last executing test programs: 52.168025262s ago: executing program 0 (id=17): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f00000006c0)=""/236, 0xec, 0x1, 0x23}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 51.996110586s ago: executing program 0 (id=19): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000009ec"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 48.871614144s ago: executing program 0 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r2, &(0x7f00000004c0)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000240)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21081e, &(0x7f0000000100), 0x1, 0x538, &(0x7f0000000380)="$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") 48.119973262s ago: executing program 0 (id=31): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x808404, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) 47.630327264s ago: executing program 0 (id=32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) 45.760057571s ago: executing program 0 (id=40): ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 45.476203587s ago: executing program 32 (id=40): ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 28.475370267s ago: executing program 5 (id=42): sendmsg$sock(0xffffffffffffffff, 0x0, 0x24000001) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x209, 0x5800001a, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x2) mmap(&(0x7f00004f5000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 28.156936805s ago: executing program 5 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3c5093, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) 26.73729352s ago: executing program 5 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@loopback, 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x80, 0x80}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 25.913622101s ago: executing program 5 (id=130): gettid() semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x3, 0x100, 0x1800}, {0x0, 0xfffe}], 0x2) semop(0x0, &(0x7f0000001240)=[{0x0, 0xfffd}, {0x3, 0x0, 0x2000}], 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0xe]) 25.502132081s ago: executing program 33 (id=130): gettid() semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x3, 0x100, 0x1800}, {0x0, 0xfffe}], 0x2) semop(0x0, &(0x7f0000001240)=[{0x0, 0xfffd}, {0x3, 0x0, 0x2000}], 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0xe]) 4.664903115s ago: executing program 3 (id=248): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.918220274s ago: executing program 3 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x70, r1, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @device_b}, 0x0, @random=0x6, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x70, 0x20}}, @val={0x76, 0x6, {0x0, 0xfe, 0x7, 0x401}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000540)={0x48, r5, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6d}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.481618984s ago: executing program 3 (id=262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, 0x0, 0x1015, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x10, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.897876599s ago: executing program 4 (id=268): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/49, 0x31) 2.740566583s ago: executing program 2 (id=269): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x1c3001, 0x11) write$tcp_mem(r0, &(0x7f0000000380)={0x17, 0x2d, 0x5, 0x3a, 0x73be, 0x2c}, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4000014) 2.703789414s ago: executing program 4 (id=270): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18, 0x40001}, 0x40040) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r2) close(r0) 2.514170748s ago: executing program 4 (id=272): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.403665201s ago: executing program 2 (id=274): bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="f20f3365f2a72e0fc7b2000000000f015a10c510c4e2fd307c08005918d8f20f10a95d4e00006466f30fbcb30f0000000f060f3235002000000f308ed0", 0x3d}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.294454653s ago: executing program 3 (id=275): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', 0x0, 0x0, 0x0) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 2.224020796s ago: executing program 1 (id=276): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x90646, 0x50703}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x10, 0x80, {0x0, 0x0, 0x0, 0x0, 0x30000, 0x7f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 2.199265146s ago: executing program 3 (id=277): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f0000000040)=ANY=[], 0xfe, 0xc24, &(0x7f0000001480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) getdents64(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1804013, 0x0, 0xfc, 0x0, &(0x7f00000003c0)) 1.708027318s ago: executing program 1 (id=279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x16, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x1}, 0x28) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.595709341s ago: executing program 6 (id=280): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3ff}], 0x0, 0x0, 0x0}) 1.506475083s ago: executing program 3 (id=281): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x400000, &(0x7f0000000100)={[{@lazytime}]}, 0x0, 0x474, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x24) socket(0xa, 0x1, 0x0) memfd_create(0x0, 0x5) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) 1.422718235s ago: executing program 6 (id=282): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x25, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) unshare(0x22020600) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x200001e6, &(0x7f0000000100)=""/230}) 1.111655163s ago: executing program 2 (id=283): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80c0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0xfe, 0x10000}, {0x6, 0x3a}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 970.390747ms ago: executing program 6 (id=284): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 819.62758ms ago: executing program 2 (id=285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000110021002cbd7000ffdbdf2500000000", @ANYRES32=r3], 0x44}}, 0x40000) 714.025652ms ago: executing program 1 (id=286): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 630.460005ms ago: executing program 6 (id=287): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x1) 630.132065ms ago: executing program 4 (id=288): r0 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f88, 0x40, 0x0, 0x28f}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8910, 0x0) syz_clone(0x4020180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8921, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0xce20, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 562.730077ms ago: executing program 1 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 478.257269ms ago: executing program 6 (id=290): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) dup2(r0, 0x3) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001080000004000000000610000"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="010000000200"/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000100)="03000000", &(0x7f0000000180)}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000400)="4c00000014000103010000000000000002060000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000200", 0x4c) read(r3, &(0x7f0000000500)=""/4096, 0x1000) 363.896981ms ago: executing program 4 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xa, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x500, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 311.609803ms ago: executing program 1 (id=292): r0 = timerfd_create(0x0, 0x80000) read(r0, &(0x7f0000000140)=""/240, 0xf0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {r1, r2+60000000}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) 234.539005ms ago: executing program 6 (id=293): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f00000001c0)='270', 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x7c2}) mkdirat(0xffffffffffffff9c, 0x0, 0x67) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x1214040, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000680), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f00000006c0)={0x400, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a70000000900000000009c00"}, 0x4000d, 0x6}) 234.302395ms ago: executing program 2 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 121.829867ms ago: executing program 1 (id=295): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffd, 0x2752789b59c001a2, 0x400, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) 14.39317ms ago: executing program 4 (id=296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000017c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x5d1c15c5b6bbf4bd, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4055}, 0x4890) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0xc4) 0s ago: executing program 2 (id=297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80, 0x51}}]}}]}, 0x48}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2b, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xc}, {0xfff1, 0xfff1}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 56.176618][ T4151] cgroup: Unknown subsys name 'net' [ 56.290339][ T4151] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.775492][ T4151] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.706964][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 59.780603][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 59.820014][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 59.884371][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 59.907847][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.915200][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.923576][ T4186] device bridge_slave_0 entered promiscuous mode [ 59.935080][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 59.965025][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.972383][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.980434][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.012865][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.020059][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.028187][ T4185] device bridge_slave_0 entered promiscuous mode [ 60.064040][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.071402][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.079614][ T4185] device bridge_slave_1 entered promiscuous mode [ 60.093953][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.126097][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.177335][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.187464][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.194956][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.203021][ T4196] device bridge_slave_0 entered promiscuous mode [ 60.212971][ T4186] team0: Port device team_slave_0 added [ 60.221342][ T4186] team0: Port device team_slave_1 added [ 60.239331][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.246589][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.254267][ T4193] device bridge_slave_0 entered promiscuous mode [ 60.263729][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.273370][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.281443][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.289820][ T4196] device bridge_slave_1 entered promiscuous mode [ 60.308424][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.316041][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.323878][ T4193] device bridge_slave_1 entered promiscuous mode [ 60.355075][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.362311][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.370269][ T4192] device bridge_slave_0 entered promiscuous mode [ 60.390983][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.411044][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.421439][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.429615][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.456354][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.469640][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.477095][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.485978][ T4192] device bridge_slave_1 entered promiscuous mode [ 60.495615][ T4185] team0: Port device team_slave_0 added [ 60.503181][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.521816][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.531917][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.539804][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.571864][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.594839][ T4185] team0: Port device team_slave_1 added [ 60.633318][ T4193] team0: Port device team_slave_0 added [ 60.649849][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.683627][ T4193] team0: Port device team_slave_1 added [ 60.692487][ T4196] team0: Port device team_slave_0 added [ 60.700715][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.718332][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.725709][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.753208][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.771480][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.779032][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.805573][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.818585][ T4196] team0: Port device team_slave_1 added [ 60.844333][ T4186] device hsr_slave_0 entered promiscuous mode [ 60.851390][ T4186] device hsr_slave_1 entered promiscuous mode [ 60.888495][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.896946][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.925104][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.946026][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.953709][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.981320][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.997445][ T4192] team0: Port device team_slave_0 added [ 61.014442][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.023677][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.052734][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.071480][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.079330][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.108372][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.122027][ T4192] team0: Port device team_slave_1 added [ 61.146599][ T4185] device hsr_slave_0 entered promiscuous mode [ 61.157441][ T4185] device hsr_slave_1 entered promiscuous mode [ 61.165468][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.175337][ T4185] Cannot create hsr debugfs directory [ 61.223211][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.230986][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.258767][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.274998][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.282155][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.309217][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.326966][ T4193] device hsr_slave_0 entered promiscuous mode [ 61.334019][ T4193] device hsr_slave_1 entered promiscuous mode [ 61.341514][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.349340][ T4193] Cannot create hsr debugfs directory [ 61.385595][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 61.387573][ T4196] device hsr_slave_0 entered promiscuous mode [ 61.399370][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 61.406337][ T4196] device hsr_slave_1 entered promiscuous mode [ 61.412848][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.421211][ T4196] Cannot create hsr debugfs directory [ 61.465101][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 61.472161][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 61.474698][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 61.522470][ T4192] device hsr_slave_0 entered promiscuous mode [ 61.529710][ T4192] device hsr_slave_1 entered promiscuous mode [ 61.537100][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.545310][ T4192] Cannot create hsr debugfs directory [ 61.795704][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.807856][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.818308][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.828777][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.899711][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.909290][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.930075][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.943906][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.983728][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.993630][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.034531][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.042970][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.057416][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.086424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.099122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.110302][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.147848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.158524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.168902][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.176606][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.185777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.196244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.208917][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.216077][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.251607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.260991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.291355][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.301101][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.313267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.323556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.336374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.345501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.354374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.364215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.379515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.388166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.398121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.407300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.417517][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.428567][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.441869][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.461245][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.495790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.503732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.529786][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.549013][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.582683][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.602248][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.612116][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.619548][ T4232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.630704][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.667563][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.678860][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.689091][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.696479][ T4232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.705766][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.713698][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.723658][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.733489][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.743434][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.753783][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.762855][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.771935][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.783994][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.798385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.807770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.817774][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.825051][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.840854][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.863227][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.877269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.886725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.897372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.908626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.918717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.927713][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.934860][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.954939][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.973730][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.984512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.995497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.005182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.014436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.022835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.031715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.040956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.054126][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.062926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.079225][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.108346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.127338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.149475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.165545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.173440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.195855][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.223550][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.233395][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.243378][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.259017][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.271318][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.281090][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.296202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.306331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.315805][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.326042][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.339516][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.351660][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.378316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.387247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.398810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.417869][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.432648][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.466411][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 63.473255][ T4186] device veth0_vlan entered promiscuous mode [ 63.480189][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 63.497147][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.504896][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.513488][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.530255][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.542897][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.545191][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 63.555680][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.564171][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.564947][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 63.580275][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.589478][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.592940][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 63.599255][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.613851][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.623314][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.633858][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.642397][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.651493][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.661481][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.670564][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.680148][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.691107][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.702735][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.717622][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.736222][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.779932][ T4186] device veth1_vlan entered promiscuous mode [ 63.861739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.871896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.899541][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.914100][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.944474][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.985998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.996004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.005777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.015691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.024409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.042988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.054157][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.061831][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.070164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.080846][ T4186] device veth0_macvtap entered promiscuous mode [ 64.127959][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.137535][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.149032][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.157979][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.165113][ T4232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.173312][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.182243][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.191414][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.204715][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.213651][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.223484][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.232906][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.241243][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.249325][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.270655][ T4186] device veth1_macvtap entered promiscuous mode [ 64.280819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.289678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.298948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.309530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.318481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.327628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.336102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.346839][ T4185] device veth0_vlan entered promiscuous mode [ 64.359770][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.378827][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.387785][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.409451][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.421521][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.444314][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.456086][ T4185] device veth1_vlan entered promiscuous mode [ 64.463742][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.472454][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.482610][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.492094][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.501074][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.510967][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.519860][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.550999][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.568784][ T4192] device veth0_vlan entered promiscuous mode [ 64.590286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.600953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.610906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.620143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.630506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.639737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.648727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.657385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.670408][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.680021][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.689407][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.698724][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.737379][ T4192] device veth1_vlan entered promiscuous mode [ 64.765826][ T4193] device veth0_vlan entered promiscuous mode [ 64.778484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.788879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.798387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.811680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.820462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.830118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.863695][ T4193] device veth1_vlan entered promiscuous mode [ 64.880345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.889328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.902246][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.921542][ T4185] device veth0_macvtap entered promiscuous mode [ 64.940300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.949683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.958908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.969877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.979161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.997690][ T4192] device veth0_macvtap entered promiscuous mode [ 65.012097][ T4192] device veth1_macvtap entered promiscuous mode [ 65.021803][ T4185] device veth1_macvtap entered promiscuous mode [ 65.067860][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.078109][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.086457][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.094403][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.103848][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.113100][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.122990][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.137119][ T4193] device veth0_macvtap entered promiscuous mode [ 65.174033][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.190538][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.202358][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.217359][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.226951][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.236450][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.245394][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.254312][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.263765][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.272611][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.288506][ T4193] device veth1_macvtap entered promiscuous mode [ 65.306642][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.317801][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.328028][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.339659][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.351513][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.366075][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.377165][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.390291][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.403412][ T4196] device veth0_vlan entered promiscuous mode [ 65.411962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.421677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.430365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.439505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.448662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.464312][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.476995][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.487571][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.498534][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.509915][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.519677][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.528632][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.539962][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.545119][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 65.550564][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.561602][ T4227] Bluetooth: hci0: command 0x040f tx timeout [ 65.571602][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.573317][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.590570][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.601968][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.613063][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.624516][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.625475][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 65.635798][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.649892][ T4227] Bluetooth: hci3: command 0x040f tx timeout [ 65.654967][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.662283][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 65.678760][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.689478][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.700950][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.712313][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.723373][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.733564][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.745452][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.756909][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.775154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.783886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.794248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.804238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.813089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.822787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.832413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.860371][ T4196] device veth1_vlan entered promiscuous mode [ 65.878489][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.888923][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.898255][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.908592][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.921517][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.930760][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.939657][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.949718][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.984053][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.993734][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.039109][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.091344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.118478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.140061][ T4196] device veth0_macvtap entered promiscuous mode [ 66.192613][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.209514][ T4196] device veth1_macvtap entered promiscuous mode [ 66.217630][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.240617][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.255843][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.268421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.279911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.288670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.298131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.333522][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.347915][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.358536][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.369297][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.380552][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.391647][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.402583][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.413243][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.431530][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.454472][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.456426][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.462903][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.471792][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.483336][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.495015][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.504898][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.514054][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.531088][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.541882][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.553389][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.565207][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.575311][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.586579][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.597622][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.609532][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.621044][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.635263][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.645083][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.673597][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.679489][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.691125][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.695609][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.707828][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.707864][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.747846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.757354][ T4232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.776267][ T4232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.794148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.838591][ T4264] loop1: detected capacity change from 0 to 512 [ 66.883142][ T4264] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.937674][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.948504][ T4266] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.969936][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.979349][ T4264] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.022086][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.053643][ T4264] EXT4-fs (loop1): 1 truncate cleaned up [ 67.061183][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.064071][ T4264] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 67.085596][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.085850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.499450][ T4286] binder: 4282:4286 ioctl c0306201 2000000000c0 returned -14 [ 67.556200][ T4286] binder: 4282:4286 ioctl c0306201 200000000340 returned -14 [ 67.625679][ T4225] Bluetooth: hci0: command 0x0419 tx timeout [ 67.627636][ T4288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 67.639980][ T4225] Bluetooth: hci1: command 0x0419 tx timeout [ 67.705814][ T4260] Bluetooth: hci4: command 0x0419 tx timeout [ 67.713244][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 67.737250][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 67.897936][ T4293] binder: 4292:4293 ioctl c0306201 200000000080 returned -14 [ 67.944645][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.178720][ T4296] loop1: detected capacity change from 0 to 16 [ 68.241045][ T4296] erofs: (device loop1): mounted with root inode @ nid 36. [ 68.307992][ T4280] loop4: detected capacity change from 0 to 32768 [ 68.321559][ T4300] binder: 4298:4300 ioctl c0306201 200000000080 returned -14 [ 68.340856][ T4300] binder: 4298:4300 ioctl c0306201 2000000003c0 returned -14 [ 68.521328][ T26] audit: type=1800 audit(1791892520.002:2): pid=4280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 68.899960][ T4310] pit: kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 68.928738][ T4310] pit: kvm: requested 33523 ns i8254 timer period limited to 200000 ns [ 68.951258][ T4310] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 68.964734][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.996228][ T4310] pit: kvm: requested 109790 ns i8254 timer period limited to 200000 ns [ 69.007195][ T26] audit: type=1800 audit(1791892520.492:3): pid=4308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 69.030798][ T4310] pit: kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 69.041653][ T4310] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 69.051163][ T4310] pit: kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 69.069279][ T4310] pit: kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 69.078581][ T4310] pit: kvm: requested 175162 ns i8254 timer period limited to 200000 ns [ 69.096323][ T4310] pit: kvm: requested 148342 ns i8254 timer period limited to 200000 ns [ 69.225168][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 69.390972][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 69.485065][ T7] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 69.674983][ T7] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 69.703213][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.744934][ T7] usb 4-1: Product: syz [ 69.753256][ T7] usb 4-1: Manufacturer: syz [ 69.791708][ T7] usb 4-1: SerialNumber: syz [ 69.999488][ T4280] syz.4.9 (4280) used greatest stack depth: 20880 bytes left [ 70.102594][ T7] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 70.130820][ T7] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 70.135207][ T4321] loop2: detected capacity change from 0 to 128 [ 70.255922][ T4321] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 70.264273][ T4321] FAT-fs (loop2): Filesystem has been set read-only [ 70.272372][ T4321] attempt to access beyond end of device [ 70.272372][ T4321] loop2: rw=524288, want=2073, limit=128 [ 70.284127][ T4321] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 70.292377][ T4321] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 70.302429][ T4321] attempt to access beyond end of device [ 70.302429][ T4321] loop2: rw=0, want=2073, limit=128 [ 70.313710][ T26] audit: type=1800 audit(1791892521.792:4): pid=4321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.25" name="file2" dev="loop2" ino=1048628 res=0 errno=0 [ 70.439904][ T4324] FAULT_INJECTION: forcing a failure. [ 70.439904][ T4324] name failslab, interval 1, probability 0, space 0, times 1 [ 70.514495][ T4327] device lo entered promiscuous mode [ 70.515090][ T4324] CPU: 1 PID: 4324 Comm: syz.4.24 Not tainted syzkaller #0 [ 70.527233][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 70.537821][ T4324] Call Trace: [ 70.541141][ T4324] [ 70.544130][ T4324] dump_stack_lvl+0x188/0x250 [ 70.549030][ T4324] ? show_regs_print_info+0x20/0x20 [ 70.555265][ T4324] ? load_image+0x410/0x410 [ 70.560083][ T4324] ? __might_sleep+0xf0/0xf0 [ 70.564903][ T4324] ? __lock_acquire+0x7d40/0x7d40 [ 70.570241][ T4324] ? snd_pcm_open_substream+0x21ab/0x2570 [ 70.576112][ T4324] should_fail+0x383/0x4b0 [ 70.580582][ T4324] should_failslab+0x5/0x20 [ 70.585119][ T4324] slab_pre_alloc_hook+0x51/0xc0 [ 70.590492][ T4324] kmem_cache_alloc_trace+0x47/0x290 [ 70.590521][ T4324] ? snd_pcm_open+0x3d3/0x5e0 [ 70.590548][ T4324] snd_pcm_open+0x3d3/0x5e0 [ 70.605900][ T4324] ? snd_pcm_mmap_control_fault+0x1b0/0x1b0 [ 70.612138][ T4324] ? sched_dynamic_update+0x210/0x210 [ 70.617829][ T4324] snd_pcm_playback_open+0x6b/0xd0 [ 70.623074][ T4324] chrdev_open+0x585/0x5f0 [ 70.627620][ T4324] ? cd_forget+0x160/0x160 [ 70.632178][ T4324] ? fsnotify_perm+0x3a7/0x560 [ 70.637092][ T4324] ? cd_forget+0x160/0x160 [ 70.642219][ T4324] do_dentry_open+0x7f7/0xf90 [ 70.647571][ T4324] ? vfs_open+0x2b/0x80 [ 70.652061][ T4324] path_openat+0x2718/0x2fb0 [ 70.657287][ T4324] ? __kasan_slab_alloc+0xa9/0xc0 [ 70.662881][ T4324] ? do_filp_open+0x400/0x400 [ 70.667714][ T4324] do_filp_open+0x1df/0x400 [ 70.672365][ T4324] ? vfs_tmpfile+0x300/0x300 [ 70.677034][ T4324] ? _raw_spin_unlock+0x24/0x40 [ 70.682323][ T4324] ? alloc_fd+0x59e/0x650 [ 70.687744][ T4324] do_sys_openat2+0x14b/0x500 [ 70.692717][ T4324] ? __lock_acquire+0x7d40/0x7d40 [ 70.697860][ T4324] ? do_sys_open+0xe0/0xe0 [ 70.702374][ T4324] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 70.708727][ T4324] ? lock_chain_count+0x20/0x20 [ 70.713946][ T4324] __x64_sys_openat+0x135/0x160 [ 70.718836][ T4324] do_syscall_64+0x4c/0xa0 [ 70.723935][ T4324] ? clear_bhb_loop+0x30/0x80 [ 70.728652][ T4324] ? clear_bhb_loop+0x30/0x80 [ 70.733520][ T4324] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.739697][ T4324] RIP: 0033:0x7f0a30ea4b0e [ 70.744246][ T4324] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 70.764059][ T4324] RSP: 002b:00007f0a2f13bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 70.774443][ T4324] RAX: ffffffffffffffda RBX: 00007f0a2f13c6c0 RCX: 00007f0a30ea4b0e [ 70.782642][ T4324] RDX: 0000000000000002 RSI: 00007f0a2f13bc00 RDI: ffffffffffffff9c [ 70.791006][ T4324] RBP: 00007f0a2f13bc00 R08: 0000000000000000 R09: 0000000000000000 [ 70.799192][ T4324] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 70.807434][ T4324] R13: 00007f0a3116c038 R14: 00007f0a3116bfa0 R15: 00007fff2c646608 [ 70.815614][ T4324] [ 70.896098][ T4327] device tunl0 entered promiscuous mode [ 70.928420][ T4316] loop1: detected capacity change from 0 to 32768 [ 70.947647][ T4327] device gre0 entered promiscuous mode [ 70.986270][ T7] usb 4-1: USB disconnect, device number 2 [ 71.126237][ T4316] ip_tables: iptables: counters copy to user failed while replacing table [ 71.166910][ T4327] device gretap0 entered promiscuous mode [ 71.246612][ T4327] device erspan0 entered promiscuous mode [ 71.300440][ T4327] device ip_vti0 entered promiscuous mode [ 71.340012][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.409335][ T4327] device ip6_vti0 entered promiscuous mode [ 71.478789][ T4327] device sit0 entered promiscuous mode [ 71.549298][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.557080][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.566715][ T4327] device ip6tnl0 entered promiscuous mode [ 71.643395][ T4327] device ip6gre0 entered promiscuous mode [ 71.699607][ T4337] loop0: detected capacity change from 0 to 512 [ 71.754405][ T4327] device syz_tun entered promiscuous mode [ 71.759268][ T4338] loop3: detected capacity change from 0 to 1764 [ 71.809825][ T4327] device ip6gretap0 entered promiscuous mode [ 71.825495][ T4338] ======================================================= [ 71.825495][ T4338] WARNING: The mand mount option has been deprecated and [ 71.825495][ T4338] and is ignored by this kernel. Remove the mand [ 71.825495][ T4338] option from the mount to silence this warning. [ 71.825495][ T4338] ======================================================= [ 71.947648][ T4337] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=3 [ 71.964870][ T4337] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 71.984861][ T4337] EXT4-fs (loop0): mount failed [ 72.046213][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.054990][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.076283][ T4327] device bridge0 entered promiscuous mode [ 72.124997][ T4327] device vcan0 entered promiscuous mode [ 72.203370][ T4327] device bond0 entered promiscuous mode [ 72.209649][ T4327] device bond_slave_0 entered promiscuous mode [ 72.229838][ T4327] device bond_slave_1 entered promiscuous mode [ 72.325107][ T4327] device team0 entered promiscuous mode [ 72.341527][ T4327] device team_slave_0 entered promiscuous mode [ 72.365118][ T4327] device team_slave_1 entered promiscuous mode [ 72.466176][ T4327] device dummy0 entered promiscuous mode [ 72.581008][ T4327] device nlmon0 entered promiscuous mode [ 72.622633][ T4327] device caif0 entered promiscuous mode [ 72.645516][ T4327] device batadv0 entered promiscuous mode [ 72.729795][ T4327] device vxcan0 entered promiscuous mode [ 72.762778][ T4327] device vxcan1 entered promiscuous mode [ 72.806257][ T4327] device veth0 entered promiscuous mode [ 72.871609][ T4327] device veth1 entered promiscuous mode [ 72.936625][ T4327] device wg0 entered promiscuous mode [ 73.013694][ T4327] device wg1 entered promiscuous mode [ 73.063610][ T4327] device wg2 entered promiscuous mode [ 73.100279][ T4327] device veth0_to_bridge entered promiscuous mode [ 73.171720][ T4327] device veth1_to_bridge entered promiscuous mode [ 73.255118][ T4327] device veth0_to_bond entered promiscuous mode [ 73.343704][ T4327] device veth1_to_bond entered promiscuous mode [ 73.399975][ T4327] device veth0_to_team entered promiscuous mode [ 73.490594][ T4327] device veth1_to_team entered promiscuous mode [ 73.576024][ T4327] device veth0_to_batadv entered promiscuous mode [ 73.594405][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.617332][ T4327] device batadv_slave_0 entered promiscuous mode [ 73.655192][ T4327] device veth1_to_batadv entered promiscuous mode [ 73.678112][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.686665][ T4327] device batadv_slave_1 entered promiscuous mode [ 73.701788][ T4327] device xfrm0 entered promiscuous mode [ 73.711999][ T4327] device veth0_to_hsr entered promiscuous mode [ 73.793877][ T4327] device veth1_to_hsr entered promiscuous mode [ 73.851108][ T4327] device hsr0 entered promiscuous mode [ 73.883576][ T4327] device veth1_virt_wifi entered promiscuous mode [ 73.913511][ T4327] device veth0_virt_wifi entered promiscuous mode [ 73.927684][ T4327] device virt_wifi0 entered promiscuous mode [ 73.991796][ T4327] device vlan0 entered promiscuous mode [ 73.999777][ T4327] device vlan1 entered promiscuous mode [ 74.013511][ T4327] device macvlan0 entered promiscuous mode [ 74.041264][ T4327] device macvlan1 entered promiscuous mode [ 74.051791][ T4327] device ipvlan0 entered promiscuous mode [ 74.068574][ T4327] device ipvlan1 entered promiscuous mode [ 74.113129][ T4327] device macvtap0 entered promiscuous mode [ 74.139257][ T4327] device macsec0 entered promiscuous mode [ 74.166394][ T4327] device geneve0 entered promiscuous mode [ 74.180023][ T4327] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.196869][ T4327] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.207086][ T4327] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.216061][ T4327] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.225301][ T4327] device geneve1 entered promiscuous mode [ 74.241240][ T4327] device netdevsim0 entered promiscuous mode [ 74.262647][ T4327] device netdevsim1 entered promiscuous mode [ 74.282882][ T4327] device netdevsim2 entered promiscuous mode [ 74.304853][ T4327] device netdevsim3 entered promiscuous mode [ 74.331555][ T4327] device wlan0 entered promiscuous mode [ 74.358212][ T4327] device wlan1 entered promiscuous mode [ 74.397623][ T4327] syz.2.26 (4327) used greatest stack depth: 20496 bytes left [ 74.491160][ T4357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 74.636691][ T4186] syz-executor (4186) used greatest stack depth: 20096 bytes left [ 74.766768][ T1162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.840082][ T4382] tipc: Started in network mode [ 74.846148][ T4382] tipc: Node identity 4, cluster identity 4711 [ 74.875081][ T4382] tipc: Node number set to 4 [ 74.918309][ T1162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.036702][ T1162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.181914][ T1162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.987171][ T4408] Illegal XDP return value 467424060, expect packet loss! [ 76.077481][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 76.106150][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 76.274788][ C1] net_ratelimit: 33 callbacks suppressed [ 76.583843][ T4438] loop1: detected capacity change from 0 to 512 [ 76.648228][ T4443] loop3: detected capacity change from 0 to 164 [ 76.757435][ T4443] isofs_fill_super: root inode is not a directory. Corrupted media? [ 76.861186][ T4394] chnl_net:caif_netlink_parms(): no params data found [ 76.972673][ T4438] EXT4-fs (loop1): Test dummy encryption mode enabled [ 77.037578][ T4438] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.56: missing EA_INODE flag [ 77.136285][ T4438] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.56: error while reading EA inode 2 err=-117 [ 77.195360][ T4438] EXT4-fs (loop1): 1 orphan inode deleted [ 77.212377][ T4460] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.232715][ T4438] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: writeback. [ 77.464868][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 77.534744][ T4225] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 77.586846][ T4394] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.604068][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.616423][ T4394] device bridge_slave_0 entered promiscuous mode [ 77.695068][ T4470] loop1: detected capacity change from 0 to 512 [ 77.709504][ T4394] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.725350][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.760112][ T4394] device bridge_slave_1 entered promiscuous mode [ 77.864889][ T4225] usb 4-1: not running at top speed; connect to a high speed hub [ 77.956234][ T4225] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.978587][ T4394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.988205][ T4225] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 78.039136][ T4225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.126471][ T4394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.150834][ T4225] usb 4-1: Found UVC 1.00 device (046d:0825) [ 78.180288][ T4225] usb 4-1: No streaming interface found for terminal 2. [ 78.463250][ T1162] device hsr_slave_0 left promiscuous mode [ 78.472879][ T21] usb 4-1: USB disconnect, device number 3 [ 78.536986][ T1162] device hsr_slave_1 left promiscuous mode [ 78.546631][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.586817][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.635090][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.673577][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.735750][ T1162] device bridge_slave_1 left promiscuous mode [ 78.759812][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.861934][ T1162] device bridge_slave_0 left promiscuous mode [ 78.880315][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.086057][ T1162] device veth1_macvtap left promiscuous mode [ 79.092791][ T1162] device veth0_macvtap left promiscuous mode [ 79.122479][ T1162] device veth1_vlan left promiscuous mode [ 79.144075][ T1162] device veth0_vlan left promiscuous mode [ 79.431436][ T4510] loop1: detected capacity change from 0 to 512 [ 79.542531][ T4510] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.72: iget: bad i_size value: 38620345925642 [ 79.563757][ T4226] Bluetooth: hci1: command 0x041b tx timeout [ 79.570698][ T4510] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.72: couldn't read orphan inode 15 (err -117) [ 79.652128][ T4510] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.860114][ T4510] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.72: bg 0: block 5: invalid block bitmap [ 79.910026][ T4510] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 376 with error 28 [ 79.954065][ T4510] EXT4-fs (loop1): This should not happen!! Data will be lost [ 79.954065][ T4510] [ 79.993303][ T4510] EXT4-fs (loop1): Total free blocks count 0 [ 80.014046][ T4510] EXT4-fs (loop1): Free/Dirty block details [ 80.044890][ T4510] EXT4-fs (loop1): free_blocks=0 [ 80.078404][ T4510] EXT4-fs (loop1): dirty_blocks=380 [ 80.104965][ T4510] EXT4-fs (loop1): Block reservation details [ 80.131330][ T4510] EXT4-fs (loop1): i_reserved_data_blocks=380 [ 80.927551][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 81.005766][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 81.088228][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.172117][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.464681][ C1] net_ratelimit: 58 callbacks suppressed [ 81.567314][ T4526] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.634895][ T4226] Bluetooth: hci1: command 0x040f tx timeout [ 81.702828][ T4527] x_tables: duplicate underflow at hook 2 [ 81.705908][ T1162] bond0 (unregistering): Released all slaves [ 81.873314][ T4394] team0: Port device team_slave_0 added [ 81.903651][ T4494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 82.045163][ T4394] team0: Port device team_slave_1 added [ 82.172293][ T4394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.212549][ T4394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.323621][ T4394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.379046][ T4394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.431475][ T4394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.553064][ T4394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.774027][ T4545] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 82.778610][ T4551] syz.2.83 uses obsolete (PF_INET,SOCK_PACKET) [ 82.812678][ T4545] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 82.847067][ T4394] device hsr_slave_0 entered promiscuous mode [ 82.890731][ T4394] device hsr_slave_1 entered promiscuous mode [ 83.705423][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 83.878687][ T4575] loop2: detected capacity change from 0 to 1024 [ 84.004910][ T1110] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.302921][ T4394] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.375097][ T1110] usb 2-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 84.393531][ T4394] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.402526][ T1110] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.493583][ T4394] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.546974][ T4394] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.605199][ T1110] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 84.614367][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 84.614389][ T1110] usb 2-1: Product: syz [ 84.614404][ T1110] usb 2-1: Manufacturer: syz [ 84.614419][ T1110] usb 2-1: SerialNumber: syz [ 84.745589][ T4600] Zero length message leads to an empty skb [ 84.765853][ T1110] usb 2-1: config 0 descriptor?? [ 84.785025][ T4577] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.829433][ T1110] usb 2-1: selecting invalid altsetting 0 [ 84.919682][ T4585] loop3: detected capacity change from 0 to 1024 [ 85.214760][ T4394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.228224][ T4577] usb 2-1: selecting invalid altsetting 0 [ 85.234321][ T4577] usb 2-1: 0:0: usb_set_interface failed (-22) [ 85.268887][ T4585] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.347832][ T4577] usb 2-1: selecting invalid altsetting 0 [ 85.353657][ T4577] usb 2-1: 0:0: usb_set_interface failed (-22) [ 85.376078][ T4585] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 85.540572][ T4577] usb 2-1: selecting invalid altsetting 0 [ 85.590861][ T4577] usb 2-1: 0:0: usb_set_interface failed (-22) [ 85.616251][ T4394] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.627375][ T4577] usb 2-1: selecting invalid altsetting 0 [ 85.641727][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.658665][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.676271][ T4577] usb 2-1: 0:0: usb_set_interface failed (-22) [ 85.726839][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.737246][ T4573] usb 2-1: selecting invalid altsetting 0 [ 85.743011][ T4573] usb 2-1: 0:0: usb_set_interface failed (-22) [ 85.771007][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.790877][ T4573] usb 2-1: selecting invalid altsetting 0 [ 85.804771][ T4573] usb 2-1: 0:0: usb_set_interface failed (-22) [ 85.815507][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.822815][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.841415][ T4573] usb 2-1: selecting invalid altsetting 0 [ 85.875454][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.877399][ T4573] usb 2-1: 0:0: usb_set_interface failed (-22) [ 85.919183][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.941242][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.948478][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.959206][ T4260] usb 2-1: USB disconnect, device number 2 [ 86.018375][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.193420][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.213190][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.243626][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.278562][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.341793][ T4590] loop2: detected capacity change from 0 to 40427 [ 86.374874][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.403954][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.403994][ T4590] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 86.453005][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.503907][ T4394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.512587][ T4590] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 86.570938][ T4394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.614093][ T4590] F2FS-fs (loop2): invalid crc value [ 86.630584][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.656756][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.664875][ C1] net_ratelimit: 38 callbacks suppressed [ 86.706732][ T4590] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 86.753854][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.781620][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.838268][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.911073][ T1331] cfg80211: failed to load regulatory.db [ 87.070517][ T4590] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 87.122142][ T4590] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.364732][ T4590] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 87.499061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.526120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.571407][ T4394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.655394][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.666438][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.798049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.827355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.893016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.926394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.969582][ T4394] device veth0_vlan entered promiscuous mode [ 89.077351][ T4394] device veth1_vlan entered promiscuous mode [ 89.230324][ T4675] loop3: detected capacity change from 0 to 512 [ 89.367414][ T4675] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.413304][ T4679] loop0: detected capacity change from 0 to 4096 [ 89.425284][ T4675] EXT4-fs (loop3): 1 truncate cleaned up [ 89.431138][ T4675] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.540196][ T4679] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 89.615341][ T4679] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 89.672635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.684560][ T4679] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 89.709192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.753973][ T4679] loop0: [ 89.763193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.817218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.855547][ T4394] device veth0_macvtap entered promiscuous mode [ 89.984324][ T4394] device veth1_macvtap entered promiscuous mode [ 90.097773][ T4394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.177121][ T4394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.234634][ T4394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.280138][ T4394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.311099][ T4394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.364672][ T1331] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 90.391993][ T4394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.437104][ T4394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.445265][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.462546][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.506182][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.572403][ T4394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.644787][ T4394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.697059][ T4394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.725098][ T1331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.756657][ T4394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.795889][ T4394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.854971][ T4394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.889721][ T4394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.906669][ T1331] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 90.930213][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.949128][ T1331] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 90.960494][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.994935][ T1331] usb 3-1: Product: syz [ 91.005663][ T4394] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.022595][ T1331] usb 3-1: Manufacturer: syz [ 91.032692][ T4394] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.046849][ T1331] usb 3-1: SerialNumber: syz [ 91.073693][ T4394] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.109626][ T1331] usb 3-1: config 0 descriptor?? [ 91.115411][ T4394] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.176906][ T1331] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 91.213396][ T1331] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 91.256163][ T1331] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 91.352618][ T1331] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 91.420760][ T1331] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 91.488873][ T4446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.496971][ T1331] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 91.507428][ T4446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.563011][ T1331] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 91.576795][ T4713] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 91.599318][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.661439][ T1331] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 91.688187][ T4232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.707151][ T1331] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 91.708159][ T4232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.748611][ T4711] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 91.770055][ T1331] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 91.778512][ T4711] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 91.797078][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.821902][ T1331] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 91.899586][ T1331] usb 3-1: USB disconnect, device number 2 [ 92.028961][ T1331] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 92.093197][ C0] net_ratelimit: 76 callbacks suppressed [ 92.111453][ T1331] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 92.216165][ T1331] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 92.279543][ T1331] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 92.360814][ T1331] keyspan 3-1:0.0: device disconnected [ 92.736413][ T4737] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 92.753948][ T4737] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 92.774762][ T1110] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 93.165178][ T1110] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.219714][ T1110] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.253880][ T4755] FAULT_INJECTION: forcing a failure. [ 93.253880][ T4755] name failslab, interval 1, probability 0, space 0, times 0 [ 93.317437][ T4755] CPU: 0 PID: 4755 Comm: syz.4.123 Not tainted syzkaller #0 [ 93.324976][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.335175][ T4755] Call Trace: [ 93.338656][ T4755] [ 93.341750][ T4755] dump_stack_lvl+0x188/0x250 [ 93.346681][ T4755] ? show_regs_print_info+0x20/0x20 [ 93.352155][ T4755] ? load_image+0x410/0x410 [ 93.356690][ T4755] ? __lock_acquire+0x7d40/0x7d40 [ 93.362351][ T4755] ? rcu_is_watching+0x11/0xa0 [ 93.367779][ T4755] should_fail+0x383/0x4b0 [ 93.372321][ T4755] should_failslab+0x5/0x20 [ 93.376844][ T4755] slab_pre_alloc_hook+0x51/0xc0 [ 93.381800][ T4755] __kmalloc_node+0x6d/0x3a0 [ 93.386510][ T4755] ? __rb_allocate_pages+0x197/0x6b0 [ 93.391845][ T4755] __rb_allocate_pages+0x197/0x6b0 [ 93.397076][ T4755] rb_allocate_cpu_buffer+0x625/0x9e0 [ 93.402547][ T4755] ? rb_wake_up_waiters+0x190/0x190 [ 93.407761][ T4755] __ring_buffer_alloc+0x24b/0x540 [ 93.412897][ T4755] allocate_trace_buffers+0x70/0x2c0 [ 93.418392][ T4755] ? __raw_spin_lock_init+0x41/0x100 [ 93.423772][ T4755] trace_array_create+0x2ac/0xc00 [ 93.428802][ T4755] instance_mkdir+0xc8/0x120 [ 93.433405][ T4755] tracefs_syscall_mkdir+0xb7/0x110 [ 93.438617][ T4755] vfs_mkdir+0x386/0x570 [ 93.442871][ T4755] do_mkdirat+0x1dd/0x5c0 [ 93.447206][ T4755] ? vfs_mkdir+0x570/0x570 [ 93.451661][ T4755] __x64_sys_mkdirat+0x85/0x90 [ 93.456434][ T4755] do_syscall_64+0x4c/0xa0 [ 93.460857][ T4755] ? clear_bhb_loop+0x30/0x80 [ 93.465540][ T4755] ? clear_bhb_loop+0x30/0x80 [ 93.470225][ T4755] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.476131][ T4755] RIP: 0033:0x7f0a30ee42d9 [ 93.480596][ T4755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.500387][ T4755] RSP: 002b:00007f0a2f13c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 93.508909][ T4755] RAX: ffffffffffffffda RBX: 00007f0a3116bfa0 RCX: 00007f0a30ee42d9 [ 93.516898][ T4755] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 93.525484][ T4755] RBP: 00007f0a30f7b888 R08: 0000000000000000 R09: 0000000000000000 [ 93.533558][ T4755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.541717][ T4755] R13: 00007f0a3116c038 R14: 00007f0a3116bfa0 R15: 00007fff2c646608 [ 93.549708][ T4755] [ 93.565260][ T1110] usb 2-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 93.574425][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.627815][ T1110] usb 2-1: SerialNumber: syz [ 93.951004][ T1110] usb 2-1: 0:2 : does not exist [ 94.029940][ T1110] usb 2-1: USB disconnect, device number 3 [ 94.370497][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.459825][ T4232] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.482073][ T4780] loop4: detected capacity change from 0 to 512 [ 94.563172][ T4782] loop2: detected capacity change from 0 to 1024 [ 94.597361][ T4232] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.742287][ T4782] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.768624][ T4232] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.844654][ T4782] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noinit_itable,noblock_validity,nouid32,dioread_nolock,quota,sysvgroups,jqfmt=vfsold,minixdf,auto_da_alloc=0x0000000000000800,,errors=continue. Quota mode: writeback. [ 94.886917][ T4782] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.941173][ T4232] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.020883][ T4793] binder: 4792:4793 ioctl c0306201 200000000080 returned -14 [ 95.087510][ T4782] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.129: bg 0: block 112: padding at end of block bitmap is not set [ 95.094973][ T4793] binder: 4792:4793 ioctl c0306201 2000000003c0 returned -14 [ 95.220615][ T4782] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 95.349370][ T4782] EXT4-fs (loop2): This should not happen!! Data will be lost [ 95.349370][ T4782] [ 95.436105][ T4782] EXT4-fs (loop2): Total free blocks count 0 [ 95.442265][ T4782] EXT4-fs (loop2): Free/Dirty block details [ 95.479496][ T4782] EXT4-fs (loop2): free_blocks=0 [ 95.498515][ T4782] EXT4-fs (loop2): dirty_blocks=64 [ 95.534878][ T4782] EXT4-fs (loop2): Block reservation details [ 95.606727][ T4782] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 95.613829][ T4802] loop4: detected capacity change from 0 to 4096 [ 95.627509][ T4798] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 95.708861][ T4802] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 95.754747][ T4798] EXT4-fs (loop2): This should not happen!! Data will be lost [ 95.754747][ T4798] [ 95.772118][ T4802] EXT4-fs (loop4): Ignoring removed orlov option [ 95.842832][ T4802] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,discard,nodioread_nolock,sysvgroups,lazytime,stripe=0x0000000000000000,minixdf,orlov,nobarrier,,errors=continue. Quota mode: writeback. [ 96.387263][ T4817] device-mapper: multipath: invalid PG number supplied to bypass_pg [ 96.830727][ T4840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 96.921697][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 97.026237][ T4809] chnl_net:caif_netlink_parms(): no params data found [ 97.165312][ T4847] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.194812][ T4232] device hsr_slave_0 left promiscuous mode [ 97.238983][ T4232] device hsr_slave_1 left promiscuous mode [ 97.251224][ T4232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.282505][ T4232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.315419][ C1] net_ratelimit: 40 callbacks suppressed [ 97.332192][ T4232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.378517][ T4232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.428083][ T4232] device bridge_slave_1 left promiscuous mode [ 97.434376][ T4232] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.517631][ T4232] device bridge_slave_0 left promiscuous mode [ 97.523975][ T4232] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.594804][ T4862] device-mapper: multipath: invalid PG number supplied to bypass_pg [ 97.608854][ T4232] device veth1_macvtap left promiscuous mode [ 97.625205][ T4226] Bluetooth: hci1: command 0x0409 tx timeout [ 97.626385][ T4232] device veth0_macvtap left promiscuous mode [ 97.682495][ T4232] device veth1_vlan left promiscuous mode [ 97.688663][ T4232] device veth0_vlan left promiscuous mode [ 97.707428][ T4874] loop2: detected capacity change from 0 to 128 [ 97.752201][ T4874] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.814201][ T26] audit: type=1800 audit(1791892549.292:5): pid=4874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.152" name="bus" dev="loop2" ino=1048640 res=0 errno=0 [ 97.907148][ T9] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.743574][ T4232] team0 (unregistering): Port device team_slave_1 removed [ 98.783801][ T4232] team0 (unregistering): Port device team_slave_0 removed [ 98.850386][ T4232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.894060][ T4232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.151911][ T4232] bond0 (unregistering): Released all slaves [ 99.183887][ T4913] device-mapper: multipath: invalid PG number supplied to bypass_pg [ 99.424375][ T3558] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 99.444142][ T3558] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 99.452888][ T3558] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 99.460209][ T3558] loop0: [ 99.714912][ T1107] Bluetooth: hci1: command 0x041b tx timeout [ 100.880919][ T4809] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.897761][ T4809] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.933231][ T4809] device bridge_slave_0 entered promiscuous mode [ 100.988673][ T4809] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.053544][ T4809] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.088092][ T4809] device bridge_slave_1 entered promiscuous mode [ 101.325542][ T4809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.341070][ T4974] device-mapper: multipath: invalid PG number supplied to bypass_pg [ 101.381437][ T4809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.708654][ T4809] team0: Port device team_slave_0 added [ 101.764276][ T4809] team0: Port device team_slave_1 added [ 101.786146][ T1331] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.795132][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 101.825956][ T4995] capability: warning: `syz.4.180' uses deprecated v2 capabilities in a way that may be insecure [ 102.016686][ T4995] loop4: detected capacity change from 0 to 512 [ 102.024323][ T4809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.046123][ T1331] usb 2-1: Using ep0 maxpacket: 32 [ 102.057169][ T4809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.175018][ T1331] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 102.206436][ T1331] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 102.258421][ T4809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.277686][ T1331] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 102.335114][ T4809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.354643][ C1] net_ratelimit: 38 callbacks suppressed [ 102.381921][ T4809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.464834][ T4809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.485072][ T1331] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 102.512000][ T1331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.544777][ T1331] usb 2-1: Product: syz [ 102.561014][ T1331] usb 2-1: Manufacturer: syz [ 102.588725][ T1331] usb 2-1: SerialNumber: syz [ 102.677670][ T1331] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 102.703962][ T1331] imon 2-1:155.0: unable to initialize intf0, err -19 [ 102.732459][ T1331] imon:imon_probe: failed to initialize context! [ 102.764253][ T1331] imon 2-1:155.0: unable to register, err -19 [ 102.932108][ T4809] device hsr_slave_0 entered promiscuous mode [ 103.014515][ T4809] device hsr_slave_1 entered promiscuous mode [ 103.864751][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 103.974567][ T4809] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 104.041806][ T4809] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 104.049011][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.105795][ T4809] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 104.154551][ T4809] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 104.185374][ T4224] Bluetooth: hci5: command 0x1003 tx timeout [ 104.199804][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 104.264385][ T5025] loop4: detected capacity change from 0 to 32768 [ 104.455117][ T21] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.472003][ T5025] JBD2: Ignoring recovery information on journal [ 104.476072][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.489218][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.499600][ T21] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.573169][ T4809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.583684][ T5025] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 104.601027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.639649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.657974][ T21] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.690473][ T4809] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.702353][ T21] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.722406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.731282][ T21] usb 4-1: Product: syz [ 104.747713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.756126][ T21] usb 4-1: Manufacturer: syz [ 104.787623][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.794864][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.826306][ T21] cdc_wdm 4-1:1.0: skipping garbage [ 104.831740][ T21] cdc_wdm 4-1:1.0: skipping garbage [ 104.847696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.872292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.887522][ T21] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 104.894397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.902807][ T21] cdc_wdm 4-1:1.0: Unknown control protocol [ 104.917826][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.925171][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.933186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.971638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.992301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.004771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.018260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.030566][ T7] usb 2-1: USB disconnect, device number 4 [ 105.042314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.062318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.087648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.096596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.105343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.118923][ T1107] usb 4-1: USB disconnect, device number 4 [ 105.127636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.135874][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 105.136059][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 105.136085][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 105.244239][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.298445][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 105.694321][ T4809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.796188][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.812990][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.091118][ T5025] (syz.4.186,5025,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 106.197996][ T5075] bond1: (slave veth3): Enslaving as an active interface with a down link [ 106.275648][ T1107] Bluetooth: hci5: command 0x1001 tx timeout [ 106.281996][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 106.295254][ T5087] syzkaller0: create flow: hash 2148314402 index 0 [ 106.314561][ T5079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.547276][ T5080] syzkaller0 (unregistered): delete flow: hash 2148314402 index 0 [ 106.629879][ T5025] syz.4.186 (5025) used greatest stack depth: 17856 bytes left [ 106.875767][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.890173][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.921111][ T4185] ocfs2: Unmounting device (7,4) on (node local) [ 107.004212][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.046285][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.084165][ T4809] device veth0_vlan entered promiscuous mode [ 107.101876][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.138148][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.180264][ T4809] device veth1_vlan entered promiscuous mode [ 107.310351][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.334508][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.368265][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.399969][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.428973][ T4809] device veth0_macvtap entered promiscuous mode [ 107.461166][ T4809] device veth1_macvtap entered promiscuous mode [ 107.527522][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.554644][ C1] net_ratelimit: 34 callbacks suppressed [ 107.562895][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.580546][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.591328][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.606893][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.625162][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.637583][ T4809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.665523][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.687421][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.707775][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.722793][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.744447][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.762887][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.790041][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.807785][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.821193][ T4809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.841339][ T4809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.861258][ T4809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.875305][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.895610][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.916826][ T4809] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.934830][ T4809] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.943781][ T4809] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.963523][ T4809] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.287102][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.309965][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.352740][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.360585][ T2301] Bluetooth: hci5: command 0x1009 tx timeout [ 108.455137][ T4446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.476784][ T4446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.519581][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.775982][ T5146] tipc: Failed to remove unknown binding: 66,0,0/4:181563909/181563910 [ 108.825300][ T5146] tipc: Failed to remove unknown binding: 66,0,0/4:181563909/181563910 [ 109.125147][ T5159] loop3: detected capacity change from 0 to 128 [ 109.894927][ T1107] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 110.082101][ T5198] vhci_hcd vhci_hcd.0: failed to lookup sock [ 110.275613][ T1107] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 110.359750][ T5204] nvmet_tcp: malformed ip/port passed: : [ 110.415233][ T1107] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.435176][ T1107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 110.464757][ T1107] usb 7-1: SerialNumber: syz [ 110.571258][ T5213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.217'. [ 110.619216][ T5213] IPv6: sit1: Disabled Multicast RS [ 110.662638][ T5215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.217'. [ 110.980295][ T26] audit: type=1800 audit(1791892562.462:6): pid=5223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.216" name="bus" dev="sda1" ino=2051 res=0 errno=0 [ 111.022332][ T5209] Invalid ELF header magic: != ELF [ 111.053135][ T5226] FAULT_INJECTION: forcing a failure. [ 111.053135][ T5226] name failslab, interval 1, probability 0, space 0, times 0 [ 111.093689][ T5226] CPU: 1 PID: 5226 Comm: syz.3.219 Not tainted syzkaller #0 [ 111.101126][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.111308][ T5226] Call Trace: [ 111.114879][ T5226] [ 111.117840][ T5226] dump_stack_lvl+0x188/0x250 [ 111.122724][ T5226] ? show_regs_print_info+0x20/0x20 [ 111.128036][ T5226] ? load_image+0x410/0x410 [ 111.132656][ T5226] ? __lock_acquire+0x7d40/0x7d40 [ 111.137804][ T5226] should_fail+0x383/0x4b0 [ 111.142343][ T5226] should_failslab+0x5/0x20 [ 111.146967][ T5226] slab_pre_alloc_hook+0x51/0xc0 [ 111.151949][ T5226] kmem_cache_alloc_trace+0x47/0x290 [ 111.157278][ T5226] ? tls_set_device_offload+0x100/0xee0 [ 111.162966][ T5226] tls_set_device_offload+0x100/0xee0 [ 111.168640][ T5226] ? _copy_from_user+0x111/0x170 [ 111.173625][ T5226] tls_setsockopt+0x4d0/0xa90 [ 111.178342][ T5226] ? sock_common_recvmsg+0x1c0/0x1c0 [ 111.183671][ T5226] __sys_setsockopt+0x2bf/0x3d0 [ 111.188555][ T5226] __x64_sys_setsockopt+0xb1/0xc0 [ 111.193814][ T5226] do_syscall_64+0x4c/0xa0 [ 111.198259][ T5226] ? clear_bhb_loop+0x30/0x80 [ 111.202963][ T5226] ? clear_bhb_loop+0x30/0x80 [ 111.207679][ T5226] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.213794][ T5226] RIP: 0033:0x7f60408fa2d9 [ 111.218265][ T5226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.238261][ T5226] RSP: 002b:00007f603eb52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.246712][ T5226] RAX: ffffffffffffffda RBX: 00007f6040b81fa0 RCX: 00007f60408fa2d9 [ 111.254718][ T5226] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000003 [ 111.262818][ T5226] RBP: 00007f6040991888 R08: 0000000000000038 R09: 0000000000000000 [ 111.270881][ T5226] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 111.278906][ T5226] R13: 00007f6040b82038 R14: 00007f6040b81fa0 R15: 00007ffcd25f9bf8 [ 111.286958][ T5226] [ 111.324321][ T1107] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 111.604056][ T1331] usb 7-1: USB disconnect, device number 2 [ 111.635695][ T1331] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 111.950843][ T5221] loop4: detected capacity change from 0 to 40427 [ 112.005952][ T4260] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.082323][ T5221] F2FS-fs (loop4): invalid crc value [ 112.121997][ T5221] F2FS-fs (loop4): Found nat_bits in checkpoint [ 112.244791][ T4260] usb 2-1: Using ep0 maxpacket: 16 [ 112.283249][ T5221] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 112.364956][ T4260] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.390445][ T4260] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.595182][ T4260] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.656830][ T4260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.754654][ C1] net_ratelimit: 78 callbacks suppressed [ 112.765026][ T4260] usb 2-1: Product: syz [ 112.799758][ T4260] usb 2-1: Manufacturer: syz [ 112.804416][ T4260] usb 2-1: SerialNumber: syz [ 112.922116][ T5266] binder: 5265:5266 ioctl c0306201 0 returned -14 [ 112.965555][ T5263] attempt to access beyond end of device [ 112.965555][ T5263] loop4: rw=10241, want=51032, limit=40427 [ 113.031655][ T5271] binder: 5265:5271 ioctl c0306201 0 returned -14 [ 113.146416][ T5263] attempt to access beyond end of device [ 113.146416][ T5263] loop4: rw=10241, want=53248, limit=40427 [ 113.185207][ T4260] usb 2-1: 0:2 : does not exist [ 113.231774][ T5263] attempt to access beyond end of device [ 113.231774][ T5263] loop4: rw=10241, want=45064, limit=40427 [ 113.281585][ T4260] usb 2-1: USB disconnect, device number 5 [ 113.456468][ T5263] attempt to access beyond end of device [ 113.456468][ T5263] loop4: rw=10241, want=61640, limit=40427 [ 113.584669][ T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 113.834924][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 113.898104][ T5302] loop2: detected capacity change from 0 to 256 [ 113.905074][ T5263] attempt to access beyond end of device [ 113.905074][ T5263] loop4: rw=10241, want=77824, limit=40427 [ 113.956744][ T7] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 113.991361][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.000995][ T5302] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.051063][ T5302] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 114.072415][ T5302] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xda9de4d5, utbl_chksum : 0xe619d30d) [ 114.094930][ T2301] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.113207][ T7] pvrusb2: Hardware description: Terratec Grabster AV400 [ 114.133772][ T7] pvrusb2: ********** [ 114.141585][ T5263] attempt to access beyond end of device [ 114.141585][ T5263] loop4: rw=10241, want=85880, limit=40427 [ 114.157906][ T7] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 114.203013][ T7] pvrusb2: Important functionality might not be entirely working. [ 114.228417][ T7] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 114.270799][ T7] pvrusb2: ********** [ 114.324970][ T2425] pvrusb2: Invalid write control endpoint [ 114.375818][ T2301] usb 2-1: Using ep0 maxpacket: 16 [ 114.494868][ T2301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.508128][ T2425] pvrusb2: Invalid write control endpoint [ 114.514302][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 114.528285][ T2301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.537629][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 114.546326][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 114.569414][ T2425] pvrusb2: Device being rendered inoperable [ 114.603698][ T5275] pvrusb2: Attempted to execute control transfer when device not ok [ 114.636883][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 114.665151][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 114.668859][ T2425] pvrusb2: Attached sub-driver cx25840 [ 114.668870][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 114.668889][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 114.756406][ T2301] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.756430][ T2301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.756450][ T2301] usb 2-1: Product: syz [ 114.756467][ T2301] usb 2-1: Manufacturer: syz [ 114.756483][ T2301] usb 2-1: SerialNumber: syz [ 115.095221][ T2301] usb 2-1: 0:2 : does not exist [ 115.113285][ T13] usb 7-1: USB disconnect, device number 3 [ 115.192997][ T2301] usb 2-1: USB disconnect, device number 6 [ 115.483264][ T5344] process 'syz.2.242' launched './file0' with NULL argv: empty string added [ 115.492583][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'. [ 115.512780][ T5344] Invalid argument reading file caps for ./file0 [ 115.597328][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.950612][ T26] audit: type=1800 audit(1791892567.432:7): pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.250" name=8006 dev="sda1" ino=2052 res=0 errno=0 [ 115.999585][ T5370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'. [ 116.207426][ T5378] Console: switching to colour VGA+ 80x25 [ 116.278948][ T5378] Console: switching to colour frame buffer device 128x48 [ 116.404483][ T5383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 116.421445][ T5383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.544465][ T5383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.837030][ T5397] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.131210][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 117.410742][ T5423] loop6: detected capacity change from 0 to 4096 [ 117.595458][ T5423] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 117.813858][ T5436] PM: Enabling pm_trace changes system date and time during resume. [ 117.813858][ T5436] PM: Correct system time has to be restored manually after resume. [ 117.944668][ C0] net_ratelimit: 47 callbacks suppressed [ 118.151096][ T5445] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.340990][ T5456] loop3: detected capacity change from 0 to 2048 [ 118.483658][ T5456] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 118.523375][ T5460] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 118.561043][ T5456] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 118.648148][ T5456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.066514][ T5474] loop3: detected capacity change from 0 to 512 [ 119.093932][ T5473] loop6: detected capacity change from 0 to 2048 [ 119.212571][ T5473] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.283755][ T5473] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.320423][ T5473] fs-verity: sha512 using implementation "sha512-avx2" [ 119.384762][ T4224] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.635142][ T4224] usb 4-1: Using ep0 maxpacket: 32 [ 119.764474][ T5484] netlink: 36 bytes leftover after parsing attributes in process `syz.2.285'. [ 119.785326][ T4224] usb 4-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 120.005095][ T4224] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 120.031154][ T4224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.070340][ T4224] usb 4-1: Product: syz [ 120.090657][ T4224] usb 4-1: Manufacturer: syz [ 120.121028][ T4224] usb 4-1: SerialNumber: syz [ 120.146129][ T4224] usb 4-1: config 0 descriptor?? [ 120.193997][ T4224] usb 4-1: bad CDC descriptors [ 120.229435][ T4224] usb 4-1: unsupported MDLM descriptors [ 120.368954][ T5508] FAULT_INJECTION: forcing a failure. [ 120.368954][ T5508] name failslab, interval 1, probability 0, space 0, times 0 [ 120.397858][ T4224] usb 4-1: USB disconnect, device number 5 [ 120.426332][ T5508] CPU: 0 PID: 5508 Comm: syz.6.293 Not tainted syzkaller #0 [ 120.433691][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.433745][ T5508] Call Trace: [ 120.447523][ T5508] [ 120.450469][ T5508] dump_stack_lvl+0x188/0x250 [ 120.455279][ T5508] ? show_regs_print_info+0x20/0x20 [ 120.460868][ T5508] ? load_image+0x410/0x410 [ 120.465504][ T5508] ? __might_sleep+0xf0/0xf0 [ 120.465532][ T5508] ? __lock_acquire+0x7d40/0x7d40 [ 120.465561][ T5508] should_fail+0x383/0x4b0 [ 120.475537][ T5508] should_failslab+0x5/0x20 [ 120.475563][ T5508] slab_pre_alloc_hook+0x51/0xc0 [ 120.484528][ T5508] kmem_cache_alloc_trace+0x47/0x290 [ 120.484554][ T5508] ? vidtv_s302m_encoder_init+0x322/0x770 [ 120.484580][ T5508] vidtv_s302m_encoder_init+0x322/0x770 [ 120.484601][ T5508] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 120.484637][ T5508] vidtv_channel_s302m_init+0x357/0x830 [ 120.495146][ T5508] vidtv_channels_init+0x41/0x90 [ 120.506506][ T5508] vidtv_mux_init+0x4d0/0x1950 [ 120.506531][ T5508] ? __mutex_lock_common+0x435/0x2400 [ 120.517735][ T5508] vidtv_start_feed+0x368/0x590 [ 120.517776][ T5508] ? vidtv_i2c_func+0x10/0x10 [ 120.527509][ T5508] ? vidtv_stop_feed+0x250/0x250 [ 120.527539][ T5508] ? _raw_spin_lock_irq+0xb7/0xf0 [ 120.538027][ T5508] ? _raw_spin_lock_irqsave+0x100/0x100 [ 120.538055][ T5508] ? _raw_spin_unlock_irq+0x1f/0x40 [ 120.538082][ T5508] dmx_section_feed_start_filtering+0x4f3/0x680 [ 120.547681][ T5508] dvb_dmxdev_filter_start+0xc62/0x1060 [ 120.558277][ T5508] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 120.558305][ T5508] dvb_demux_do_ioctl+0x463/0x530 [ 120.570095][ T5508] dvb_usercopy+0x191/0x2b0 [ 120.581279][ T5508] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 120.590785][ T5508] ? dvb_generic_ioctl+0xb0/0xb0 [ 120.601491][ T5508] ? dvb_demux_poll+0x210/0x210 [ 120.606460][ T5508] dvb_demux_ioctl+0x25/0x30 [ 120.606486][ T5508] __se_sys_ioctl+0xfa/0x170 [ 120.606512][ T5508] do_syscall_64+0x4c/0xa0 [ 120.606530][ T5508] ? clear_bhb_loop+0x30/0x80 [ 120.606548][ T5508] ? clear_bhb_loop+0x30/0x80 [ 120.616146][ T5508] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.616178][ T5508] RIP: 0033:0x7fb7f9c4c2d9 [ 120.616201][ T5508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.625345][ T5508] RSP: 002b:00007fb7f7ea4028 EFLAGS: 00000246 [ 120.636093][ T5508] ORIG_RAX: 0000000000000010 [ 120.636108][ T5508] RAX: ffffffffffffffda RBX: 00007fb7f9ed3fa0 RCX: 00007fb7f9c4c2d9 [ 120.636124][ T5508] RDX: 00002000000006c0 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 120.636138][ T5508] RBP: 00007fb7f9ce3888 R08: 0000000000000000 R09: 0000000000000000 [ 120.636152][ T5508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.636164][ T5508] R13: 00007fb7f9ed4038 R14: 00007fb7f9ed3fa0 R15: 00007ffe6c79b2f8 [ 120.636198][ T5508] [ 120.636253][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.728712][ T5508] ------------[ cut here ]------------ [ 120.728720][ C1] tcp_in_window: res=1 sender end=1067192200 maxend=1070335592 maxwin=3144576 receiver end=457514250 maxend=460658386 maxwin=3143552 [ 120.734199][ T5508] kernel BUG at arch/x86/mm/physaddr.c:28! [ 120.734226][ T5508] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 120.734240][ C1] virtqueue callback for ffff888147cbd600 (ffffffff85497fd0) [ 120.734243][ T5508] CPU: 0 PID: 5508 Comm: syz.6.293 Not tainted syzkaller #0 [ 120.734263][ T5508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.747911][ C1] tcp_conntracks: [ 120.754007][ T5508] RIP: 0010:__phys_addr+0x158/0x170 [ 120.760256][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 120.768418][ T5508] Code: ff ff e8 fb 14 43 00 48 c7 c7 d0 83 f9 8c 48 89 de 4c 89 f2 e8 d9 3c d3 02 e9 49 ff ff ff e8 df 14 43 00 0f 0b e8 d8 14 43 00 <0f> 0b e8 d1 14 43 00 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 [ 120.768443][ T5508] RSP: 0018:ffffc9000154f800 EFLAGS: 00010246 [ 120.768464][ T5508] RAX: ffffffff81360e88 RBX: 0000408003181000 RCX: 0000000000080000 [ 120.778740][ T4224] kobject: '4-1' (ffff888060c8b0a8): calling ktype release [ 120.786250][ T5508] RDX: ffffc90014b3b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 120.786269][ T5508] RBP: ffffc9000154f978 R08: 0000000000000040 R09: 1ffffffff1a3e6e6 [ 120.786283][ T5508] R10: dffffc0000000000 R11: fffffbfff1a3e6e7 R12: ffff88802cc4c710 [ 120.786296][ T5508] R13: ffff88802cc4c740 R14: 000000000000002e R15: 0000000000000001 [ 120.786298][ C1] virtqueue callback for ffff888147cbd600 (ffffffff85497fd0) [ 120.786310][ T5508] FS: 00007fb7f7ea46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 120.786328][ T5508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.790277][ T4224] kobject: '4-1': free name [ 120.795423][ T5508] CR2: 00007f02064b1368 CR3: 000000005a48b000 CR4: 00000000003506f0 [ 120.795445][ T5508] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 120.801416][ C1] nf_conntrack: normal packet for ffff888076ed4300 [ 120.821710][ T5508] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.821737][ T5508] Call Trace: [ 120.821745][ T5508] [ 120.821754][ T5508] ? vidtv_s302m_encoder_init+0x573/0x770 [ 120.821779][ T5508] kfree+0x64/0x2a0 [ 120.821796][ C1] virtqueue callback for ffff888147cbd600 (ffffffff85497fd0) [ 120.821797][ T5508] ? kmem_cache_alloc_trace+0x18d/0x290 [ 120.821819][ T5508] ? vidtv_s302m_encoder_init+0x322/0x770 [ 120.827934][ C1] tcp_in_window: START [ 120.835977][ T5508] vidtv_s302m_encoder_init+0x573/0x770 [ 120.836003][ T5508] ? vidtv_pes_write_into+0x11e0/0x11e0 [ 120.843565][ C1] tcp_in_window: [ 120.851654][ T5508] vidtv_channel_s302m_init+0x357/0x830 [ 120.851703][ T5508] vidtv_channels_init+0x41/0x90 [ 120.860238][ C1] seq=457514250 ack=1067192200+(0) sack=1067192200+(0) win=24559 end=457514250 [ 120.868601][ T5508] vidtv_mux_init+0x4d0/0x1950 [ 120.868650][ T5508] ? __mutex_lock_common+0x435/0x2400 [ 120.876930][ C1] tcp_in_window: sender end=457514250 maxend=460658386 maxwin=3143552 scale=7 receiver end=1067192200 maxend=1070335592 maxwin=3144576 scale=7 [ 120.885868][ T5508] vidtv_start_feed+0x368/0x590 [ 120.885906][ T5508] ? vidtv_i2c_func+0x10/0x10 [ 120.895159][ C1] tcp_in_window: [ 120.901887][ T5508] ? vidtv_stop_feed+0x250/0x250 [ 120.906404][ C1] seq=457514250 ack=1067192200+(0) sack=1067192200+(0) win=24559 end=457514250 [ 120.914625][ T5508] ? _raw_spin_lock_irq+0xb7/0xf0 [ 120.914656][ T5508] ? _raw_spin_lock_irqsave+0x100/0x100 [ 120.922826][ C1] tcp_in_window: sender end=457514250 maxend=460658386 maxwin=3143552 scale=7 receiver end=1067192200 maxend=1070335592 maxwin=3144576 scale=7 [ 120.929597][ T5508] ? _raw_spin_unlock_irq+0x1f/0x40 [ 120.929621][ T5508] dmx_section_feed_start_filtering+0x4f3/0x680 [ 120.937961][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 120.941231][ T5508] dvb_dmxdev_filter_start+0xc62/0x1060 [ 120.941251][ T5508] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 120.941267][ T5508] dvb_demux_do_ioctl+0x463/0x530 [ 120.941284][ T5508] dvb_usercopy+0x191/0x2b0 [ 120.944222][ C1] tcp_in_window: res=1 sender end=457514250 maxend=460658386 maxwin=3143552 receiver end=1067192200 maxend=1070335752 maxwin=3144576 [ 120.949949][ T5508] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 120.949968][ T5508] ? dvb_generic_ioctl+0xb0/0xb0 [ 120.949992][ T5508] ? dvb_demux_poll+0x210/0x210 [ 120.953793][ C1] tcp_conntracks: [ 120.961242][ T5508] dvb_demux_ioctl+0x25/0x30 [ 120.961264][ T5508] __se_sys_ioctl+0xfa/0x170 [ 120.967158][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 120.972971][ T5508] do_syscall_64+0x4c/0xa0 [ 120.977192][ C1] No more buffers in queue [ 120.982809][ T5508] ? clear_bhb_loop+0x30/0x80 [ 120.988666][ C1] eth0: xmit ffff888076e0ec80 42:01:0a:80:00:01 [ 120.992290][ T5508] ? clear_bhb_loop+0x30/0x80 [ 120.998055][ C1] Added buffer head 11 to ffff888147cbd700 [ 121.003225][ C1] virtqueue callback for ffff888147cbd700 (ffffffff854980c0) [ 121.003222][ T5508] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.003248][ T5508] RIP: 0033:0x7fb7f9c4c2d9 [ 121.012813][ C1] Sent skb ffff888076e0ec80 [ 121.017190][ T5508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.017210][ T5508] RSP: 002b:00007fb7f7ea4028 EFLAGS: 00000246 [ 121.022596][ C1] No more buffers in queue [ 121.037244][ T5508] ORIG_RAX: 0000000000000010 [ 121.037263][ T5508] RAX: ffffffffffffffda RBX: 00007fb7f9ed3fa0 RCX: 00007fb7f9c4c2d9 [ 121.037279][ T5508] RDX: 00002000000006c0 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 121.037292][ T5508] RBP: 00007fb7f9ce3888 R08: 0000000000000000 R09: 0000000000000000 [ 121.042349][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 121.047156][ T5508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.047170][ T5508] R13: 00007fb7f9ed4038 R14: 00007fb7f9ed3fa0 R15: 00007ffe6c79b2f8 [ 121.047193][ T5508] [ 121.050831][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 121.055835][ T5508] Modules linked in: [ 121.055896][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.065168][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 121.071373][ C0] nf_conntrack: normal packet for ffff888076ed4300 [ 121.075894][ C1] No more buffers in queue [ 121.075931][ C1] tcp_in_window: START [ 121.290964][ C0] virtqueue callback for ffff88801f10b000 (ffffffff84450960) [ 121.291955][ C1] tcp_in_window: [ 121.297788][ C0] virtqueue interrupt with no work for ffff88801f58ff00 [ 121.305909][ C1] seq=1067192200 ack=457514250+(0) sack=457514250+(0) win=24567 end=1067192200 [ 121.314177][ C0] virtqueue interrupt with no work for ffff88801f58fe00 [ 121.314182][ C1] virtqueue callback for ffff888147cbd600 (ffffffff85497fd0) [ 121.396729][ C1] tcp_in_window: sender end=1067192200 maxend=1070335752 maxwin=3144576 scale=7 receiver end=457514250 maxend=460658386 maxwin=3143552 scale=7 [ 121.411563][ C1] tcp_in_window: [ 121.411577][ C1] seq=1067192200 ack=457514250+(0) sack=457514250+(0) win=24567 end=1067192200 [ 121.424697][ C1] tcp_in_window: sender end=1067192200 maxend=1070335752 maxwin=3144576 scale=7 receiver end=457514250 maxend=460658386 maxwin=3143552 scale=7 [ 121.439597][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 121.445194][ C1] tcp_in_window: res=1 sender end=1067192200 maxend=1070335752 maxwin=3144576 receiver end=457514250 maxend=460658826 maxwin=3143552 [ 121.458847][ C1] tcp_conntracks: [ 121.458861][ C1] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 121.468110][ C1] tcp_in_window: START [ 121.472190][ C1] tcp_in_window: [ 121.472202][ C1] seq=1067192200 ack=457514250+(0) sack=457514250+(0) win=24567 end=1067192201 [ 121.484815][ C1] tcp_in_window: sender end=1067192200 maxend=1070335752 maxwin=3144576 scale=7 receiver end=457514250 maxend=460658826 maxwin=3143552 scale=7 [ 121.499444][ C1] tcp_in_window: [ 121.499453][ C1] seq=1067192200 ack=457514250+(0) sack=457514250+(0) win=24567 end=1067192201 [ 121.512276][ C1] tcp_in_window: sender end=1067192200 maxend=1070335752 maxwin=3144576 scale=7 receiver end=457514250 maxend=460658826 maxwin=3143552 scale=7 [ 121.527403][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 121.532869][ C1] tcp_in_window: res=1 sender end=1067192201 maxend=1070335752 maxwin=3144576 receiver end=457514250 maxend=460658826 maxwin=3143552 [ 121.546900][ C1] tcp_conntracks: [ 121.546916][ C1] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 121.556498][ C0] tcp_in_window: START [ 121.560810][ C0] tcp_in_window: [ 121.560823][ C0] seq=457514250 ack=1067192200+(0) sack=1067192200+(0) win=24559 end=457514306 [ 121.574502][ C0] tcp_in_window: sender end=457514250 maxend=460658826 maxwin=3143552 scale=7 receiver end=1067192201 maxend=1070335752 maxwin=3144576 scale=7 [ 121.589508][ C0] tcp_in_window: [ 121.589522][ C0] seq=457514250 ack=1067192200+(0) sack=1067192200+(0) win=24559 end=457514306 [ 121.602275][ C0] tcp_in_window: sender end=457514250 maxend=460658826 maxwin=3143552 scale=7 receiver end=1067192201 maxend=1070335752 maxwin=3144576 scale=7 [ 121.617259][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 121.622568][ C0] tcp_in_window: res=1 sender end=457514306 maxend=460658826 maxwin=3143552 receiver end=1067192201 maxend=1070335752 maxwin=3144576 [ 121.636702][ C0] tcp_conntracks: [ 121.636717][ C0] syn=0 ack=1 fin=0 rst=0 old=4 new=5 [ 121.646132][ C1] tcp_in_window: START [ 121.646212][ C0] No more buffers in queue [ 121.650227][ C1] tcp_in_window: [ 121.650236][ C1] seq=1067192200 ack=457514250+(0) sack=457514250+(0) win=24567 end=1067192201 [ 121.655038][ C0] eth0: xmit ffff888059aa9768 42:01:0a:80:00:01 [ 121.659191][ C1] tcp_in_window: sender end=1067192201 maxend=1070335752 maxwin=3144576 scale=7 receiver end=457514306 maxend=460658826 maxwin=3143552 scale=7 [ 121.659230][ C1] tcp_in_window: [ 121.659239][ C1] seq=1067192200 ack=457514250+(0) sack=457514250+(0) win=24567 end=1067192201 [ 121.669354][ C0] Added buffer head 7 to ffff888147cbd500 [ 121.675887][ C1] virtqueue callback for ffff888147cbd600 (ffffffff85497fd0) [ 121.675897][ C0] virtqueue callback for ffff888147cbd500 (ffffffff854980c0) [ 121.675911][ C1] tcp_in_window: sender end=1067192201 maxend=1070335752 maxwin=3144576 scale=7 receiver end=457514306 maxend=460658826 maxwin=3143552 scale=7 [ 121.693576][ C0] Sent skb ffff888059aa9768 [ 121.694492][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 121.703553][ C0] No more buffers in queue [ 121.709304][ C1] tcp_in_window: res=1 sender end=1067192201 maxend=1070335752 maxwin=3144576 receiver end=457514306 maxend=460658826 maxwin=3143552 [ 121.735645][ T7] Added buffer head 0 to ffff88801f10b000 [ 121.739317][ C1] tcp_conntracks: [ 121.747933][ T5508] ---[ end trace b36a71470e8ee0fc ]--- [ 121.749269][ C1] syn=0 ack=1 fin=1 rst=0 old=5 new=6 [ 121.754029][ T5508] RIP: 0010:__phys_addr+0x158/0x170 [ 121.767958][ C1] nf_conntrack: normal packet for ffff888076ed4300 [ 121.773779][ T5508] Code: ff ff e8 fb 14 43 00 48 c7 c7 d0 83 f9 8c 48 89 de 4c 89 f2 e8 d9 3c d3 02 e9 49 ff ff ff e8 df 14 43 00 0f 0b e8 d8 14 43 00 <0f> 0b e8 d1 14 43 00 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 [ 121.777544][ C1] tcp_in_window: START [ 121.783357][ T5508] RSP: 0018:ffffc9000154f800 EFLAGS: 00010246 [ 121.788881][ C1] tcp_in_window: [ 121.788895][ C1] seq=457514306 ack=1067192201+(0) sack=1067192201+(0) win=24559 end=457514306 [ 121.788918][ C1] tcp_in_window: sender end=457514306 maxend=460658826 maxwin=3143552 scale=7 receiver end=1067192201 maxend=1070335752 maxwin=3144576 scale=7 [ 121.788943][ C1] tcp_in_window: [ 121.788950][ C1] seq=457514306 ack=1067192201+(0) sack=1067192201+(0) win=24559 end=457514306 [ 121.788971][ C1] tcp_in_window: sender end=457514306 maxend=460658826 maxwin=3143552 scale=7 receiver end=1067192201 maxend=1070335752 maxwin=3144576 scale=7 [ 121.788994][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 121.789010][ C1] tcp_in_window: res=1 sender end=457514306 maxend=460658826 maxwin=3143552 receiver end=1067192201 maxend=1070335753 maxwin=3144576 [ 121.789032][ C1] tcp_conntracks: [ 121.789039][ C1] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 121.789130][ C1] No more buffers in queue [ 121.789142][ C1] eth0: xmit ffff88801f9258c0 42:01:0a:80:00:01 [ 121.789163][ C1] Added buffer head 11 to ffff888147cbd700 [ 121.789242][ C1] virtqueue callback for ffff888147cbd700 (ffffffff854980c0) [ 121.794847][ T5508] [ 121.801382][ C1] virtqueue callback for ffff888147cbd600 (ffffffff85497fd0) [ 121.802479][ C1] Sent skb ffff88801f9258c0 [ 121.822070][ T7] nf_conntrack: normal packet for ffff888076ed5080 [ 121.826024][ C1] No more buffers in queue [ 121.833931][ T5521] kcov: kcov_task_exit: t = ffff88802b5bbb80, kcov->t = ffff88802b5bbb80 [ 121.850960][ C1] No more buffers in queue [ 121.950539][ T5522] kcov: kcov_task_exit: t = ffff88802b5b9dc0, kcov->t = ffff88802b5b9dc0 [ 121.951997][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 121.980962][ T5520] (null): siw: event 17 [ 121.989067][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 122.005178][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 122.011012][ C1] No more buffers in queue [ 122.015518][ C1] tcp_in_window: START [ 122.017361][ T5508] RAX: ffffffff81360e88 RBX: 0000408003181000 RCX: 0000000000080000 [ 122.019769][ C1] tcp_in_window: [ 122.019781][ C1] seq=1067192200 ack=457514250+(0) sack=457514250+(0) win=24567 end=1067192201 [ 122.036178][ T5520] device: 'syzkaller0': device_add [ 122.040457][ C1] tcp_in_window: sender end=1067192201 maxend=1070335753 maxwin=3144576 scale=7 receiver end=457514306 maxend=460658826 maxwin=3143552 scale=7 [ 122.045732][ T5474] kcov: kcov_task_exit: t = ffff888056740000, kcov->t = ffff888056740000 [ 122.060626][ C1] tcp_in_window: [ 122.069637][ C1] seq=1067192200 ack=457514250+(0) sack=457514250+(0) win=24567 end=1067192201 [ 122.082263][ C1] tcp_in_window: sender end=1067192201 maxend=1070335753 maxwin=3144576 scale=7 receiver end=457514306 maxend=460658826 maxwin=3143552 scale=7 [ 122.082695][ T5508] RDX: ffffc90014b3b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 122.096808][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 122.096827][ C1] tcp_in_window: res=1 sender end=1067192201 maxend=1070335753 maxwin=3144576 receiver end=457514306 maxend=460658826 maxwin=3143552 [ 122.105347][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 122.110214][ C1] tcp_conntracks: [ 122.110225][ C1] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 122.134233][ T5520] kobject: 'syzkaller0' (ffff8880602b4608): kobject_add_internal: parent: 'net', set: 'devices' [ 122.135431][ C1] tcp_conntracks: [ 122.135442][ C1] syn=0 ack=0 fin=0 rst=1 old=7 new=8 [ 122.143598][ T5520] net syzkaller0: No ACPI support [ 122.151985][ C1] tcp_conntracks: [ 122.151996][ C1] syn=0 ack=0 fin=0 rst=1 old=8 new=8 [ 122.174705][ T1162] bond1: (slave veth3): Send learning packet: mac b6:95:70:dc:26:a3 vlan 0 [ 122.176405][ C1] nf_conntrack: normal packet for ffff888076ed4300 [ 122.191684][ C1] tcp_in_window: START [ 122.195773][ C1] tcp_in_window: [ 122.195781][ C1] seq=457514306 ack=1067192201+(0) sack=1067192201+(0) win=24559 end=457514306 [ 122.208528][ C1] tcp_in_window: sender end=457514306 maxend=460658826 maxwin=3143552 scale=7 receiver end=1067192201 maxend=1070335753 maxwin=3144576 scale=7 [ 122.223028][ C1] tcp_in_window: [ 122.223035][ C1] seq=457514306 ack=1067192201+(0) sack=1067192201+(0) win=24559 end=457514306 [ 122.235760][ C1] tcp_in_window: sender end=457514306 maxend=460658826 maxwin=3143552 scale=7 receiver end=1067192201 maxend=1070335753 maxwin=3144576 scale=7 [ 122.250251][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 122.255536][ C1] tcp_in_window: res=1 sender end=457514306 maxend=460658826 maxwin=3143552 receiver end=1067192201 maxend=1070335753 maxwin=3144576 [ 122.269933][ C1] tcp_conntracks: [ 122.269948][ C1] syn=0 ack=1 fin=0 rst=0 old=8 new=8 [ 122.279158][ C1] No more buffers in queue [ 122.283607][ C1] eth0: xmit ffff888018fb7280 42:01:0a:80:00:01 [ 122.289870][ C1] Added buffer head 11 to ffff888147cbd700 [ 122.290986][ C0] virtqueue callback for ffff88801f10b000 (ffffffff84450960) [ 122.295782][ C1] virtqueue callback for ffff888147cbd700 (ffffffff854980c0) [ 122.303361][ C0] virtqueue interrupt with no work for ffff88801f58ff00 [ 122.310745][ C1] virtqueue callback for ffff888147cbd600 (ffffffff85497fd0) [ 122.317626][ C0] virtqueue interrupt with no work for ffff88801f58fe00 [ 122.325178][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 122.340155][ C1] kcov: kcov_start: t = ffff888026825940, size = 262144, area = ffffc90002289000 [ 122.342009][ T7] Added buffer head 0 to ffff88801f10b000 [ 122.349330][ C1] kcov: kcov_move_area: ffffc90011f34000 1048576 <= ffffc90002289000 30 [ 122.365997][ T5508] RBP: ffffc9000154f978 R08: 0000000000000040 R09: 1ffffffff1a3e6e6 [ 122.371214][ C1] Sent skb ffff888018fb7280 [ 122.379104][ C1] No more buffers in queue [ 122.380475][ T7] nf_conntrack: normal packet for ffff888024703e00 [ 122.383625][ C1] No more buffers in queue [ 122.391176][ T5508] R10: dffffc0000000000 R11: fffffbfff1a3e6e7 R12: ffff88802cc4c710 [ 122.394681][ C1] Receiving skb proto 0x0800 len 40 type 0 [ 122.394704][ C1] No more buffers in queue [ 122.394736][ C1] tcp_conntracks: [ 122.394745][ C1] syn=0 ack=0 fin=0 rst=1 old=8 new=8 [ 122.395362][ C1] No more buffers in queue [ 122.404027][ T5520] PM: Adding info for No Bus:syzkaller0 [ 122.410885][ T3520] sd 0:0:1:0: cmd ffff8880245b2d28 CDB: 0x2a [ 122.414007][ T4260] nf_conntrack: normal packet for ffff888024703500 [ 122.417011][ T3520] Added buffer head 154 to ffff88802267f200 [ 122.422929][ T13] nf_conntrack: normal packet for ffff888076ed5080 [ 122.428745][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 122.466178][ C1] kcov: kcov_start: t = ffff88807e013b80, size = 262144, area = ffffc90002289000 [ 122.466498][ T5508] R13: ffff88802cc4c740 R14: 000000000000002e R15: 0000000000000001 [ 122.475986][ C1] virtqueue callback for ffff88802267f200 (ffffffff8506e140) [ 122.476018][ C1] sd 0:0:1:0: cmd ffff8880245b2d28 response 0 status 0x0 sense_len 0 [ 122.476042][ C1] No more buffers in queue [ 122.476062][ C1] kcov: kcov_move_area: ffffc90011f34000 1048576 <= ffffc90002289000 46 [ 122.478793][ T1091] sd 0:0:1:0: cmd ffff888022532128 CDB: 0x35 [ 122.487742][ T5520] kobject: 'syzkaller0' (ffff8880602b4608): kobject_uevent_env [ 122.492173][ T1091] Added buffer head 154 to ffff88802267f200 [ 122.500857][ T5520] kobject: 'syzkaller0' (ffff8880602b4608): fill_kobj_path: path = '/devices/virtual/net/syzkaller0' [ 122.504853][ C1] virtqueue callback for ffff88802267f200 (ffffffff8506e140) [ 122.504879][ C1] sd 0:0:1:0: cmd ffff888022532128 response 0 status 0x0 sense_len 0 [ 122.513546][ T5508] FS: 00007fb7f7ea46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 122.519263][ C1] No more buffers in queue [ 122.519417][ T4193] device: '9p-4': device_unregister [ 122.519447][ T4193] kernfs runtime_status: removing [ 122.519475][ T4193] kernfs control: removing [ 122.519498][ T4193] kernfs runtime_suspended_time: removing [ 122.519521][ T4193] kernfs runtime_active_time: removing [ 122.519542][ T4193] kernfs autosuspend_delay_ms: removing [ 122.519572][ T4193] kernfs power: removing [ 122.519594][ T4193] kernfs subsystem: removing [ 122.519617][ T4193] kernfs 9p-4: removing [ 122.519648][ T4193] kernfs uevent: removing [ 122.519664][ T4193] kernfs read_ahead_kb: removing [ 122.519695][ T4193] kernfs min_ratio: removing [ 122.519715][ T4193] kernfs max_ratio: removing [ 122.519736][ T4193] kernfs stable_pages_required: removing [ 122.519757][ T4193] PM: Removing info for No Bus:9p-4 [ 122.519776][ T4193] kobject: '9p-4' (ffff8880622a0000): kobject_uevent_env [ 122.519809][ T4193] kobject: '9p-4' (ffff8880622a0000): fill_kobj_path: path = '/devices/virtual/bdi/9p-4' [ 122.519918][ T4193] kernfs 9p-4: removing [ 122.528978][ T4192] device: '0:65': device_unregister [ 122.533827][ T1091] sd 0:0:1:0: cmd ffff8880245b3128 CDB: 0x2a [ 122.544441][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 122.544461][ C1] kcov: kcov_start: t = ffff888021eb3b80, size = 262144, area = ffffc90002289000 [ 122.544489][ C1] kcov: kcov_move_area: ffffc90011f34000 1048576 <= ffffc90002289000 22 [ 122.544991][ T4193] kobject: '9p-4' (ffff8880622a0000): kobject_cleanup, parent 0000000000000000 [ 122.552273][ T1091] Added buffer head 154 to ffff88802267f200 [ 122.562446][ T5520] kobject: 'queues' (ffff88802343f450): kobject_add_internal: parent: 'syzkaller0', set: '' [ 122.570222][ T5508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.574981][ T4192] kernfs runtime_status: removing [ 122.580053][ T5508] CR2: 000055fbafdb8d51 CR3: 000000005a48b000 CR4: 00000000003506f0 [ 122.585398][ T4193] kobject: '9p-4' (ffff8880622a0000): calling ktype release [ 122.589498][ C1] virtqueue callback for ffff88802267f200 (ffffffff8506e140) [ 122.597378][ T5520] kobject: 'queues' (ffff88802343f450): kobject_uevent_env [ 122.600726][ C1] sd 0:0:1:0: cmd ffff8880245b3128 response 0 status 0x0 sense_len 0 [ 122.607104][ T4192] kernfs control: removing [ 122.611253][ C1] No more buffers in queue [ 122.613134][ T1091] sd 0:0:1:0: cmd ffff888022532128 CDB: 0x35 [ 122.616726][ T5508] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 122.620175][ T1091] Added buffer head 154 to ffff88802267f200 [ 122.620282][ C1] virtqueue callback for ffff88802267f200 (ffffffff8506e140) [ 122.620303][ C1] sd 0:0:1:0: cmd ffff888022532128 response 0 status 0x0 sense_len 0 [ 122.620325][ C1] No more buffers in queue [ 122.620711][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 122.842752][ C1] kcov: kcov_start: t = ffff88813fe60000, size = 262144, area = ffffc90002289000 [ 122.843912][ C0] nf_conntrack: new packet for ffff888078bd7980 [ 122.852193][ C1] virtqueue callback for ffff888147cbd600 (ffffffff85497fd0) [ 122.859091][ C0] nf_nat: Already setup manip DST for ct ffff888078bd7980 (status bits 0x188) [ 122.866490][ C1] kcov: kcov_move_area: ffffc90011f34000 1048576 <= ffffc90002289000 46 [ 122.875527][ C0] nf_nat: Already setup manip SRC for ct ffff888078bd7980 (status bits 0x188) [ 122.884605][ C1] No more buffers in queue [ 122.894227][ C0] nf_nat: Already setup manip DST for ct ffff888078bd7980 (status bits 0x188) [ 122.897747][ C1] eth0: xmit ffff888072943780 ff:ff:ff:ff:ff:ff [ 122.906633][ C0] nf_nat: Already setup manip SRC for ct ffff888078bd7980 (status bits 0x188) [ 122.912873][ C1] Added buffer head 11 to ffff888147cbd700 [ 122.912901][ C1] virtqueue callback for ffff888147cbd700 (ffffffff854980c0) [ 122.927073][ T4193] device: '9p-4': device_create_release [ 122.935343][ T5508] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 122.940855][ C1] Sent skb ffff888072943780 [ 122.949035][ T5520] kobject: 'queues' (ffff88802343f450): kobject_uevent_env: filter function caused the event to drop! [ 122.953250][ C1] No more buffers in queue [ 122.953278][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 122.964876][ T4192] kernfs runtime_suspended_time: removing [ 122.969629][ C1] No more buffers in queue [ 122.969751][ C1] No more buffers in queue [ 122.975922][ T4193] kobject: '9p-4': free name [ 122.981382][ C1] eth0: xmit ffff888064b7cb40 42:01:0a:80:00:01 [ 122.981416][ C1] Added buffer head 11 to ffff888147cbd700 [ 122.981539][ C1] virtqueue callback for ffff888147cbd700 (ffffffff854980c0) [ 122.986363][ T4192] kernfs runtime_active_time: removing [ 122.990936][ C1] Sent skb ffff888064b7cb40 [ 123.010504][ T4192] kernfs autosuspend_delay_ms: removing [ 123.015403][ C1] No more buffers in queue [ 123.017412][ T5520] kobject: 'rx-0' (ffff8880633d5f50): kobject_add_internal: parent: 'queues', set: 'queues' [ 123.025832][ C1] No more buffers in queue [ 123.025863][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 123.025880][ C1] kcov: kcov_start: t = ffff88802cf50000, size = 262144, area = ffffc90002289000 [ 123.025910][ C1] kcov: kcov_start: t = ffff88802cf50000, size = 524288, area = ffffc90005f41000 [ 123.025925][ C1] kcov: kcov_move_area: ffffc90011f34000 1048576 <= ffffc90002289000 22 [ 123.026343][ T4192] kernfs power: removing [ 123.031709][ T4224] usb usb4-port1: debounce total 100ms stable 100ms status 0x100 [ 123.048009][ T4192] kernfs subsystem: removing [ 123.054625][ T5508] Kernel panic - not syncing: Fatal exception [ 123.063342][ T5520] kobject: 'rx-0' (ffff8880633d5f50): kobject_uevent_env [ 123.068509][ T5508] Kernel Offset: disabled [ 123.120783][ T5508] Rebooting in 86400 seconds..