last executing test programs: 4.511440671s ago: executing program 3 (id=972): syz_mount_image$minix(&(0x7f0000000680), &(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2010009, &(0x7f0000001f80)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="b888f9751721971b70c6e08204314325a4535d9bd9af8a629085e247323d09f8b5d2c7397c21a447ae084049", @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES64=0x0], 0x1, 0x1b3, &(0x7f0000002440)="$eJzs20+u0lAUx/FfSyn6/PP8O3HCQBOdSEETq4kDWQqBgoSiRpxATIwLcBHuwB25AUh0A9bYYqUVpIht5fH9JC89t+159xTo5TCoABytK5IMGapKCoLg3fM7puplFwWgEIG+BQCOlb78tqsWNQMAzrZFuxL3Ap+/vu3Ol3/VeG/lj/3Dom2G22eS5iv5dsb+Y/HeCLe3rGT+jyXoXJb+5WOUfzc1//kd5z+xJK3kn2TOj67/3u3k/BckXZR0SdJlSafL31pXJV1bM38vVf/N+AwzYyXA7gw10uPEDlP9oe8143E1HLdWzk+yw+MP43EtHDe6L/3evy8ewF7MLfd/JXX/W6n7H8Dhmkxno47ve6/XB582Hyo4MLeVSlBuYG/7RNULKeNpFPzsS0t/WfINxvv+n9ra98sedfxNK4ZVzMIEIHfOm/ErZzKd3R+OOwNv4L144D5x3dbj1iPXCTt/pz+UmmWXCSAHv770s+cEp3lWBAAAAAAAAAAAAAAAdnVd0o2/yAvSD/4AAAAA+O8V8aBSPNmHUi8VAAAAAAAAAAAAAAAAAAAAOHjfAwAA///5OkIb") bind$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1b54, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="7c0000001800051105000000000000000a430000fe0400010000000014000b0020010db800d000000000000000e0ff001c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef050ec700010000000500070002000000", 0x7c) 4.471034749s ago: executing program 0 (id=973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$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") move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183842, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x3) 3.271170413s ago: executing program 0 (id=978): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x0, 0x5002) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3.268151984s ago: executing program 3 (id=979): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="9a", 0x1}) 3.130579092s ago: executing program 1 (id=982): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f00000000c0)=0xfffffff8, 0x4) 3.129875942s ago: executing program 4 (id=983): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='dummy_udc.0', 0xb) 2.830801003s ago: executing program 1 (id=984): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x49, 0x0, 0xff00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000280)={0x0, "1f7f67361b5a90ee941e94a4031a82680d00902d0008424ad04b9634bef178be4ba64223a1d6f36d232b4ea6a469724e5a9c93a204ec2471559600"}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, {0x9, 0x4, 0x1}}, 0xa) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r4, &(0x7f0000000080)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x5, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x5, 0x2, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/52, 0x34}, 0x1}], 0x1, 0x10122, 0x0) 2.811354057s ago: executing program 4 (id=985): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.485610343s ago: executing program 3 (id=986): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) 2.485375104s ago: executing program 2 (id=987): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500"], 0x78) 2.313040489s ago: executing program 3 (id=988): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000200)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00", 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800074000000000080003400000001608000140000000120800024000000000080004"], 0x150}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40048c1}, 0x0) dup3(r2, r1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket$unix(0x1, 0x1, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x10, 0x1, @tid=r11}, 0x0) ptrace(0x10, r11) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) ptrace$setregs(0x1a, r11, 0xc, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0xfff2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r13 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r13, &(0x7f0000000a00)={0x2020}, 0x2020) 1.876995288s ago: executing program 1 (id=989): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./tracing\x00', 0x204858, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB="a6397b9cecbd59ee49322017b3dc59c90cc3ec65bcb97c397b7a4d16c30f7e6d03d1e515ac340df85e264297cd58268d15e589021f1d225c912d0f892bfd30a7a21b7a9e5d32967366c618040a32b927824a6fcaa4e39b2992239a22bc84994ef134c5d154fb268823192cb6bea8725b54464cf110509a2a05331c441c89b9ddd11edec2afb95ff5085b2911690fa97d365d5a6d77aa6d3e4b7eb91b11808d6d0e933f01b951b3e9aca70ce6873e472d9efe", @ANYRES32, @ANYRES8, @ANYRES32], 0x1, 0x347, &(0x7f0000001840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.844086294s ago: executing program 3 (id=990): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e0, 0x0, 0x0}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) 1.843763865s ago: executing program 4 (id=991): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000000000006600000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00&'], 0x2c}}, 0x0) 1.843341414s ago: executing program 4 (id=992): timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) r1 = timerfd_create(0x1, 0x0) read(r1, &(0x7f0000002180)=""/262, 0x106) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) 1.795776844s ago: executing program 0 (id=993): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x1, 0xb38, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r1, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bee, 0x80000, 0x1000002, 0x141, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x100, 0x0, 0x8004146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e8b, 0x1000, 0xffffffff, 0x2fd, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x2, 0xc5, 0x0, r1}}], 0x1, 0x0, 0x0) 1.795411684s ago: executing program 2 (id=994): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x157) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) flock(r0, 0x6) write(r0, &(0x7f0000000000)='3', 0x4e) timer_create(0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) listxattr(&(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x0, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) 1.795191645s ago: executing program 1 (id=995): ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x1, @sdr={0x34362947, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 1.756226252s ago: executing program 1 (id=996): r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@enospc_debug}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@notreelog}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x70, 0x34, 0x70, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000104480)) 1.748798054s ago: executing program 2 (id=997): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a3000000000090002"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a"], 0xfdef) 1.655476273s ago: executing program 0 (id=998): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000003}, 0x20040010) 1.655160543s ago: executing program 4 (id=999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x100, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffd81) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe41) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 1.654944193s ago: executing program 0 (id=1000): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) syncfs(0xffffffffffffffff) 1.557371313s ago: executing program 3 (id=1001): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0), 0x802}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x3, 0x220104, 0xb, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 476.107493ms ago: executing program 4 (id=1002): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f00000001c0)) 403.273548ms ago: executing program 0 (id=1003): keyctl$get_security(0x11, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 402.863088ms ago: executing program 2 (id=1004): socket$alg(0x26, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r0, &(0x7f0000005a00)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@discard}, {@namecase}, {@dmask={'dmask', 0x3d, 0x3}}, {@gid={'gid', 0x3d, 0xee01}}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@keep_last_dots}, {@keep_last_dots}, {@discard}, {@time_offset={'time_offset', 0x3d, 0xbd}}, {@keep_last_dots}]}, 0x0, 0x1540, &(0x7f00000044c0)="$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") read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={0x0}, 0x1, 0x0, 0x0, 0x54}, 0x20000000) 303.749728ms ago: executing program 1 (id=1005): syz_open_dev$dri(&(0x7f0000000140), 0x23a, 0x101000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 87.778132ms ago: executing program 2 (id=1006): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 0s ago: executing program 2 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 28.965512][ T4316] cgroup: Unknown subsys name 'net' [ 29.277101][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.550494][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.212933][ T4333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.215482][ T4335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.217247][ T4335] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.218998][ T4335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.220698][ T4335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.227082][ T4342] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.228806][ T4342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.230485][ T4342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.232155][ T4342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.233877][ T4342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.235867][ T4342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.237452][ T4342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.239075][ T4342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.240627][ T4342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.242182][ T4342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.243685][ T4342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.245795][ T4342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.248275][ T4342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.249940][ T4342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.251439][ T4342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.253072][ T4342] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.254604][ T4342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.256656][ T4342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.257659][ T4343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.259749][ T4342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.260828][ T4344] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.265748][ T4344] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.270498][ T4344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.273173][ T4344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.295069][ T4344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.406988][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 30.425879][ T4338] chnl_net:caif_netlink_parms(): no params data found [ 30.445520][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.451502][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.460502][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 30.471596][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.473123][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.477178][ T4339] device bridge_slave_0 entered promiscuous mode [ 30.493466][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.497164][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.499063][ T4339] device bridge_slave_1 entered promiscuous mode [ 30.508199][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.509758][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.511597][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.518979][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.520519][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.522413][ T4338] device bridge_slave_0 entered promiscuous mode [ 30.526317][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.527899][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.529651][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.537796][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.539245][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.541105][ T4338] device bridge_slave_1 entered promiscuous mode [ 30.546050][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.556765][ T4338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.559360][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.563329][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.565077][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.566922][ T4332] device bridge_slave_0 entered promiscuous mode [ 30.568899][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.570482][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.572364][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.577409][ T4338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.580432][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.582548][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.584023][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.586162][ T4332] device bridge_slave_1 entered promiscuous mode [ 30.587936][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.589518][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.591452][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.597618][ T4338] team0: Port device team_slave_0 added [ 30.599707][ T4338] team0: Port device team_slave_1 added [ 30.608245][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.614097][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.615620][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.620965][ T4338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.624183][ T4339] team0: Port device team_slave_0 added [ 30.626281][ T4339] team0: Port device team_slave_1 added [ 30.627652][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.629224][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.635566][ T4338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.648499][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.653147][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.657991][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.662190][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.663591][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.669835][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.676822][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.679477][ T4329] team0: Port device team_slave_0 added [ 30.681415][ T4329] team0: Port device team_slave_1 added [ 30.688981][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.690352][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.698130][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.706332][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.707670][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.712857][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.755994][ T4338] device hsr_slave_0 entered promiscuous mode [ 30.804941][ T4338] device hsr_slave_1 entered promiscuous mode [ 30.848341][ T4328] team0: Port device team_slave_0 added [ 30.849843][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.851409][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.859802][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.863793][ T4332] team0: Port device team_slave_0 added [ 30.865714][ T4328] team0: Port device team_slave_1 added [ 30.869518][ T4332] team0: Port device team_slave_1 added [ 30.879618][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.880986][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.886398][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.898306][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.899886][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.905845][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.966335][ T4339] device hsr_slave_0 entered promiscuous mode [ 31.004928][ T4339] device hsr_slave_1 entered promiscuous mode [ 31.064815][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.066484][ T4339] Cannot create hsr debugfs directory [ 31.073660][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.075296][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.080876][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.083940][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.085605][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.091319][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.148016][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.184927][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.234798][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.236422][ T4329] Cannot create hsr debugfs directory [ 31.285964][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.324909][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.364775][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.366363][ T4328] Cannot create hsr debugfs directory [ 31.445829][ T4332] device hsr_slave_0 entered promiscuous mode [ 31.484957][ T4332] device hsr_slave_1 entered promiscuous mode [ 31.524793][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.526360][ T4332] Cannot create hsr debugfs directory [ 31.588778][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.615813][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.656086][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.701558][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.760503][ T4339] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.796252][ T4339] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.860370][ T4339] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.906553][ T4339] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.979891][ T4338] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.017985][ T4338] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.077876][ T4338] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.116139][ T4328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.155750][ T4328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.195730][ T4328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.236915][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.238428][ T4338] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.276804][ T4328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.335025][ T4344] Bluetooth: hci4: command 0x0409 tx timeout [ 32.335150][ T4337] Bluetooth: hci3: command 0x0409 tx timeout [ 32.336402][ T4344] Bluetooth: hci1: command 0x0409 tx timeout [ 32.337674][ T4337] Bluetooth: hci0: command 0x0409 tx timeout [ 32.345360][ T4337] Bluetooth: hci2: command 0x0409 tx timeout [ 32.347752][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.349961][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.352174][ T4332] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.370638][ T4332] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.415802][ T4332] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.457798][ T4332] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.497044][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.500142][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.509964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.512135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.514150][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.515722][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.517905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.519901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.521574][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.523042][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.531286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.533182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.535169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.538877][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.543348][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.546018][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.551750][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.553805][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.556658][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.558743][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.560544][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.562056][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.569763][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.571662][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.573506][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.576233][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.578115][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.580069][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.582053][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.583622][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.587690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.589687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.597946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.600016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.611299][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.613338][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.616179][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.618210][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.620019][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.623401][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.636013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.638074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.642563][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.650834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.652909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.658909][ T4339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.661434][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.666294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.668325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.671988][ T4338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.676741][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.682772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.684554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.688426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.690166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.703817][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.705785][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.709407][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.711475][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.714089][ T4338] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.717210][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.719318][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.721051][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.722582][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.734386][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.740868][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.742518][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.747926][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.749895][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.752396][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.753877][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.756139][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.758031][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.759909][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.761549][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.763255][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.765532][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.767469][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.769031][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.779726][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.781795][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.783510][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.787015][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.788902][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.790481][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.792279][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.794180][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.796309][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.797885][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.799810][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.801471][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.804595][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.807924][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.818994][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.821076][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.823038][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.825314][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.833171][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.836229][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.838306][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.840363][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.842150][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.844150][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.846993][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.853397][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.855557][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.857389][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.859929][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.861695][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.863564][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.866553][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.868306][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.870062][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.872006][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.881200][ T4332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.883348][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.887049][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.888875][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.890689][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.892674][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.894587][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.898587][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.900483][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.902268][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.904107][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.910651][ T4328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.912826][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.916423][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.920511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.922338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.924274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.927008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.929030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.931053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.932985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.940341][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.942126][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.968379][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.970304][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.972465][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.974280][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.984076][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.987035][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.988803][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.990465][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.993009][ T4329] device veth0_vlan entered promiscuous mode [ 32.997393][ T4339] device veth0_vlan entered promiscuous mode [ 33.008329][ T4339] device veth1_vlan entered promiscuous mode [ 33.016946][ T4329] device veth1_vlan entered promiscuous mode [ 33.033317][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.035402][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.037047][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.038776][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.040476][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.042168][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.060017][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.061971][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.063949][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.066907][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.069682][ T4329] device veth0_macvtap entered promiscuous mode [ 33.071978][ T4339] device veth0_macvtap entered promiscuous mode [ 33.076428][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.079434][ T4329] device veth1_macvtap entered promiscuous mode [ 33.082251][ T4339] device veth1_macvtap entered promiscuous mode [ 33.088120][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.089896][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.091677][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.093560][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.098889][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.100499][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.109963][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.111532][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.114058][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.124505][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.127323][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.129148][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.131147][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.133149][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.139446][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.146082][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.148238][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.157567][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.159414][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.161282][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.163089][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.166272][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.170432][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.173135][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.177373][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.179039][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.180783][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.184196][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.186259][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.187939][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.189788][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.192278][ T4332] device veth0_vlan entered promiscuous mode [ 33.199005][ T4332] device veth1_vlan entered promiscuous mode [ 33.209476][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.211665][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.214187][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.219191][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.221019][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.222906][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.226921][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.229089][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.238605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.240357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.242278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.244352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.247164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.249093][ T4338] device veth0_vlan entered promiscuous mode [ 33.256009][ T4339] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.257911][ T4339] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.259788][ T4339] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.261766][ T4339] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.267605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.269602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.272204][ T4338] device veth1_vlan entered promiscuous mode [ 33.278827][ T4332] device veth0_macvtap entered promiscuous mode [ 33.291391][ T4332] device veth1_macvtap entered promiscuous mode [ 33.296138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.297971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.299771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.301612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.303397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.305590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.312154][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.314347][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.329824][ T4338] device veth0_macvtap entered promiscuous mode [ 33.331891][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.333715][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.336526][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.338437][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.341270][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.351498][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.353758][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.358832][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.360995][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.363654][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.366337][ T4328] device veth0_vlan entered promiscuous mode [ 33.369757][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.371425][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.372255][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.375461][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.377317][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.379498][ T4338] device veth1_macvtap entered promiscuous mode [ 33.392478][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.394682][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.397304][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.399394][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.402015][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.408439][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.410226][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.412416][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.418537][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.420594][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.422445][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.424458][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.429350][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.431417][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.433890][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.436313][ T4332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.438049][ T4332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.439962][ T4332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.441764][ T4332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.448873][ T4328] device veth1_vlan entered promiscuous mode [ 33.450727][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.452659][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.454650][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.460554][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.460668][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.462253][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.464353][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.468234][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.470298][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.472413][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.474621][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.477988][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.481092][ T4338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.482716][ T4338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.484396][ T4338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.486431][ T4338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.489476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.491230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.493081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.510357][ T271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.512054][ T271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.518346][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.550083][ T271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.551738][ T271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.553838][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.563671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.565808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.569355][ T4328] device veth0_macvtap entered promiscuous mode [ 33.578545][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.580228][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.582357][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.584218][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.599203][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.600844][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.603128][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.608183][ T4328] device veth1_macvtap entered promiscuous mode [ 33.609599][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.611253][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.614348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.616445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.636061][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.637689][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.639376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.641689][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.644085][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.647369][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.649785][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.651840][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.654076][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.656658][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.658901][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.661906][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.663861][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.666981][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.692950][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.697797][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.699848][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.707073][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.709014][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.711101][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.713133][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.717063][ T4415] loop0: detected capacity change from 0 to 1024 [ 33.719890][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.722662][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.735247][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.737553][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.753145][ T4328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.755654][ T4328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.757360][ T4328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.759226][ T4328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.791048][ T4410] loop1: detected capacity change from 0 to 32768 [ 33.792269][ T4415] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.843127][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.844661][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.848042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.860017][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.861775][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.863960][ T271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.882808][ T4413] loop3: detected capacity change from 0 to 32768 [ 33.905209][ T4410] XFS (loop1): Mounting V5 Filesystem [ 33.914511][ T4413] XFS (loop3): Mounting V5 Filesystem [ 33.951896][ T4410] XFS (loop1): Ending clean mount [ 33.967852][ T4410] XFS (loop1): Quotacheck needed: Please wait. [ 33.980617][ T4410] XFS (loop1): Quotacheck: Done. [ 34.043258][ T4413] XFS (loop3): Ending clean mount [ 34.049490][ T4413] XFS (loop3): Quotacheck needed: Please wait. [ 34.052931][ T4415] binder: 4414:4415 tried to acquire reference to desc 0, got 1 instead [ 34.067261][ T4413] XFS (loop3): Quotacheck: Done. [ 34.078199][ T4415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 34.091467][ T4415] binder: 4414:4415 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 34.531537][ T4445] loop4: detected capacity change from 0 to 1024 [ 34.539086][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 34.539120][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 34.541863][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 34.543242][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 34.544672][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 34.695412][ T4440] binder: 4414:4440 got reply transaction with bad transaction stack, transaction 5 has target 4414:0 [ 34.697886][ T4440] binder: 4414:4440 transaction reply to 0:0 failed 12/29201/-71, size 0-0 line 2978 [ 34.711807][ T4415] binder: 4414:4415 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 34.718173][ T4329] XFS (loop1): Unmounting Filesystem [ 34.739633][ T4447] binder: 4414:4447 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 34.742245][ T4447] binder: 4447 RLIMIT_NICE not set [ 34.748433][ T4415] binder: 4414:4415 got transaction to invalid handle, 2 [ 34.750076][ T4415] binder: 4415:4414 cannot find target node [ 34.751490][ T4415] binder: 4414:4415 transaction async to 0:0 failed 13/29201/-22, size 88-24 line 3062 [ 34.766790][ T4445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 34.809071][ T4417] loop2: detected capacity change from 0 to 32768 [ 34.841017][ T4417] XFS (loop2): Mounting V5 Filesystem [ 34.846367][ T4411] binder: release 4414:4440 transaction 5 out, still active [ 34.850354][ T4411] binder: undelivered TRANSACTION_COMPLETE [ 34.851727][ T4411] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.862433][ T4411] binder: send failed reply for transaction 5, target dead [ 34.875701][ T4417] XFS (loop2): Ending clean mount [ 34.879042][ T4417] XFS (loop2): Quotacheck needed: Please wait. [ 35.049950][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 35.067927][ T4417] XFS (loop2): Quotacheck: Done. [ 35.166836][ T4339] XFS (loop3): Unmounting Filesystem [ 35.215593][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 35.327476][ T4465] syz.4.9 uses obsolete (PF_INET,SOCK_PACKET) [ 35.799118][ T4470] loop0: detected capacity change from 0 to 1024 [ 36.000163][ T4338] XFS (loop2): Unmounting Filesystem [ 36.009568][ T4470] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.153656][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 36.230702][ T4488] loop0: detected capacity change from 0 to 8192 [ 36.254574][ T4488] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 36.266278][ T4488] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 36.270635][ T4488] REISERFS (device loop0): using ordered data mode [ 36.271898][ T4488] reiserfs: using flush barriers [ 36.287671][ T4488] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 36.291222][ T4488] REISERFS (device loop0): checking transaction log (loop0) [ 36.306800][ T4488] REISERFS (device loop0): Using r5 hash to sort names [ 36.316904][ T4488] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 36.380781][ T4486] loop3: detected capacity change from 0 to 40427 [ 36.773072][ T4342] Bluetooth: hci1: command 0x040f tx timeout [ 36.774538][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 36.774558][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 36.774576][ T4333] Bluetooth: hci4: command 0x040f tx timeout [ 36.774592][ T4344] Bluetooth: hci0: command 0x040f tx timeout [ 36.826454][ T4486] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 36.928037][ T4486] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.004840][ T4486] F2FS-fs (loop3): invalid crc value [ 37.079267][ T4486] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.179664][ T4486] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.181141][ T4486] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 37.221147][ T4499] loop2: detected capacity change from 0 to 32768 [ 37.335772][ T4509] loop1: detected capacity change from 0 to 1024 [ 37.539591][ T4509] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.577868][ T4499] XFS (loop2): Mounting V5 Filesystem [ 37.581420][ T4508] XFS (loop0): Mounting V5 Filesystem [ 37.619137][ T4508] XFS (loop0): Ending clean mount [ 37.621764][ T4508] XFS (loop0): Quotacheck needed: Please wait. [ 37.639764][ T4508] XFS (loop0): Quotacheck: Done. [ 37.653682][ T4499] XFS (loop2): Ending clean mount [ 37.659952][ T4499] XFS (loop2): Quotacheck needed: Please wait. [ 37.671226][ T4499] XFS (loop2): Quotacheck: Done. [ 37.683694][ T4486] syz.3.8: attempt to access beyond end of device [ 37.683694][ T4486] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 37.779904][ T4379] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 37.782599][ T4379] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 38.143018][ T4332] XFS (loop0): Unmounting Filesystem [ 38.181735][ T4338] XFS (loop2): Unmounting Filesystem [ 38.217787][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 38.362093][ T4535] XFS (loop3): Mounting V5 Filesystem [ 38.689574][ T4535] XFS (loop3): Ending clean mount [ 38.701293][ T4535] XFS (loop3): Quotacheck needed: Please wait. [ 38.710939][ T4547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.749154][ T4535] XFS (loop3): Quotacheck: Done. [ 38.792966][ T4551] set_capacity_and_notify: 3 callbacks suppressed [ 38.792974][ T4551] loop0: detected capacity change from 0 to 32768 [ 38.798314][ T4551] XFS (loop0): Mounting V5 Filesystem [ 38.815354][ T4335] Bluetooth: hci3: command 0x0419 tx timeout [ 38.815731][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 38.816603][ T4335] Bluetooth: hci2: command 0x0419 tx timeout [ 38.818643][ T4342] Bluetooth: hci4: command 0x0419 tx timeout [ 38.819225][ T4335] Bluetooth: hci0: command 0x0419 tx timeout [ 38.830274][ T4551] XFS (loop0): Ending clean mount [ 38.832146][ T4551] XFS (loop0): Quotacheck needed: Please wait. [ 38.921929][ T4551] XFS (loop0): Quotacheck: Done. [ 39.231017][ T4339] XFS (loop3): Unmounting Filesystem [ 39.285005][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 39.429420][ T4570] loop1: detected capacity change from 0 to 32768 [ 39.439931][ T4570] (syz.1.20,4570,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 39.443739][ T4570] (syz.1.20,4570,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 39.452600][ T4570] JBD2: Ignoring recovery information on journal [ 39.483816][ T4570] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 39.568082][ T4575] ======================================================= [ 39.568082][ T4575] WARNING: The mand mount option has been deprecated and [ 39.568082][ T4575] and is ignored by this kernel. Remove the mand [ 39.568082][ T4575] option from the mount to silence this warning. [ 39.568082][ T4575] ======================================================= [ 39.570746][ T4332] XFS (loop0): Unmounting Filesystem [ 39.579447][ T4575] (syz.1.20,4575,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "0xffffffffffffffff01777777777777777777777ct]B+ vrQ J_+;F;5}kֶ%FZo'!$1@ǫ|n7!qEdz0p" or missing value [ 39.771384][ T4329] ocfs2: Unmounting device (7,1) on (node local) [ 39.984600][ T4580] loop2: detected capacity change from 0 to 32768 [ 40.048256][ T4580] XFS (loop2): Mounting V5 Filesystem [ 40.096693][ T4580] XFS (loop2): Ending clean mount [ 40.098360][ T4580] XFS (loop2): Quotacheck needed: Please wait. [ 40.110972][ T4584] loop0: detected capacity change from 0 to 32768 [ 40.129418][ T4580] XFS (loop2): Quotacheck: Done. [ 40.202136][ T4577] loop3: detected capacity change from 0 to 131072 [ 40.219346][ T4584] XFS (loop0): Mounting V5 Filesystem [ 40.225679][ T4577] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 40.227833][ T4577] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 40.245129][ T4577] F2FS-fs (loop3): invalid crc value [ 40.275638][ T4577] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.277913][ T4584] XFS (loop0): Ending clean mount [ 40.279811][ T4584] XFS (loop0): Quotacheck needed: Please wait. [ 40.289526][ T4584] XFS (loop0): Quotacheck: Done. [ 40.536992][ T4577] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 40.539285][ T4577] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 40.641753][ T4338] XFS (loop2): Unmounting Filesystem [ 41.012926][ T4332] XFS (loop0): Unmounting Filesystem [ 41.043143][ T4612] loop4: detected capacity change from 0 to 8192 [ 41.076633][ T4612] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 41.079919][ T4612] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 41.082056][ T4612] REISERFS (device loop4): using ordered data mode [ 41.083392][ T4612] reiserfs: using flush barriers [ 41.092346][ T4612] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 41.095736][ T4612] REISERFS (device loop4): checking transaction log (loop4) [ 41.115236][ T4612] REISERFS (device loop4): Using r5 hash to sort names [ 41.116768][ T4612] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 41.200896][ T4582] loop1: detected capacity change from 0 to 131072 [ 41.207426][ T4582] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 41.208858][ T4582] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 41.210850][ T4582] F2FS-fs (loop1): invalid crc value [ 41.213138][ T4582] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.224347][ T4582] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 41.230285][ T4582] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 41.826331][ T4625] hub 8-0:1.0: USB hub found [ 41.828445][ T4625] hub 8-0:1.0: 8 ports detected [ 42.266685][ T4623] loop0: detected capacity change from 0 to 32768 [ 42.430554][ T4633] loop3: detected capacity change from 0 to 1024 [ 42.690286][ T4634] loop4: detected capacity change from 0 to 1024 [ 42.947082][ T4633] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.966814][ T4634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 43.008389][ T4623] XFS (loop0): Mounting V5 Filesystem [ 43.442504][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 43.455456][ T4339] EXT4-fs (loop3): unmounting filesystem. [ 43.478155][ T4623] XFS (loop0): Ending clean mount [ 43.483522][ T4623] XFS (loop0): Quotacheck needed: Please wait. [ 43.534042][ T4623] XFS (loop0): Quotacheck: Done. [ 44.213994][ T4332] XFS (loop0): Unmounting Filesystem [ 44.238634][ T4662] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 44.396606][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 44.632982][ T4673] netlink: 'syz.0.34': attribute type 32 has an invalid length. [ 44.635732][ T4669] set_capacity_and_notify: 1 callbacks suppressed [ 44.635738][ T4669] loop1: detected capacity change from 0 to 40427 [ 44.645201][ T4669] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 44.646815][ T4669] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 44.653845][ T4669] F2FS-fs (loop1): invalid crc value [ 44.663182][ T4671] loop4: detected capacity change from 0 to 32768 [ 44.763209][ T4671] XFS (loop4): Mounting V5 Filesystem [ 44.765128][ T4669] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.772817][ T4651] loop2: detected capacity change from 0 to 131072 [ 44.782552][ T4651] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 44.783890][ T4651] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 44.789225][ T4669] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 44.790643][ T4669] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 44.791251][ T4651] F2FS-fs (loop2): invalid crc value [ 44.922577][ T4690] loop0: detected capacity change from 0 to 1024 [ 45.104653][ T4651] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.118217][ T4690] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 45.141785][ T4651] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 45.143226][ T4651] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 45.158174][ T4671] XFS (loop4): Ending clean mount [ 45.159865][ T4671] XFS (loop4): Quotacheck needed: Please wait. [ 45.177323][ T4671] XFS (loop4): Quotacheck: Done. [ 45.196256][ T4659] loop3: detected capacity change from 0 to 131072 [ 45.198976][ T4659] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 45.200570][ T4659] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 45.213629][ T4659] F2FS-fs (loop3): invalid crc value [ 45.222031][ T4669] syz.1.35: attempt to access beyond end of device [ 45.222031][ T4669] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 45.236875][ T4659] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.323331][ T4659] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 45.327693][ T4659] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 45.349452][ T4328] XFS (loop4): Unmounting Filesystem [ 45.352355][ T271] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 45.358650][ T271] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 45.546512][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 45.948723][ T4709] loop4: detected capacity change from 0 to 40427 [ 46.079880][ T4715] loop3: detected capacity change from 0 to 1024 [ 46.280817][ T4709] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 46.282549][ T4709] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 46.346842][ T4709] F2FS-fs (loop4): invalid crc value [ 46.359826][ T4715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.403194][ T4709] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.431106][ T4709] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 46.432628][ T4709] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 46.557325][ T4709] syz.4.38: attempt to access beyond end of device [ 46.557325][ T4709] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 46.624425][ T4666] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 46.627017][ T4666] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 46.693097][ T4339] EXT4-fs (loop3): unmounting filesystem. [ 46.814789][ T4705] loop0: detected capacity change from 0 to 131072 [ 46.822184][ T4705] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 46.823746][ T4705] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 46.826246][ T4705] F2FS-fs (loop0): invalid crc value [ 46.853686][ T4705] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.999922][ T4730] loop3: detected capacity change from 0 to 1024 [ 47.181543][ T4730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.183081][ T4705] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 47.185183][ T4705] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 47.250812][ T27] audit: type=1326 audit(47.230:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.4.44" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3979368 code=0x7ffc0000 [ 47.257025][ T27] audit: type=1326 audit(47.230:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.4.44" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa3979368 code=0x7ffc0000 [ 47.260819][ T4734] ip_tables: iptables: counters copy to user failed while replacing table [ 47.275210][ T27] audit: type=1326 audit(47.230:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.4.44" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3979368 code=0x7ffc0000 [ 47.293183][ T27] audit: type=1326 audit(47.230:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.4.44" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa3979368 code=0x7ffc0000 [ 47.313640][ T27] audit: type=1326 audit(47.240:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.4.44" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3979368 code=0x7ffc0000 [ 47.337700][ T27] audit: type=1326 audit(47.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.4.44" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3979368 code=0x7ffc0000 [ 47.356988][ T27] audit: type=1326 audit(47.240:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.4.44" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa3979368 code=0x7ffc0000 [ 47.366274][ T4711] loop2: detected capacity change from 0 to 131072 [ 47.368225][ T27] audit: type=1326 audit(47.250:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.4.44" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3979368 code=0x7ffc0000 [ 47.373595][ T4711] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 47.375202][ T4711] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 47.377469][ T27] audit: type=1326 audit(47.260:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.4.44" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa3979368 code=0x7ffc0000 [ 47.383532][ T27] audit: type=1326 audit(47.260:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.4.44" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3979368 code=0x7ffc0000 [ 47.389172][ T4711] F2FS-fs (loop2): invalid crc value [ 47.414243][ T4711] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.431396][ T4711] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 47.433037][ T4711] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 47.823253][ T4339] EXT4-fs (loop3): unmounting filesystem. [ 47.917996][ T4753] capability: warning: `syz.1.48' uses deprecated v2 capabilities in a way that may be insecure [ 47.970700][ T4753] ip_tables: iptables: counters copy to user failed while replacing table [ 48.144152][ T4755] XFS (loop3): Mounting V5 Filesystem [ 48.269972][ T4755] XFS (loop3): Ending clean mount [ 48.272764][ T4755] XFS (loop3): Quotacheck needed: Please wait. [ 48.598648][ T4755] XFS (loop3): Quotacheck: Done. [ 48.599659][ T4772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.707549][ T4339] XFS (loop3): Unmounting Filesystem [ 49.040244][ T4778] XFS (loop4): Mounting V5 Filesystem [ 49.088209][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 49.097688][ T4778] XFS (loop4): Ending clean mount [ 49.097902][ T4775] XFS (loop2): Mounting V5 Filesystem [ 49.099700][ T4778] XFS (loop4): Quotacheck needed: Please wait. [ 49.125048][ T4778] XFS (loop4): Quotacheck: Done. [ 49.480816][ T4800] SQUASHFS error: zlib decompression failed, data probably corrupt [ 49.516052][ T4775] XFS (loop2): Ending clean mount [ 49.529795][ T4800] SQUASHFS error: Failed to read block 0x9b: -5 [ 49.531424][ T4800] SQUASHFS error: Unable to read metadata cache entry [99] [ 49.533250][ T4800] SQUASHFS error: Unable to read inode 0x127 [ 49.835515][ T4770] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 49.841450][ T4770] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 49.850391][ T4770] overlayfs: conflicting lowerdir path [ 49.865174][ T4328] XFS (loop4): Unmounting Filesystem [ 49.870219][ T4806] set_capacity_and_notify: 5 callbacks suppressed [ 49.870227][ T4806] loop3: detected capacity change from 0 to 32768 [ 49.880565][ T4806] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.53 (4806) [ 49.914205][ T4806] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 49.916901][ T4806] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 49.919137][ T4806] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 49.921027][ T4806] BTRFS info (device loop3): use zstd compression, level 3 [ 49.924535][ T4806] BTRFS info (device loop3): using free space tree [ 49.954586][ T4338] XFS (loop2): Unmounting Filesystem [ 50.166507][ T4817] loop0: detected capacity change from 0 to 40427 [ 50.191471][ T4806] BTRFS info (device loop3): enabling ssd optimizations [ 50.202340][ T4817] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 50.203931][ T4817] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 50.235381][ T4817] F2FS-fs (loop0): invalid crc value [ 50.269431][ T4817] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.283655][ T4817] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 50.284205][ T4339] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 50.286299][ T4817] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 50.305410][ T4847] loop4: detected capacity change from 0 to 8 [ 50.308586][ T4847] SQUASHFS error: lzo decompression failed, data probably corrupt [ 50.337108][ T4847] SQUASHFS error: Failed to read block 0x144: -5 [ 50.342352][ T4847] SQUASHFS error: Unable to read metadata cache entry [142] [ 50.343771][ T4847] SQUASHFS error: Unable to read inode 0x11f [ 50.361355][ T4850] loop2: detected capacity change from 0 to 256 [ 50.422367][ T4322] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.437819][ T4817] syz.0.58: attempt to access beyond end of device [ 50.437819][ T4817] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 50.497724][ T4497] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 50.500812][ T4497] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 50.526310][ T4859] device bridge0 entered promiscuous mode [ 51.476478][ T4858] loop3: detected capacity change from 0 to 32768 [ 51.569617][ T4858] XFS (loop3): Mounting V5 Filesystem [ 51.661070][ T4858] XFS (loop3): Ending clean mount [ 51.662770][ T4858] XFS (loop3): Quotacheck needed: Please wait. [ 51.678869][ T4858] XFS (loop3): Quotacheck: Done. [ 51.783272][ T4881] fuse: Unknown parameter 'p' [ 51.815677][ T4862] loop4: detected capacity change from 0 to 32768 [ 51.903941][ T4862] XFS (loop4): Mounting V5 Filesystem [ 51.912708][ T4894] Zero length message leads to an empty skb [ 51.976861][ T4862] XFS (loop4): Ending clean mount [ 51.997393][ T4862] XFS (loop4): Quotacheck needed: Please wait. [ 52.028999][ T4862] XFS (loop4): Quotacheck: Done. [ 52.449544][ T4328] XFS (loop4): Unmounting Filesystem [ 52.568349][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 52.591700][ T4339] XFS (loop3): Unmounting Filesystem [ 52.642382][ T4920] loop2: detected capacity change from 0 to 512 [ 52.650487][ T4905] overlayfs: failed to resolve './file0': -2 [ 52.674070][ T4920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 52.680096][ T4925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.691597][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 52.723348][ T4929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 52.725966][ T4928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 52.819819][ T4942] device bridge0 entered promiscuous mode [ 52.827528][ T4946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.829420][ T4946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.349083][ T4958] loop4: detected capacity change from 0 to 1024 [ 53.568519][ T4958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 53.679506][ T4948] loop3: detected capacity change from 0 to 32768 [ 53.682796][ T4962] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 53.686379][ T4962] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 53.750337][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 53.785300][ T4948] XFS (loop3): Mounting V5 Filesystem [ 53.842143][ T4954] netlink: 88 bytes leftover after parsing attributes in process `syz.0.89'. [ 53.844306][ T4954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'. [ 53.847094][ T4954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.89'. [ 53.854080][ T4954] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 53.899087][ T4948] XFS (loop3): Ending clean mount [ 53.900743][ T4948] XFS (loop3): Quotacheck needed: Please wait. [ 53.932512][ T4948] XFS (loop3): Quotacheck: Done. [ 54.314521][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 54.314543][ T27] audit: type=1326 audit(54.280:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4982 comm="syz.4.95" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3979368 code=0x0 [ 54.419109][ T4987] xt_bpf: check failed: parse error [ 54.931376][ T4339] XFS (loop3): Unmounting Filesystem [ 54.940252][ T4978] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 54.956338][ T4978] CIFS mount error: No usable UNC path provided in device string! [ 54.956338][ T4978] [ 54.968436][ T4978] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 55.297708][ T4992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.98'. [ 55.358342][ T4999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 55.974254][ T5006] loop4: detected capacity change from 0 to 40427 [ 55.985855][ T5010] input: syz0 as /devices/virtual/input/input2 [ 55.992335][ T5010] binder: 5009:5010 tried to acquire reference to desc 0, got 1 instead [ 55.999077][ T5006] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 56.000550][ T5006] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 56.003115][ T5006] F2FS-fs (loop4): Unrecognized mount option "nor" or missing value [ 56.005536][ T5010] binder_alloc: 5009: pid 5009 spamming oneway? 2 buffers allocated for a total size of 5120 [ 56.116175][ T4849] binder: undelivered TRANSACTION_COMPLETE [ 56.117461][ T4849] binder: undelivered TRANSACTION_COMPLETE [ 56.130574][ T4849] binder: undelivered transaction 19, process died. [ 56.131886][ T4849] binder: undelivered transaction 18, process died. [ 56.208496][ T5008] loop2: detected capacity change from 0 to 32768 [ 56.232611][ T5016] loop3: detected capacity change from 0 to 4096 [ 56.313820][ T5006] loop4: detected capacity change from 0 to 40427 [ 56.318539][ T5016] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 56.320450][ T5006] F2FS-fs (loop4): invalid crc value [ 56.339917][ T5016] ntfs3: loop3: Failed to load $Extend. [ 56.342946][ T5006] F2FS-fs (loop4): Found nat_bits in checkpoint [ 56.486324][ T5024] loop2: detected capacity change from 0 to 1024 [ 56.689551][ T5006] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 56.691911][ T5024] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 56.716522][ T5006] F2FS-fs (loop4): Corrupted max_depth of 3: 4294967295 [ 56.752266][ T5033] FAULT_INJECTION: forcing a failure. [ 56.752266][ T5033] name failslab, interval 1, probability 0, space 0, times 1 [ 56.761381][ T5033] CPU: 1 PID: 5033 Comm: syz.3.107 Not tainted syzkaller #0 [ 56.762942][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 56.765215][ T5033] Call trace: [ 56.765970][ T5033] dump_backtrace+0x1c4/0x1f0 [ 56.767080][ T5033] show_stack+0x2c/0x3c [ 56.768043][ T5033] __dump_stack+0x30/0x40 [ 56.769055][ T5033] dump_stack_lvl+0xf4/0x15c [ 56.770120][ T5033] dump_stack+0x1c/0x5c [ 56.771091][ T5033] should_fail_ex+0x3cc/0x524 [ 56.772181][ T5033] __should_failslab+0xc0/0x11c [ 56.773401][ T5033] should_failslab+0x10/0x28 [ 56.774513][ T5033] __kmem_cache_alloc_node+0x7c/0x318 [ 56.775782][ T5033] kmalloc_trace+0x48/0x94 [ 56.776884][ T5033] rtnl_newlink+0xf4/0x1af0 [ 56.778045][ T5033] rtnetlink_rcv_msg+0x694/0xcc4 [ 56.779310][ T5033] netlink_rcv_skb+0x220/0x3ec [ 56.780528][ T5033] rtnetlink_rcv+0x28/0x38 [ 56.781659][ T5033] netlink_unicast+0x5fc/0x80c [ 56.782901][ T5033] netlink_sendmsg+0x6f0/0x9d8 [ 56.784059][ T5033] ____sys_sendmsg+0x588/0x90c [ 56.785221][ T5033] __sys_sendmsg+0x288/0x374 [ 56.786341][ T5033] __arm64_sys_sendmsg+0x80/0x94 [ 56.787548][ T5033] invoke_syscall+0x98/0x290 [ 56.788670][ T5033] el0_svc_common+0x13c/0x258 [ 56.789803][ T5033] do_el0_svc+0x5c/0x134 [ 56.790835][ T5033] el0_svc+0x58/0x128 [ 56.791806][ T5033] el0t_64_sync_handler+0x84/0xf0 [ 56.793016][ T5033] el0t_64_sync+0x18c/0x190 [ 57.115466][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 57.236245][ T5052] fuse: Bad value for 'fd' [ 57.237820][ T5052] process 'syz.1.112' launched './file0' with NULL argv: empty string added [ 57.523924][ T5057] hub 8-0:1.0: USB hub found [ 57.525395][ T5057] hub 8-0:1.0: 8 ports detected [ 57.656134][ T5058] loop2: detected capacity change from 0 to 1024 [ 57.972381][ T5058] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.370051][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 58.445646][ T5075] overlayfs: failed to clone upperpath [ 58.446736][ T5077] loop4: detected capacity change from 0 to 164 [ 58.466436][ T5075] overlayfs: missing 'lowerdir' [ 58.485830][ T4318] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.644294][ T5073] loop2: detected capacity change from 0 to 32768 [ 58.722887][ T5081] loop4: detected capacity change from 0 to 32768 [ 58.737516][ T5073] XFS (loop2): Mounting V5 Filesystem [ 58.990819][ T5096] loop3: detected capacity change from 0 to 1024 [ 59.035316][ T5081] XFS (loop4): Mounting V5 Filesystem [ 59.112978][ T5096] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 59.143113][ T5081] XFS (loop4): Ending clean mount [ 59.188126][ T5073] XFS (loop2): Ending clean mount [ 59.191681][ T5073] XFS (loop2): Quotacheck needed: Please wait. [ 59.211093][ T5073] XFS (loop2): Quotacheck: Done. [ 59.614314][ T4338] XFS (loop2): Unmounting Filesystem [ 59.651630][ T4339] EXT4-fs (loop3): unmounting filesystem. [ 59.693523][ T5118] trusted_key: encrypted_key: master key parameter '' is invalid [ 59.722763][ T4328] XFS (loop4): Unmounting Filesystem [ 59.820044][ T5122] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 59.821876][ T5122] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 59.832177][ T5122] F2FS-fs (loop3): invalid crc value [ 59.862732][ T5122] F2FS-fs (loop3): Found nat_bits in checkpoint [ 59.953359][ T5122] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 59.956467][ T5122] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 59.983588][ T5138] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 59.986667][ T5138] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 60.275050][ T5122] syz.3.128: attempt to access beyond end of device [ 60.275050][ T5122] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 60.292736][ T5138] netlink: 'syz.2.127': attribute type 29 has an invalid length. [ 60.299191][ T5138] netlink: 'syz.2.127': attribute type 29 has an invalid length. [ 60.301140][ T4379] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 60.303612][ T4379] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 60.304833][ T5138] netlink: 'syz.2.127': attribute type 29 has an invalid length. [ 60.670819][ T5147] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.133 (5147) [ 60.691638][ T5147] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 60.738324][ T5147] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 60.743782][ T5147] BTRFS error (device loop4): unrecognized mount option './proc/thread-self/fail-nth' [ 60.755455][ T5147] BTRFS error (device loop4): open_ctree failed: -22 [ 60.770428][ T4318] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4318) [ 60.983195][ T5173] fuse: Bad value for 'fd' [ 61.059760][ T5147] set_capacity_and_notify: 2 callbacks suppressed [ 61.059769][ T5147] loop4: detected capacity change from 0 to 32768 [ 61.079861][ T5147] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 61.087795][ T5147] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 61.097708][ T5147] BTRFS error (device loop4): unrecognized mount option './proc/thread-self/fail-nth' [ 61.106309][ T5147] BTRFS error (device loop4): open_ctree failed: -22 [ 61.174611][ T4318] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4318) [ 61.682355][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 61.721588][ T5197] binder: 5197 RLIMIT_NICE not set [ 62.049838][ T5212] loop2: detected capacity change from 0 to 1024 [ 62.295178][ T5212] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 62.579612][ T5229] loop4: detected capacity change from 0 to 1024 [ 62.958975][ T4338] EXT4-fs (loop2): unmounting filesystem. [ 62.970317][ T5236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.151'. [ 63.108223][ T5238] loop2: detected capacity change from 0 to 32768 [ 63.128720][ T5248] jffs2: notice: (5248) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 63.136469][ T5238] XFS (loop2): Mounting V5 Filesystem [ 63.214290][ T5238] XFS (loop2): Ending clean mount [ 63.219029][ T5238] XFS (loop2): Quotacheck needed: Please wait. [ 63.238773][ T5238] XFS (loop2): Quotacheck: Done. [ 63.266942][ T5261] netlink: 48 bytes leftover after parsing attributes in process `syz.3.157'. [ 63.269507][ T5261] netlink: 48 bytes leftover after parsing attributes in process `syz.3.157'. [ 63.664306][ T5268] loop4: detected capacity change from 0 to 2048 [ 63.691240][ T5268] NILFS (loop4): invalid segment: Magic number mismatch [ 63.696113][ T5268] NILFS (loop4): trying rollback from an earlier position [ 63.714362][ T5268] NILFS (loop4): recovery complete [ 63.725939][ T5269] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.839795][ T4338] XFS (loop2): Unmounting Filesystem [ 63.938770][ T5279] netlink: 32 bytes leftover after parsing attributes in process `syz.4.164'. [ 64.340218][ T5288] loop2: detected capacity change from 0 to 32768 [ 64.368874][ T5288] XFS (loop2): Mounting V5 Filesystem [ 64.418429][ T5288] XFS (loop2): Ending clean mount [ 64.420619][ T5288] XFS (loop2): Quotacheck needed: Please wait. [ 64.438144][ T5288] XFS (loop2): Quotacheck: Done. [ 64.496308][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.497946][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.898189][ T5314] device syzkaller0 entered promiscuous mode [ 64.973811][ T5303] netlink: 'syz.3.171': attribute type 1 has an invalid length. [ 65.628887][ T5326] loop4: detected capacity change from 0 to 40427 [ 65.633657][ T5326] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 65.639334][ T5326] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 65.643911][ T5326] F2FS-fs (loop4): invalid crc value [ 65.657320][ T5326] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.672254][ T5340] device bridge0 entered promiscuous mode [ 65.673775][ T5326] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 65.675498][ T5326] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.698331][ T4338] XFS (loop2): Unmounting Filesystem [ 65.743912][ T5326] syz.4.180: attempt to access beyond end of device [ 65.743912][ T5326] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 65.768211][ T105] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 65.770575][ T105] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 65.778457][ T5344] overlayfs: missing 'lowerdir' [ 66.043924][ T5352] loop2: detected capacity change from 0 to 2048 [ 66.097238][ T5352] loop2: p1 < > p4 [ 66.099530][ T5352] loop2: p4 size 8388608 extends beyond EOD, truncated [ 66.112665][ T5346] overlayfs: failed to resolve './file0': -2 [ 66.171496][ T27] audit: type=1326 audit(66.150:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.0.187" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f579368 code=0x7ffc0000 [ 66.177104][ T27] audit: type=1326 audit(66.160:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.0.187" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f579368 code=0x7ffc0000 [ 66.195230][ T27] audit: type=1326 audit(66.160:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.0.187" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff7f579368 code=0x7ffc0000 [ 66.222920][ T27] audit: type=1326 audit(66.160:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.0.187" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff7f579368 code=0x7ffc0000 [ 66.235880][ T5348] overlayfs: failed to resolve './file0': -2 [ 66.601686][ T5385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.195'. [ 66.680282][ T5382] loop2: detected capacity change from 0 to 40427 [ 66.698710][ T5382] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 66.700495][ T5382] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 66.702603][ T5382] F2FS-fs (loop2): invalid crc value [ 66.709539][ T5382] F2FS-fs (loop2): Found nat_bits in checkpoint [ 66.739023][ T5382] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 66.740606][ T5382] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 66.794390][ T5384] overlayfs: failed to resolve './file0': -2 [ 66.803288][ T5382] syz.2.196: attempt to access beyond end of device [ 66.803288][ T5382] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 66.818248][ T4773] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 66.820802][ T4773] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 67.946082][ T5419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.205'. [ 67.965785][ T5423] syz.1.210 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.989651][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.000840][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.012210][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.023328][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.035631][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.043075][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.053835][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.063068][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.072082][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.077067][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.082632][ T5413] overlayfs: failed to resolve './file0': -2 [ 68.087140][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.090853][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.101074][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.102821][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.111121][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.113845][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.117561][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.120255][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.124093][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.127857][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.131701][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.136124][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.139883][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.142584][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.146426][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.149071][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.152806][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.161841][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.170932][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.176122][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.181871][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.191870][ T5424] overlayfs: failed to resolve './file0': -2 [ 68.198872][ T5424] overlayfs: failed to resolve './file0': -2 [ 69.055534][ T4342] Bluetooth: hci2: command 0x0406 tx timeout [ 69.618777][ T112] cfg80211: failed to load regulatory.db [ 69.948624][ T5504] tmpfs: Bad value for 'nr_inodes' [ 69.973380][ T5509] device bridge0 entered promiscuous mode [ 70.827381][ T5542] tipc: Enabling of bearer rejected, failed to enable media [ 71.335252][ T5559] device bridge0 entered promiscuous mode [ 71.385082][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 71.822445][ T5582] fuse: Unknown parameter '0xffffffffffffffff' [ 72.169808][ T5557] mpoa:mpoad_close: () going down [ 72.757730][ T5616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.265'. [ 74.287601][ T5605] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 74.692740][ T5654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.277'. [ 75.492384][ T5676] xt_hashlimit: size too large, truncated to 1048576 [ 75.543846][ T5678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 76.107122][ T5684] tipc: Invalid UDP bearer configuration [ 76.107147][ T5684] tipc: Enabling of bearer rejected, failed to enable media [ 76.574339][ T5694] netlink: 44 bytes leftover after parsing attributes in process `syz.0.290'. [ 76.633594][ T5714] x_tables: duplicate underflow at hook 1 [ 79.337329][ T5781] netlink: 'syz.3.321': attribute type 3 has an invalid length. [ 79.351494][ T5787] batman_adv: batadv0: Adding interface: veth0 [ 79.352875][ T5787] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.375718][ T5787] batman_adv: batadv0: Interface activated: veth0 [ 79.378400][ T5788] batman_adv: batadv0: Interface deactivated: veth0 [ 79.379867][ T5788] batman_adv: batadv0: Removing interface: veth0 [ 79.388152][ T5788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.389792][ T5788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.391891][ T5788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.394061][ T5788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.758595][ T5813] fuse: Bad value for 'fd' [ 81.099904][ T5857] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20001 [ 81.342186][ C1] vcan0: j1939_tp_rxtimer: 0x000000007bcd6f32: rx timeout, send abort [ 81.942945][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c80b58b0: rx timeout, send abort [ 81.944574][ C1] vcan0: j1939_tp_rxtimer: 0x000000007bcd6f32: abort rx timeout. Force session deactivation [ 82.288513][ T5880] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117.87.150326315.2007.15776.1 [ 82.291078][ T5880] PKCS7: Only support pkcs7_signedData type [ 82.444551][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c80b58b0: abort rx timeout. Force session deactivation [ 84.326978][ T5940] FAULT_INJECTION: forcing a failure. [ 84.326978][ T5940] name failslab, interval 1, probability 0, space 0, times 0 [ 84.329603][ T5940] CPU: 0 PID: 5940 Comm: syz.3.373 Not tainted syzkaller #0 [ 84.331149][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 84.333478][ T5940] Call trace: [ 84.334253][ T5940] dump_backtrace+0x1c4/0x1f0 [ 84.335374][ T5940] show_stack+0x2c/0x3c [ 84.336442][ T5940] __dump_stack+0x30/0x40 [ 84.337546][ T5940] dump_stack_lvl+0xf4/0x15c [ 84.338691][ T5940] dump_stack+0x1c/0x5c [ 84.339744][ T5940] should_fail_ex+0x3cc/0x524 [ 84.340908][ T5940] __should_failslab+0xc0/0x11c [ 84.342130][ T5940] should_failslab+0x10/0x28 [ 84.343226][ T5940] slab_pre_alloc_hook+0x6c/0x31c [ 84.344446][ T5940] kmem_cache_alloc_lru+0x60/0x284 [ 84.345666][ T5940] sock_alloc_inode+0x2c/0xcc [ 84.346772][ T5940] new_inode_pseudo+0x68/0x1cc [ 84.347887][ T5940] __sock_create+0x138/0x8a8 [ 84.348950][ T5940] __sys_socketpair+0x2ec/0x6d8 [ 84.350077][ T5940] __arm64_sys_socketpair+0xa0/0xbc [ 84.351303][ T5940] invoke_syscall+0x98/0x290 [ 84.352395][ T5940] el0_svc_common+0x13c/0x258 [ 84.353477][ T5940] do_el0_svc+0x5c/0x134 [ 84.354481][ T5940] el0_svc+0x58/0x128 [ 84.355418][ T5940] el0t_64_sync_handler+0x84/0xf0 [ 84.356579][ T5940] el0t_64_sync+0x18c/0x190 [ 84.359809][ T27] audit: type=1326 audit(84.340:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5942 comm="syz.2.374" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f79368 code=0x0 [ 84.370673][ T5940] socket: no more sockets [ 84.488596][ T5948] 9pnet_fd: Insufficient options for proto=fd [ 86.065792][ T5984] 9pnet_fd: Insufficient options for proto=fd [ 87.105466][ T6036] ip_tables: iptables: counters copy to user failed while replacing table [ 87.420449][ T6069] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 87.465791][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 88.040962][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 88.090101][ T6102] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 88.157346][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 88.230571][ T6118] tipc: Started in network mode [ 88.231811][ T6118] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 88.243232][ T6118] tipc: Enabled bearer , priority 0 [ 88.583549][ T4335] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 88.586565][ T4335] Bluetooth: hci0: Injecting HCI hardware error event [ 88.589112][ T4335] Bluetooth: hci0: hardware error 0x00 [ 88.779000][ T6136] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 88.851621][ T6140] device syz_tun entered promiscuous mode [ 89.357765][ T24] tipc: Node number set to 11578026 [ 89.737992][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 90.814883][ T4335] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 92.893891][ T6288] futex_wake_op: syz.1.479 tries to shift op by 144; fix this program [ 93.007036][ T6303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.480'. [ 93.933967][ T4338] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 93.945109][ T4338] CPU: 0 PID: 4338 Comm: syz-executor Not tainted syzkaller #0 [ 93.946799][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.948965][ T4338] Call trace: [ 93.949654][ T4338] dump_backtrace+0x1c4/0x1f0 [ 93.950664][ T4338] show_stack+0x2c/0x3c [ 93.951539][ T4338] __dump_stack+0x30/0x40 [ 93.952426][ T4338] dump_stack_lvl+0xf4/0x15c [ 93.953371][ T4338] dump_stack+0x1c/0x5c [ 93.954268][ T4338] dump_header+0xc0/0x724 [ 93.955178][ T4338] oom_kill_process+0x35c/0x660 [ 93.956180][ T4338] out_of_memory+0xbf0/0xf70 [ 93.957133][ T4338] mem_cgroup_out_of_memory+0x228/0x2d0 [ 93.958306][ T4338] try_charge_memcg+0xa4c/0x1390 [ 93.959344][ T4338] charge_memcg+0xa4/0x1f0 [ 93.960267][ T4338] mem_cgroup_swapin_charge_folio+0x270/0x3d4 [ 93.961534][ T4338] __read_swap_cache_async+0x378/0x688 [ 93.962681][ T4338] swapin_readahead+0x58c/0xa48 [ 93.963695][ T4338] do_swap_page+0x2c0/0x2340 [ 93.964660][ T4338] handle_mm_fault+0x11e4/0x3018 [ 93.965700][ T4338] do_page_fault+0x310/0x99c [ 93.966657][ T4338] do_translation_fault+0x94/0xc8 [ 93.967724][ T4338] do_mem_abort+0x70/0x198 [ 93.968638][ T4338] el0_da+0x70/0x144 [ 93.969454][ T4338] el0t_64_sync_handler+0x90/0xf0 [ 93.970486][ T4338] el0t_64_sync+0x18c/0x190 [ 94.001959][ T4338] memory: usage 307200kB, limit 307200kB, failcnt 4408 [ 94.004974][ T4338] memory+swap: usage 323984kB, limit 9007199254740988kB, failcnt 0 [ 94.008990][ T4338] kmem: usage 307088kB, limit 9007199254740988kB, failcnt 0 [ 94.011798][ T4338] Memory cgroup stats for /syz2: [ 94.012952][ T4338] anon 0 [ 94.012952][ T4338] file 114688 [ 94.012952][ T4338] kernel 314458112 [ 94.012952][ T4338] kernel_stack 131072 [ 94.012952][ T4338] pagetables 212992 [ 94.012952][ T4338] sec_pagetables 0 [ 94.012952][ T4338] percpu 2512 [ 94.012952][ T4338] sock 0 [ 94.012952][ T4338] vmalloc 113721344 [ 94.012952][ T4338] shmem 0 [ 94.012952][ T4338] zswap 0 [ 94.012952][ T4338] zswapped 0 [ 94.012952][ T4338] file_mapped 114688 [ 94.012952][ T4338] file_dirty 114688 [ 94.012952][ T4338] file_writeback 0 [ 94.012952][ T4338] swapcached 19472384 [ 94.012952][ T4338] anon_thp 0 [ 94.012952][ T4338] file_thp 0 [ 94.012952][ T4338] shmem_thp 0 [ 94.012952][ T4338] inactive_anon 0 [ 94.012952][ T4338] active_anon 0 [ 94.012952][ T4338] inactive_file 0 [ 94.012952][ T4338] active_file 114688 [ 94.012952][ T4338] unevictable 0 [ 94.012952][ T4338] slab_reclaimable 67720 [ 94.012952][ T4338] slab_unreclaimable 267408 [ 94.056624][ T4338] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.77,pid=4914,uid=0 [ 94.078314][ T4338] Memory cgroup out of memory: Killed process 4914 (syz.2.77) total-vm:102176kB, anon-rss:1216kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 94.650474][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 94.902500][ T6373] fuse: Bad value for 'fd' [ 95.803594][ T27] audit: type=1326 audit(95.778:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.520" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1779368 code=0x0 [ 97.239145][ T6450] overlayfs: failed to clone upperpath [ 98.551993][ T6490] Invalid option length (695) for dns_resolver key [ 101.350873][ T6561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.566'. [ 102.447405][ T6610] overlayfs: failed to clone upperpath [ 102.476313][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.478597][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.494323][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.496054][ T6611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.497919][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.499580][ T6611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.507395][ T6611] team0: Device bridge0 failed to register rx_handler [ 102.509826][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.511502][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.778652][ T6624] fuse: Bad value for 'fd' [ 104.537546][ T6695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.603'. [ 104.542534][ T6696] jffs2: notice: (6696) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 104.982483][ T6714] sctp: [Deprecated]: syz.3.606 (pid 6714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.982483][ T6714] Use struct sctp_sack_info instead [ 104.997302][ T6714] sctp: [Deprecated]: syz.3.606 (pid 6714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.997302][ T6714] Use struct sctp_sack_info instead [ 105.450950][ T6739] MPTCP: kernel_bind error, err=-98 [ 105.476477][ T6735] overlayfs: unrecognized mount option "verity=require" or missing value [ 105.671563][ T6754] kAFS: No cell specified [ 105.818752][ T6772] MPTCP: kernel_bind error, err=-98 [ 106.078346][ T6788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.635'. [ 106.087965][ T6790] netlink: 3 bytes leftover after parsing attributes in process `syz.0.637'. [ 106.102957][ T6792] x_tables: unsorted underflow at hook 2 [ 106.301913][ T6804] overlayfs: failed to clone upperpath [ 106.664147][ T27] audit: type=1326 audit(106.638:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.1.657" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1779368 code=0x0 [ 106.770467][ T6860] netlink: 208 bytes leftover after parsing attributes in process `syz.2.661'. [ 106.779930][ T6860] netlink: 208 bytes leftover after parsing attributes in process `syz.2.661'. [ 106.783139][ T6860] netlink: 208 bytes leftover after parsing attributes in process `syz.2.661'. [ 106.830524][ T6867] 9pnet: Could not find request transport: f= [ 106.926372][ T6877] MPTCP: kernel_bind error, err=-98 [ 107.658036][ T6913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.677'. [ 107.677309][ T6915] MPTCP: kernel_bind error, err=-98 [ 108.113751][ T6939] IPVS: set_ctl: invalid protocol: 46 100.1.1.1:20000 [ 108.706080][ T6961] sctp: [Deprecated]: syz.1.694 (pid 6961) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.706080][ T6961] Use struct sctp_sack_info instead [ 109.617453][ T4335] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 109.619391][ T4335] Bluetooth: hci1: Injecting HCI hardware error event [ 109.622933][ T4342] Bluetooth: hci1: hardware error 0x00 [ 110.310401][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 110.429321][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 110.444585][ T4851] libceph: connect (1)[c::]:6789 error -101 [ 110.446697][ T4851] libceph: mon0 (1)[c::]:6789 connect error [ 110.451942][ T4851] libceph: connect (1)[c::]:6789 error -101 [ 110.453295][ T4851] libceph: mon0 (1)[c::]:6789 connect error [ 110.455221][ T7028] ceph: No mds server is up or the cluster is laggy [ 111.090548][ T7054] netlink: 'syz.4.728': attribute type 3 has an invalid length. [ 111.092500][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 111.649765][ T7078] netlink: 40 bytes leftover after parsing attributes in process `syz.1.737'. [ 111.841506][ T7078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.737'. [ 112.118576][ T4342] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 112.198812][ T7108] MPTCP: kernel_bind error, err=-98 [ 113.100191][ T7147] MPTCP: kernel_bind error, err=-98 [ 113.202077][ T7153] netlink: 52 bytes leftover after parsing attributes in process `syz.0.764'. [ 113.588440][ T7175] MPTCP: kernel_bind error, err=-98 [ 113.623331][ T7182] tmpfs: Unknown parameter 'mpolEbwҖ@y_udc' [ 113.707047][ T7189] ip_tables: iptables: counters copy to user failed while replacing table [ 113.953740][ T7198] capability: warning: `syz.4.779' uses 32-bit capabilities (legacy support in use) [ 114.030443][ T7192] ip_tables: iptables: counters copy to user failed while replacing table [ 114.433248][ T7206] MPTCP: kernel_bind error, err=-98 [ 115.069561][ T7236] tls_set_device_offload_rx: netdev not found [ 116.435477][ T7285] MPTCP: kernel_bind error, err=-98 [ 118.268120][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'. [ 122.043895][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'. [ 122.079709][ T7509] fuse: Bad value for 'fd' [ 122.082208][ T7509] overlayfs: failed to clone upperpath [ 123.189567][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.883'. [ 124.816736][ T7589] bridge0: port 2(bridge_slave_1) entered listening state [ 124.825664][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.935159][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.937252][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.992264][ T7646] futex_wake_op: syz.4.922 tries to shift op by 144; fix this program [ 125.994179][ T7646] futex_wake_op: syz.4.922 tries to shift op by 144; fix this program [ 126.631424][ T7640] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.633597][ T7640] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.636038][ T7640] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.638014][ T7640] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.864566][ T7662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.928'. [ 126.911637][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 127.758012][ T7700] sctp: [Deprecated]: syz.0.940 (pid 7700) Use of int in maxseg socket option. [ 127.758012][ T7700] Use struct sctp_assoc_value instead [ 128.611869][ T7721] CIFS: Attempting to mount \\127.0.0.1\share [ 128.614585][ T7721] CIFS: VFS: Error connecting to socket. Aborting operation. [ 128.616514][ T7721] CIFS: VFS: cifs_mount failed w/return code = -101 [ 128.693867][ T7733] Bluetooth: ISO socket layer initialized [ 128.798092][ T7744] overlayfs: failed to clone lowerpath [ 129.618374][ T7761] netlink: 'syz.2.961': attribute type 2 has an invalid length. [ 130.586779][ T7807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.972'. [ 131.019066][ T7823] overlayfs: failed to clone upperpath [ 131.858440][ T7845] overlayfs: failed to clone lowerpath [ 131.906653][ T7846] overlayfs: failed to clone lowerpath [ 132.621787][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 133.067540][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 133.149290][ T7906] tmpfs: Unknown parameter 'quota' [ 134.916957][ T7935] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1003'. [ 134.919063][ T7935] ------------[ cut here ]------------ [ 134.920244][ T7935] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 134.924602][ T7935] WARNING: CPU: 1 PID: 7935 at net/sched/cls_u32.c:853 u32_change+0x1748/0x2018 [ 134.926628][ T7935] Modules linked in: [ 134.927507][ T7935] CPU: 1 PID: 7935 Comm: syz.0.1003 Not tainted syzkaller #0 [ 134.929146][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 134.931432][ T7935] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 134.933222][ T7935] pc : u32_change+0x1748/0x2018 [ 134.934307][ T7935] lr : u32_change+0x1748/0x2018 [ 134.935382][ T7935] sp : ffff800021366c60 [ 134.936300][ T7935] x29: ffff800021366dc0 x28: ffff0000ce9c5000 x27: 1fffe00019d38a0d [ 134.938097][ T7935] x26: ffff800021366f40 x25: ffff0000ce9c4000 x24: dfff800000000000 [ 134.939888][ T7935] x23: 0000000000000010 x22: ffff70000426cd9c x21: dfff800000000000 [ 134.941716][ T7935] x20: ffff800021367460 x19: ffff800017d99000 x18: 1fffe00033e6db7e [ 134.943559][ T7935] x17: ffff8000153bd000 x16: ffff8000082dd284 x15: 0000000040000002 [ 134.945385][ T7935] x14: 0000000000000001 x13: 1fffe00033e70270 x12: 0000000000000000 [ 134.947164][ T7935] x11: ff0080000a97ca20 x10: 0000000000000003 x9 : 6ae088a896738a00 [ 134.949019][ T7935] x8 : 6ae088a896738a00 x7 : ffff80000825ab20 x6 : 0000000000000000 [ 134.950880][ T7935] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 134.952693][ T7935] x2 : 0000000000000006 x1 : ffff800011d1dc80 x0 : ffff80018a057000 [ 134.954538][ T7935] Call trace: [ 134.955285][ T7935] u32_change+0x1748/0x2018 [ 134.956323][ T7935] tc_new_tfilter+0xf20/0x145c [ 134.957430][ T7935] rtnetlink_rcv_msg+0x6d4/0xcc4 [ 134.958575][ T7935] netlink_rcv_skb+0x220/0x3ec [ 134.959660][ T7935] rtnetlink_rcv+0x28/0x38 [ 134.960690][ T7935] netlink_unicast+0x5fc/0x80c [ 134.961724][ T7935] netlink_sendmsg+0x6f0/0x9d8 [ 134.962760][ T7935] ____sys_sendmsg+0x588/0x90c [ 134.963789][ T7935] __sys_sendmmsg+0x320/0x7ec [ 134.964782][ T7935] __arm64_sys_sendmmsg+0xa4/0xc0 [ 134.965895][ T7935] invoke_syscall+0x98/0x290 [ 134.966908][ T7935] el0_svc_common+0x13c/0x258 [ 134.967934][ T7935] do_el0_svc+0x5c/0x134 [ 134.968844][ T7935] el0_svc+0x58/0x128 [ 134.969689][ T7935] el0t_64_sync_handler+0x84/0xf0 [ 134.970763][ T7935] el0t_64_sync+0x18c/0x190 [ 134.971757][ T7935] irq event stamp: 742 [ 134.972642][ T7935] hardirqs last enabled at (741): [] finish_lock_switch+0xb0/0x1c8 [ 134.974739][ T7935] hardirqs last disabled at (742): [] el1_dbg+0x24/0x80 [ 134.976594][ T7935] softirqs last enabled at (696): [] local_bh_enable+0x10/0x34 [ 134.978616][ T7935] softirqs last disabled at (690): [] local_bh_disable+0x10/0x34 [ 134.980649][ T7935] ---[ end trace 0000000000000000 ]---