop2: rw=1, sector=150, nr_sectors = 1 limit=128 [ 276.976702][ T5096] Buffer I/O error on dev loop2, logical block 150, lost async page write [ 277.104545][ T7969] loop2: detected capacity change from 0 to 1024 [ 277.143621][ T4278] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 277.159378][ T7969] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 277.159989][ T4278] CPU: 1 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 277.175675][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.175691][ T4278] Workqueue: hci0 hci_rx_work [ 277.175714][ T4278] Call Trace: [ 277.175721][ T4278] [ 277.175729][ T4278] dump_stack_lvl+0x188/0x24e [ 277.190855][ T4278] ? show_regs_print_info+0x12/0x12 [ 277.190886][ T4278] ? load_image+0x410/0x410 [ 277.190915][ T4278] sysfs_create_dir_ns+0x26a/0x290 [ 277.197615][ T4278] ? sysfs_warn_dup+0xa0/0xa0 [ 277.207466][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 277.207495][ T4278] kobject_add_internal+0x617/0xca0 [ 277.217546][ T4278] kobject_add+0x160/0x230 [ 277.227387][ T4278] ? kobject_init+0x1c0/0x1c0 [ 277.237519][ T4278] ? __raw_spin_lock_init+0x41/0x100 [ 277.247495][ T4278] ? klist_children_get+0x50/0x50 [ 277.247524][ T4278] ? get_device_parent+0x121/0x3e0 [ 277.257635][ T4278] device_add+0x470/0x1050 [ 277.257680][ T4278] hci_conn_add_sysfs+0xd1/0x1e0 [ 277.267080][ T4278] hci_sync_conn_complete_evt+0x707/0xab0 [ 277.272814][ T4278] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 277.278918][ T4278] hci_event_packet+0x806/0x1290 [ 277.283860][ T4278] ? lock_chain_count+0x20/0x20 [ 277.288734][ T4278] ? bis_list+0x280/0x280 [ 277.293069][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 277.298267][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 277.303461][ T4278] hci_rx_work+0x3eb/0xd40 [ 277.307882][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 277.312748][ T4278] ? process_one_work+0x7b4/0x1160 [ 277.317857][ T4278] process_one_work+0x8ab/0x1160 [ 277.322802][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 277.328437][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 277.333456][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 277.338996][ T4278] ? wq_worker_running+0x97/0x190 [ 277.344018][ T4278] worker_thread+0xaf5/0x12a0 [ 277.348716][ T4278] kthread+0x29d/0x330 [ 277.352821][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 277.357843][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 277.362427][ T4278] ret_from_fork+0x1f/0x30 [ 277.366852][ T4278] [ 277.375740][ T4278] kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 277.389761][ T4278] Bluetooth: hci0: failed to register connection device [ 277.468234][ T7969] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 277.514597][ T7969] EXT4-fs (loop2): orphan cleanup on readonly fs [ 277.550888][ T7969] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.979: Freeing blocks not in datazone - block = 0, count = 4096 [ 277.637462][ T7969] EXT4-fs (loop2): 1 orphan inode deleted [ 277.662732][ T7969] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 277.717303][ T7969] binder: 7965:7969 ioctl c0306201 2000000003c0 returned -14 [ 277.812370][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 277.935749][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 278.291945][ T7992] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 278.417683][ T8001] CIFS: Attempting to mount \\127.0.0.1\share [ 278.548853][ T8005] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 278.558506][ T8005] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 278.593646][ T27] audit: type=1326 audit(2000000087.320:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701a79e2d9 code=0x7ffc0000 [ 278.623323][ T27] audit: type=1326 audit(2000000087.320:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701a79e2d9 code=0x7ffc0000 [ 278.649318][ T27] audit: type=1326 audit(2000000087.350:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f701a79e2d9 code=0x7ffc0000 [ 278.678609][ T27] audit: type=1326 audit(2000000087.350:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701a79e2d9 code=0x7ffc0000 [ 278.709658][ T27] audit: type=1326 audit(2000000087.350:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701a79e2d9 code=0x7ffc0000 [ 278.735660][ T27] audit: type=1326 audit(2000000087.350:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f701a79e2d9 code=0x7ffc0000 [ 278.765432][ T27] audit: type=1326 audit(2000000087.350:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701a79e2d9 code=0x7ffc0000 [ 278.795273][ T27] audit: type=1326 audit(2000000087.350:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701a79e2d9 code=0x7ffc0000 [ 278.826285][ T27] audit: type=1326 audit(2000000087.350:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f701a79e2d9 code=0x7ffc0000 [ 278.856661][ T27] audit: type=1326 audit(2000000087.350:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.2.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701a79e2d9 code=0x7ffc0000 [ 279.222104][ T8001] CIFS: VFS: cifs_mount failed w/return code = -112 [ 279.412000][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 279.588402][ T8026] loop5: detected capacity change from 0 to 1024 [ 279.625570][ T8026] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 279.672268][ T8026] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 279.709145][ T8026] EXT4-fs (loop5): orphan cleanup on readonly fs [ 279.737171][ T8026] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.987: Freeing blocks not in datazone - block = 0, count = 4096 [ 279.856998][ T8026] EXT4-fs (loop5): 1 orphan inode deleted [ 279.884405][ T8026] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 279.964734][ T8026] binder: 8024:8026 ioctl c0306201 2000000003c0 returned -14 [ 280.138734][ T4972] EXT4-fs (loop5): unmounting filesystem. [ 280.240823][ T8039] loop2: detected capacity change from 0 to 512 [ 280.279467][ T8039] EXT4-fs: Ignoring removed bh option [ 280.288947][ T8039] EXT4-fs: inline encryption not supported [ 280.335817][ T8039] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 280.386069][ T8039] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 280.403837][ T8039] EXT4-fs (loop2): orphan cleanup on readonly fs [ 280.442278][ T8039] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 280.481183][ T8039] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 280.508975][ T8039] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 280.568740][ T8039] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.989: corrupted inode contents [ 280.611410][ T8039] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #12: comm syz.2.989: mark_inode_dirty error [ 280.640660][ T8039] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.989: corrupted inode contents [ 280.667308][ T8039] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.989: mark_inode_dirty error [ 280.702119][ T8039] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.989: corrupted inode contents [ 280.739752][ T8039] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.989: mark_inode_dirty error [ 280.781254][ T8039] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.989: corrupted inode contents [ 280.847965][ T8039] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 280.889383][ T8039] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #12: comm syz.2.989: corrupted inode contents [ 280.929094][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 280.948424][ T8039] EXT4-fs error (device loop2): ext4_truncate:4325: inode #12: comm syz.2.989: mark_inode_dirty error [ 280.990049][ T8053] netlink: 32 bytes leftover after parsing attributes in process `syz.4.993'. [ 281.009190][ T8039] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 281.031390][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.993'. [ 281.059574][ T8039] EXT4-fs (loop2): 1 truncate cleaned up [ 281.073323][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 281.085926][ T8039] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 281.115351][ T8053] netlink: 2 bytes leftover after parsing attributes in process `syz.4.993'. [ 281.156231][ T8053] netlink: 32 bytes leftover after parsing attributes in process `syz.4.993'. [ 281.492053][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 282.980477][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 283.522728][ T8082] device syzkaller0 entered promiscuous mode [ 283.559048][ T8082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.698730][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 284.742818][ T8097] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1009'. [ 284.793432][ T8099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1009'. [ 284.841979][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 285.215813][ T8115] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 285.243693][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 287.239745][ T8152] __nla_validate_parse: 2 callbacks suppressed [ 287.239758][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1026'. [ 287.313547][ T8152] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1026'. [ 287.366255][ T8155] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1026'. [ 287.416319][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1026'. [ 287.459549][ T8152] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1026'. [ 287.517269][ T8152] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1026'. [ 297.057944][ T8251] netlink: 'syz.4.1057': attribute type 10 has an invalid length. [ 298.496749][ T8276] loop2: detected capacity change from 0 to 256 [ 298.680358][ T8276] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 298.731676][ T8276] FAT-fs (loop2): Filesystem has been set read-only [ 298.800124][ T8281] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 299.090969][ T8287] loop2: detected capacity change from 0 to 512 [ 299.167610][ T8287] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 299.212860][ T8287] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.1067: Unimplemented hash flags: 0x0001 [ 299.290170][ T8287] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1067: Corrupt directory, running e2fsck is recommended [ 299.457406][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 300.442493][ T8317] 0x7073726500000000-0x7073726500306e61 : "" [ 300.448878][ T8317] mtd: partition "" is out of reach -- disabled [ 300.762256][ T8317] ftl_cs: FTL header not found. [ 301.632889][ T8344] loop2: detected capacity change from 0 to 128 [ 301.640251][ T8344] FAT-fs (loop2): Unrecognized mount option "0" or missing value [ 301.934982][ T8355] device team0 entered promiscuous mode [ 301.961686][ T8355] device team_slave_0 entered promiscuous mode [ 301.998478][ T8355] device team_slave_1 entered promiscuous mode [ 302.031507][ T8355] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 302.094316][ T8355] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 303.492713][ T8385] loop5: detected capacity change from 0 to 256 [ 303.695815][ T8385] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 303.734060][ T8385] FAT-fs (loop5): Filesystem has been set read-only [ 303.747825][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1095'. [ 303.887532][ T8389] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 304.733577][ T8406] fuse: Bad value for 'fd' [ 304.763630][ T8402] bond6: (slave veth5): Enslaving as an active interface with an up link [ 306.423756][ T8429] ------------[ cut here ]------------ [ 306.429924][ T8429] WARNING: CPU: 0 PID: 8429 at net/mac80211/iface.c:532 ieee80211_do_stop+0x1b35/0x2060 [ 306.440051][ T8429] Modules linked in: [ 306.444051][ T8429] CPU: 0 PID: 8429 Comm: syz.1.1117 Not tainted syzkaller #0 [ 306.451655][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.461995][ T8429] RIP: 0010:ieee80211_do_stop+0x1b35/0x2060 [ 306.468132][ T8429] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ef 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 7b 22 d4 f7 <0f> 0b e9 f0 e8 ff ff e8 6f 22 d4 f7 48 c7 c7 c0 25 a7 8b 89 de e8 [ 306.488594][ T8429] RSP: 0018:ffffc90003cc7660 EFLAGS: 00010283 [ 306.494956][ T8429] RAX: ffffffff89ae2405 RBX: 0000000000000001 RCX: 0000000000080000 [ 306.504174][ T8429] RDX: ffffc90005409000 RSI: 0000000000013a30 RDI: 0000000000013a31 [ 306.512605][ T8429] RBP: ffffc90003cc7848 R08: ffffc90003cc7507 R09: 1ffff92000798ea0 [ 306.520633][ T8429] R10: dffffc0000000000 R11: fffff52000798ea1 R12: ffffc90003cc77b0 [ 306.528781][ T8429] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88802a87e760 [ 306.537841][ T8429] FS: 00007fba7bb0c6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 306.546906][ T8429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.553545][ T8429] CR2: 00007f96530138c8 CR3: 0000000047c8b000 CR4: 00000000003506f0 [ 306.561560][ T8429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 306.569789][ T8429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 306.577953][ T8429] Call Trace: [ 306.581229][ T8429] [ 306.584236][ T8429] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 306.590420][ T8429] ? rcu_is_watching+0x11/0xa0 [ 306.595289][ T8429] ? __mutex_lock+0x1ab/0xae0 [ 306.599993][ T8429] ? ieee80211_sdata_stop+0x80/0x80 [ 306.605402][ T8429] ? mutex_lock_nested+0x10/0x10 [ 306.610411][ T8429] ? __local_bh_enable_ip+0x136/0x1c0 [ 306.615963][ T8429] ? dev_deactivate_many+0xb49/0xcd0 [ 306.621302][ T8429] ieee80211_stop+0x41f/0x490 [ 306.626095][ T8429] ? dev_deactivate_many+0x242/0xcd0 [ 306.631417][ T8429] ? ieee80211_open+0x200/0x200 [ 306.636357][ T8429] __dev_close_many+0x1d1/0x2b0 [ 306.641245][ T8429] ? dev_close_many+0x400/0x400 [ 306.646287][ T8429] __dev_change_flags+0x2c9/0x6a0 [ 306.651467][ T8429] ? dev_get_flags+0x1c0/0x1c0 [ 306.656353][ T8429] dev_change_flags+0x78/0x1a0 [ 306.661176][ T8429] devinet_ioctl+0x84f/0x1bf0 [ 306.665951][ T8429] inet_ioctl+0x2fa/0x460 [ 306.670399][ T8429] ? inet_shutdown+0x370/0x370 [ 306.675235][ T8429] ? slab_free_freelist_hook+0x133/0x1b0 [ 306.680969][ T8429] ? tomoyo_path_number_perm+0x4fb/0x650 [ 306.686692][ T8429] ? __kmem_cache_free+0xb6/0x200 [ 306.691756][ T8429] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 306.697461][ T8429] sock_do_ioctl+0xfb/0x320 [ 306.702048][ T8429] ? sock_show_fdinfo+0xb0/0xb0 [ 306.707097][ T8429] sock_ioctl+0x48a/0x700 [ 306.711661][ T8429] ? sock_poll+0x420/0x420 [ 306.716244][ T8429] ? bpf_lsm_file_ioctl+0x5/0x10 [ 306.721467][ T8429] ? security_file_ioctl+0x7c/0xa0 [ 306.726636][ T8429] ? sock_poll+0x420/0x420 [ 306.731256][ T8429] __se_sys_ioctl+0xfa/0x170 [ 306.735940][ T8429] do_syscall_64+0x4c/0xa0 [ 306.740434][ T8429] ? clear_bhb_loop+0x60/0xb0 [ 306.745231][ T8429] ? clear_bhb_loop+0x60/0xb0 [ 306.749973][ T8429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.755935][ T8429] RIP: 0033:0x7fba7ab9e2d9 [ 306.760382][ T8429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.780182][ T8429] RSP: 002b:00007fba7bb0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.788778][ T8429] RAX: ffffffffffffffda RBX: 00007fba7ae25fa0 RCX: 00007fba7ab9e2d9 [ 306.796854][ T8429] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 0000000000000004 [ 306.804975][ T8429] RBP: 00007fba7ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 306.813509][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.822132][ T8429] R13: 00007fba7ae26038 R14: 00007fba7ae25fa0 R15: 00007fff3dad50c8 [ 306.831098][ T8429] [ 306.834373][ T8429] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 306.841767][ T8429] CPU: 0 PID: 8429 Comm: syz.1.1117 Not tainted syzkaller #0 [ 306.849186][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.859248][ T8429] Call Trace: [ 306.862705][ T8429] [ 306.865714][ T8429] dump_stack_lvl+0x188/0x24e [ 306.870667][ T8429] ? memcpy+0x3c/0x60 [ 306.874677][ T8429] ? show_regs_print_info+0x12/0x12 [ 306.880175][ T8429] ? load_image+0x410/0x410 [ 306.885058][ T8429] panic+0x2d3/0x710 [ 306.889157][ T8429] ? bpf_jit_dump+0xd0/0xd0 [ 306.893710][ T8429] __warn+0x2f8/0x4f0 [ 306.898052][ T8429] ? ieee80211_do_stop+0x1b35/0x2060 [ 306.903366][ T8429] ? ieee80211_do_stop+0x1b35/0x2060 [ 306.908883][ T8429] report_bug+0x2ba/0x4f0 [ 306.913225][ T8429] ? ieee80211_do_stop+0x1b35/0x2060 [ 306.919242][ T8429] handle_bug+0x3a/0x70 [ 306.923391][ T8429] exc_invalid_op+0x16/0x40 [ 306.927891][ T8429] asm_exc_invalid_op+0x16/0x20 [ 306.932754][ T8429] RIP: 0010:ieee80211_do_stop+0x1b35/0x2060 [ 306.938666][ T8429] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ef 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 7b 22 d4 f7 <0f> 0b e9 f0 e8 ff ff e8 6f 22 d4 f7 48 c7 c7 c0 25 a7 8b 89 de e8 [ 306.958464][ T8429] RSP: 0018:ffffc90003cc7660 EFLAGS: 00010283 [ 306.964619][ T8429] RAX: ffffffff89ae2405 RBX: 0000000000000001 RCX: 0000000000080000 [ 306.972777][ T8429] RDX: ffffc90005409000 RSI: 0000000000013a30 RDI: 0000000000013a31 [ 306.980759][ T8429] RBP: ffffc90003cc7848 R08: ffffc90003cc7507 R09: 1ffff92000798ea0 [ 306.989361][ T8429] R10: dffffc0000000000 R11: fffff52000798ea1 R12: ffffc90003cc77b0 [ 306.997360][ T8429] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88802a87e760 [ 307.005406][ T8429] ? ieee80211_do_stop+0x1b35/0x2060 [ 307.011275][ T8429] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 307.017887][ T8429] ? rcu_is_watching+0x11/0xa0 [ 307.022747][ T8429] ? __mutex_lock+0x1ab/0xae0 [ 307.027576][ T8429] ? ieee80211_sdata_stop+0x80/0x80 [ 307.033359][ T8429] ? mutex_lock_nested+0x10/0x10 [ 307.038791][ T8429] ? __local_bh_enable_ip+0x136/0x1c0 [ 307.044491][ T8429] ? dev_deactivate_many+0xb49/0xcd0 [ 307.050782][ T8429] ieee80211_stop+0x41f/0x490 [ 307.056030][ T8429] ? dev_deactivate_many+0x242/0xcd0 [ 307.061851][ T8429] ? ieee80211_open+0x200/0x200 [ 307.066848][ T8429] __dev_close_many+0x1d1/0x2b0 [ 307.072539][ T8429] ? dev_close_many+0x400/0x400 [ 307.077426][ T8429] __dev_change_flags+0x2c9/0x6a0 [ 307.082526][ T8429] ? dev_get_flags+0x1c0/0x1c0 [ 307.087703][ T8429] dev_change_flags+0x78/0x1a0 [ 307.093202][ T8429] devinet_ioctl+0x84f/0x1bf0 [ 307.098942][ T8429] inet_ioctl+0x2fa/0x460 [ 307.104762][ T8429] ? inet_shutdown+0x370/0x370 [ 307.109831][ T8429] ? slab_free_freelist_hook+0x133/0x1b0 [ 307.115942][ T8429] ? tomoyo_path_number_perm+0x4fb/0x650 [ 307.121767][ T8429] ? __kmem_cache_free+0xb6/0x200 [ 307.127582][ T8429] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 307.133169][ T8429] sock_do_ioctl+0xfb/0x320 [ 307.139093][ T8429] ? sock_show_fdinfo+0xb0/0xb0 [ 307.144002][ T8429] sock_ioctl+0x48a/0x700 [ 307.148451][ T8429] ? sock_poll+0x420/0x420 [ 307.152974][ T8429] ? bpf_lsm_file_ioctl+0x5/0x10 [ 307.158257][ T8429] ? security_file_ioctl+0x7c/0xa0 [ 307.163566][ T8429] ? sock_poll+0x420/0x420 [ 307.168020][ T8429] __se_sys_ioctl+0xfa/0x170 [ 307.172635][ T8429] do_syscall_64+0x4c/0xa0 [ 307.177057][ T8429] ? clear_bhb_loop+0x60/0xb0 [ 307.181738][ T8429] ? clear_bhb_loop+0x60/0xb0 [ 307.186527][ T8429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.192436][ T8429] RIP: 0033:0x7fba7ab9e2d9 [ 307.196896][ T8429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.216690][ T8429] RSP: 002b:00007fba7bb0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.225107][ T8429] RAX: ffffffffffffffda RBX: 00007fba7ae25fa0 RCX: 00007fba7ab9e2d9 [ 307.233157][ T8429] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 0000000000000004 [ 307.241136][ T8429] RBP: 00007fba7ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 307.249112][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.257081][ T8429] R13: 00007fba7ae26038 R14: 00007fba7ae25fa0 R15: 00007fff3dad50c8 [ 307.265332][ T8429] [ 307.268737][ T8429] Kernel Offset: disabled [ 307.273148][ T8429] Rebooting in 86400 seconds..