last executing test programs: 8.342187733s ago: executing program 2 (id=201): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) 6.016749728s ago: executing program 0 (id=211): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f00000003c0)=ANY=[], 0x5, 0x301, &(0x7f0000000080)="$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") write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 4.508192563s ago: executing program 0 (id=216): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x1a2, &(0x7f00000009c0)="$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") open(&(0x7f0000000140)='./file0\x00', 0x4f4e82, 0x82) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) 4.096022013s ago: executing program 2 (id=221): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 3.678903643s ago: executing program 0 (id=222): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x7f, 0x4}, 0xc) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 3.221470704s ago: executing program 4 (id=225): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3f00, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 2.891855791s ago: executing program 3 (id=227): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) dup2(r5, r5) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@allocspi={0x3ac, 0x16, 0x1, 0x70bd2a, 0x25dfdbff, {{{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x0, 0x4e24, 0xe, 0xa, 0xa0, 0x20, 0x26, 0x0, r4}, {@in6=@private0, 0x4d2, 0x33}, @in6=@local, {0x6, 0x6bb, 0x8, 0x2, 0x8, 0x7ff, 0x1, 0x7}, {0xff, 0x5, 0x6, 0x9}, {0x80000000, 0x9, 0x7}, 0x70bd2b, 0x3504, 0xa, 0x1, 0x8, 0x15}, 0x5, 0x4}, [@proto={0x5, 0x19, 0x2b}, @migrate={0x1cc, 0x11, [{@in=@empty, @in6=@empty, @in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3c, 0x4, 0x0, 0x3503, 0xa, 0xa}, {@in=@multicast1, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x32, 0x0, 0x0, 0x3505, 0x0, 0xa}, {@in6=@mcast1, @in6=@private1, @in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x41}, @in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@remote, 0x18, 0x1, 0x0, 0x3504, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x32, 0x3, 0x0, 0x3507, 0xa, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, @in=@rand_addr=0x64010100, 0x2b, 0x1, 0x0, 0x3502, 0xa, 0x2}]}, @lastused={0xc, 0xf, 0x5}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e22, @in=@broadcast}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xcdff}, @srcaddr={0x14, 0xd, @in=@empty}, @sec_ctx={0xa0, 0x8, {0x9c, 0x8, 0x0, 0x0, 0x94, "5c90f3e651fe2c46aa9e6baf7aa04851059be1cecf76cfbf912bd4df67b00250e86f318dd0e82f6a0e565b048c5b9cd1b1c382e756ae6396efc7ddaa37ec5370f564e604cde6c868bbed03acd4e05d54c39f9088bbf4d258d76b8120421f3913eae4826f6a4aa1a6d3f89b129071021f5ad0551beb76c551cd09a98b1a31347b20b2eb291f7a80e9aae6acd712944b42b4456e2d"}}]}, 0x3ac}}, 0x44050) sendmsg$inet_sctp(r0, &(0x7f0000000b80)={&(0x7f0000000800)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000780)='s', 0x1}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="100000000000000007000000ac1e01011000000084000000070000007f"], 0x20, 0x40084}, 0xc4) dup(r0) 2.753475885s ago: executing program 2 (id=228): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x75, &(0x7f00000002c0), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.685267377s ago: executing program 3 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.593841249s ago: executing program 0 (id=230): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x1bb3, 0x9, 0x4, 0xd, 0x5, "3632b3ab617e36f8bc811cb096ab7fba588d53", 0x2, 0x80000000}) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0x787) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.472928071s ago: executing program 4 (id=231): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) close(0x3) sendmmsg$inet6(r4, &(0x7f00000011c0)=[{{&(0x7f0000000100)={0xa, 0x6, 0x4, @remote, 0xf1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000200)="b818ab2369ae5004a2d9bbb6b9695435b9cccb45120dfbb981e2c4b79850874a71aa765bb3e16131eb557aea0c081618f48d9996092e126b170be2f74d2f33cc953cf3751e4045a3a8ff88c34bf9b3257de338b282c8ea0fb44a188db3055b3a165294ddf8103799", 0x68}], 0x1}}], 0x1, 0x4008081) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}}) 2.408283273s ago: executing program 0 (id=232): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "080108", 0x14, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, {[], {{0x0, 0x8902, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}}, 0x0) 2.358786134s ago: executing program 3 (id=233): syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 2.196715838s ago: executing program 3 (id=234): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f00000003c0)=ANY=[], 0x5, 0x301, &(0x7f0000000080)="$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") write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 2.145926509s ago: executing program 0 (id=235): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.973805594s ago: executing program 1 (id=236): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chdir(&(0x7f00000000c0)='./sys\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x104) getdents(r2, 0xfffffffffffffffd, 0x58) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x80000) 1.932539104s ago: executing program 3 (id=237): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) semget$private(0x0, 0x4000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x2) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x4, 0x1000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x3) 1.820900807s ago: executing program 2 (id=238): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) sendmmsg$inet(r1, &(0x7f0000002380)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000a40)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000440)="d2", 0x1}], 0x1}}], 0x2, 0x4048044) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x79, 0x0, 0xe, 0x9, 0x5, 0xf9, 0x7, 0x10, 0x1, 0x4, 0xf9, 0x8, 0x0, 0xd}, 0xe) 1.784164788s ago: executing program 1 (id=239): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.717709929s ago: executing program 2 (id=240): unshare(0x22020400) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_getaffinity(0x0, 0x86, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, 0x0) getsockopt$inet_int(r1, 0x0, 0x22, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) read(r0, 0x0, 0x0) 1.514359644s ago: executing program 4 (id=241): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_read_part_table(0x62d, &(0x7f0000000640)="$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") r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x183341, 0x0) pwritev2(r1, &(0x7f0000000340)=[{&(0x7f0000000400)="9d", 0x1}], 0x1, 0x5e, 0x8, 0x3) 1.452821815s ago: executing program 2 (id=242): pipe2$watch_queue(&(0x7f0000000300), 0x80) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000140)="c8af40902d364f4f4e4924e66e", &(0x7f0000000640)="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"}}, &(0x7f00000001c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0xfffffffffffffe99, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r2 = syz_open_dev$I2C(&(0x7f00000001c0), 0xb, 0x880c0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f00000004c0)=[{0x3, 0xe000, 0x0, 0x0}], 0x1}) 1.450991355s ago: executing program 1 (id=243): r0 = fanotify_init(0x40, 0x80000) r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) chdir(&(0x7f00000003c0)='./bus\x00') readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) getdents64(r3, &(0x7f0000000400)=""/239, 0x1c) 1.28595427s ago: executing program 1 (id=244): unshare(0x20000400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) fchdir(0xffffffffffffffff) shmctl$SHM_INFO(0x0, 0xe, 0xfffffffffffffffe) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0xd6de291adeb61c1a) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) 1.173301432s ago: executing program 1 (id=245): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_read_part_table(0x5f4, &(0x7f0000000600)="$eJzs2zFonGUYB/Dnkny92iJdOjm1HYJIl0pHD2nL5drSQrk2ixRpoEVKb/GEyhUPI+3QHlLpDSVuWWLgliROnhmcEgxkcgghQySQIYuSLAEXP7nLJzGaQ5REkP5+HDz3vu/zff/3hW99g/+1vvg5TdNcRKQ/9Op57WivleFWcejKqRsXyrcicnE7It7/8s2vOiu5rCPN79Qz2Xg1G0+MH5t9tnU5aa3c3B68M9fo+/2Vo91fHJ9sDx/IATlUU4X5E4+fVEvPa4X7y6X6+tOlxevTm8Vy+1qjOXM1uXQ36/s+qwNZ/Shq8SgexEgMxGdxL6o93v/5nlH6t/ljrbVzyRtJtvrFd293a/+BnHU/nfzuBxsRnfyHp1+816xfPPv1yZfna98ulDey6Er+z0+ORMSRQ9sXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ThLzJx4/qZae1wr3l0v19adLi9enN4vl9rVGc+Zqculup+nIbv9AfPxh2lWLR/EgRqISlbgX1Z4Jr//h/+hfVqcKe/PHWmvnfj0arW8+eOeXof7dvhvx6UEduVd+2sl/ePrFu836xbP5ky/P98dCeSPbQyW/39PJoewJAAAAAAAAAAAAAAAAAACAV09x6MqpwQvlWxG5uB0Rb/30SV9nPs3uu+eWduqZrH81m58YPzb7bOty0lq5uT14Z67xYzY/GrnuLf/jk+3h//40/FO/BQAA//80d5I2") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40eff, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xffe, &(0x7f0000000180)=ANY=[], 0x0) 991.299786ms ago: executing program 4 (id=246): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000e8780)={0x0, 0x0, "d913fab0596c9d1f00b09ac7f95afdac0c309efc775f89534b505940bc9dbf311e293ddc4671d4098a958c628f3b237d6daca3eadbe63dbcba530e944b99e35108937f14bd195a6dab858c44ea7912520a96b79226e0affaa114eb40c2bc3d647da30b0159dffbe86814486c3ad489d9dcd2401e9fda1b8971ba1aa9d4117ba4c86f8cc90caf8393c5228ea4c6f179eb214b261445a8588d6aa3d45a7f89ab748774a092ae3a85f0ea6d1b5e03ca7cada510a00f92517c48049e8ef5f84f11ca6e1e4fa090f63ce7375584c47ece63eb9b10aab8e3b2deae56051e3a591fb63ad41f9059dd3bafe103eae75cbf4fa9940136275169e9bbf7244816d0078936ea", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000f0b80)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 773.943441ms ago: executing program 4 (id=247): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x3, 0x5ca, &(0x7f0000000c40)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.metadata\x00') syz_emit_ethernet(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0f, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 236.734714ms ago: executing program 1 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000018b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = io_uring_setup(0x7e81, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4104, 0x440000}], 0x1f77) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 171.029µs ago: executing program 3 (id=249): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x75, &(0x7f00000002c0), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 0s ago: executing program 4 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x3900}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. syzkaller login: [ 63.649805][ T4173] cgroup: Unknown subsys name 'net' [ 63.801055][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.278753][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.648056][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 66.777064][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.785135][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.793207][ T4185] device bridge_slave_0 entered promiscuous mode [ 66.814340][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 66.833616][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.840712][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.849474][ T4185] device bridge_slave_1 entered promiscuous mode [ 66.945891][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.960534][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.978664][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 67.001835][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 67.042319][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.049738][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.058254][ T4189] device bridge_slave_0 entered promiscuous mode [ 67.069313][ T4185] team0: Port device team_slave_0 added [ 67.106405][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.113472][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.121744][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.137268][ T4185] team0: Port device team_slave_1 added [ 67.147913][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 67.196027][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.213334][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.239453][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.250511][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.259456][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.276658][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.284058][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.310146][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.329468][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.336492][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.362445][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.380333][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.387665][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.396152][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.419041][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.426529][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.435399][ T4193] device bridge_slave_0 entered promiscuous mode [ 67.450062][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.457464][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.465797][ T4193] device bridge_slave_1 entered promiscuous mode [ 67.475045][ T4189] team0: Port device team_slave_0 added [ 67.509269][ T4189] team0: Port device team_slave_1 added [ 67.527173][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.569125][ T4185] device hsr_slave_0 entered promiscuous mode [ 67.576092][ T4185] device hsr_slave_1 entered promiscuous mode [ 67.584828][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.596243][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.606081][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.613053][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.639566][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.658693][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.666136][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.675520][ T4191] device bridge_slave_0 entered promiscuous mode [ 67.698199][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.708010][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.715300][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.741486][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.766746][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.777129][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.785742][ T4191] device bridge_slave_1 entered promiscuous mode [ 67.807714][ T4190] team0: Port device team_slave_0 added [ 67.819684][ T4190] team0: Port device team_slave_1 added [ 67.868297][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.886536][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.893516][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.920354][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.934647][ T4193] team0: Port device team_slave_0 added [ 67.940988][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.948489][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.974758][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.992487][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.009660][ T4193] team0: Port device team_slave_1 added [ 68.035013][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.041858][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.050057][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.058156][ T4189] Cannot create hsr debugfs directory [ 68.105585][ T4191] team0: Port device team_slave_0 added [ 68.126773][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.134032][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.160948][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.174377][ T4191] team0: Port device team_slave_1 added [ 68.180610][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.188057][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.214431][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.240404][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.247476][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.254356][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.261935][ T4190] Cannot create hsr debugfs directory [ 68.320676][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.327941][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.354270][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.394654][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 68.402184][ T4193] device hsr_slave_0 entered promiscuous mode [ 68.410073][ T4193] device hsr_slave_1 entered promiscuous mode [ 68.417302][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.425155][ T4193] Cannot create hsr debugfs directory [ 68.431123][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.438267][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.464640][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.474430][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 68.488583][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 68.494912][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 68.553782][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 68.614002][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.620792][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.627792][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.635768][ T4191] Cannot create hsr debugfs directory [ 68.808501][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.820244][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.830773][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.840674][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.906065][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.917209][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.932307][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.942516][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.008031][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.037489][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.049250][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.063111][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.077959][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.088916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.106801][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.134072][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.150048][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.169264][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.182097][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.195358][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.204671][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.215808][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.223051][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.253228][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.263996][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.278905][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.297989][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.307555][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.316284][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.323360][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.352961][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.362016][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.371211][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.380395][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.392458][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.403284][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.414405][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.427540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.438046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.447670][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.454817][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.474569][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.492352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.501107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.510476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.520433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.529974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.538871][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.545995][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.554400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.564215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.572662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.582635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.591309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.604330][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.619098][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.635949][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.645040][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.652951][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.672986][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.689293][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.705147][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.713360][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.722229][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.730891][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.749245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.759890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.807043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.817068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.828796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.847854][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.855028][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.864505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.873361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.882420][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.889557][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.898546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.908824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.919204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.928019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.938723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.948151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.957688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.986817][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.996537][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.009157][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.019030][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.029317][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.046006][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.085563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.100883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.114101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.124783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.155812][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.166742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.181923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.203161][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.231315][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.249571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.261452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.269552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.279421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.291911][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.312117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.335637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.344703][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.351788][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.372394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.386436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.420045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.430083][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.437372][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.458094][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.467253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.475599][ T4224] Bluetooth: hci0: command 0x041b tx timeout [ 70.485065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.495307][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.550054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.559452][ T4224] Bluetooth: hci4: command 0x041b tx timeout [ 70.563327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.573747][ T4224] Bluetooth: hci3: command 0x041b tx timeout [ 70.579798][ T4224] Bluetooth: hci2: command 0x041b tx timeout [ 70.592744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.603719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.612419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.621246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.630398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.638785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.646213][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 70.653304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.662903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.671772][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.678944][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.687630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.696719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.727525][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.746563][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.761692][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.774260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.783250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.798946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.810411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.820160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.828830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.837353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.847551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.856820][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.864065][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.872237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.889829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.899252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.908704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.918870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.927500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.935541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.944525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.982394][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.992999][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.009354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.018824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.029090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.045876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.061229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.070349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.086830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.098205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.107496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.116079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.124101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.134667][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.145486][ T4185] device veth0_vlan entered promiscuous mode [ 71.209250][ T4185] device veth1_vlan entered promiscuous mode [ 71.220686][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.250413][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.276656][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.338123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.357663][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.364450][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.383202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.393402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.449841][ T4193] device veth0_vlan entered promiscuous mode [ 71.461430][ T4185] device veth0_macvtap entered promiscuous mode [ 71.470893][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.479489][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.489149][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.499465][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.508585][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.540715][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.548633][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.557872][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.566039][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.587718][ T4185] device veth1_macvtap entered promiscuous mode [ 71.602520][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.610850][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.620234][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.628134][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.637470][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.648690][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.658487][ T4189] device veth0_vlan entered promiscuous mode [ 71.666920][ T4193] device veth1_vlan entered promiscuous mode [ 71.676321][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.693745][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.702080][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.710671][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.730420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.739351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.755481][ T4189] device veth1_vlan entered promiscuous mode [ 71.782203][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.797558][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.807457][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.816097][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.824767][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.833306][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.850181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.859027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.879289][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.892226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.901805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.915526][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.931911][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.941266][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.950259][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.965778][ T4193] device veth0_macvtap entered promiscuous mode [ 71.979530][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.988603][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.997215][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.017397][ T4191] device veth0_vlan entered promiscuous mode [ 72.029545][ T4193] device veth1_macvtap entered promiscuous mode [ 72.041514][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.050055][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.058446][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.066925][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.076191][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.086045][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.095316][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.112711][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.122615][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.132083][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.140204][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.155958][ T4189] device veth0_macvtap entered promiscuous mode [ 72.172810][ T4189] device veth1_macvtap entered promiscuous mode [ 72.197554][ T4190] device veth0_vlan entered promiscuous mode [ 72.210273][ T4191] device veth1_vlan entered promiscuous mode [ 72.223081][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.234287][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.249479][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.264017][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.274915][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.286224][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.312416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.335425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.345459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.355025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.363051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.372141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.382186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.391296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.402935][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.415869][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.426417][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.437041][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.449669][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.473276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.483234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.496482][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.506433][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.515531][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.524868][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.537055][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.551198][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.562021][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.564255][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 72.579312][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.597017][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.625602][ T4190] device veth1_vlan entered promiscuous mode [ 72.640200][ T4191] device veth0_macvtap entered promiscuous mode [ 72.646784][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 72.653160][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 72.660430][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 72.667637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.678637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.687809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.697487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.706419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.715235][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 72.722254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.735037][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.744475][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.753206][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.762191][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.777038][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.785711][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.801998][ T4191] device veth1_macvtap entered promiscuous mode [ 72.832975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.842419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.851590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.931755][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.943344][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.957523][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.968270][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.979182][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.990048][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.001700][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.010103][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.019676][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.030037][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.041397][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.051550][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.062052][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.072457][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.083302][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.095124][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.111779][ T4190] device veth0_macvtap entered promiscuous mode [ 73.124073][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.133273][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.145968][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.155392][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.164277][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.172949][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.182348][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.191236][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.206338][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.221190][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.230274][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.239908][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.282089][ T4190] device veth1_macvtap entered promiscuous mode [ 73.338735][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.351391][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.385791][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.394769][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.422699][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.426321][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.450453][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.474786][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.485505][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.498939][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.509199][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.520770][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.531407][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.542180][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.554547][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.567529][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.577712][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.586796][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.602800][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.618868][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.629495][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.640357][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.650433][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.661317][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.671721][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.682920][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.695060][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.707367][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.724573][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.735607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.747714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.757384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.773378][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.782647][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.791820][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.801123][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.860806][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.860806][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.879296][ T4228] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.883036][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.900946][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.946882][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.968226][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.025193][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.067231][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.094457][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.138030][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 74.154624][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.172707][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.215546][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.254049][ T4228] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 74.281298][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.299997][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.330969][ T4273] loop4: detected capacity change from 0 to 1024 [ 74.341057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.399924][ T4273] EXT4-fs (loop4): Ignoring removed bh option [ 74.408874][ T4277] tipc: Failed to remove unknown binding: 66,0,0/0:2307538448/2307538449 [ 74.442349][ T4277] tipc: Failed to remove unknown binding: 66,0,0/0:2307538448/2307538449 [ 74.453921][ T4228] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 74.484474][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 74.493359][ T4228] usb 2-1: Product: syz [ 74.497896][ T4228] usb 2-1: Manufacturer: syz [ 74.502560][ T4228] usb 2-1: SerialNumber: syz [ 74.519432][ T4228] usb 2-1: config 0 descriptor?? [ 74.540836][ T4273] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 74.566716][ T4266] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 74.585764][ T4228] hub 2-1:0.0: bad descriptor, ignoring hub [ 74.591864][ T4228] hub: probe of 2-1:0.0 failed with error -5 [ 74.659906][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 74.686662][ T4273] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 74.724820][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 74.731955][ T4284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 74.734512][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 74.774623][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 74.774628][ T4284] bond0: option arp_all_targets: invalid value (519) [ 74.813750][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 75.334250][ T4305] mmap: syz.4.10 (4305) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 75.452102][ T4305] cgroup: Setting release_agent not allowed [ 75.549418][ T4264] usb 2-1: USB disconnect, device number 2 [ 75.590112][ T4314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.987858][ T4321] loop3: detected capacity change from 0 to 2048 [ 76.059729][ T4321] ======================================================= [ 76.059729][ T4321] WARNING: The mand mount option has been deprecated and [ 76.059729][ T4321] and is ignored by this kernel. Remove the mand [ 76.059729][ T4321] option from the mount to silence this warning. [ 76.059729][ T4321] ======================================================= [ 76.230468][ T4321] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.374974][ T4323] Set syz1 is full, maxelem 1021 reached [ 76.428412][ T4321] EXT4-fs error (device loop3): __ext4_new_inode:1084: comm syz.3.13: reserved inode found cleared - inode=1 [ 76.866199][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.360859][ T4349] loop1: detected capacity change from 0 to 8 [ 77.462683][ T4349] SQUASHFS error: zlib decompression failed, data probably corrupt [ 77.486651][ T4349] SQUASHFS error: Failed to read block 0x9b: -5 [ 77.511808][ T4349] SQUASHFS error: Unable to read metadata cache entry [99] [ 77.603051][ T4349] SQUASHFS error: Unable to read inode 0x127 [ 78.025068][ T4336] NFSD: attempt to initialize umh client tracking in a container ignored. [ 78.071916][ T4336] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 78.200493][ T4336] NFSD: Unable to initialize client recovery tracking! (-22) [ 78.326467][ T4336] NFSD: starting 90-second grace period (net f0000570) [ 79.016415][ T4372] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 79.093201][ T4372] kvm: pic: single mode not supported [ 79.096660][ T4372] kvm: pic: non byte read [ 79.119668][ T4282] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 79.130976][ T4372] kvm: pic: level sensitive irq not supported [ 79.135577][ T4372] kvm: pic: non byte read [ 79.186388][ T4372] kvm: pic: level sensitive irq not supported [ 79.187357][ T4372] kvm: pic: non byte read [ 79.222304][ T4372] kvm: pic: level sensitive irq not supported [ 79.222382][ T4372] kvm: pic: non byte read [ 79.290781][ T4372] kvm: pic: level sensitive irq not supported [ 79.290915][ T4372] kvm: pic: non byte read [ 79.318715][ T4372] kvm: pic: level sensitive irq not supported [ 79.318790][ T4372] kvm: pic: non byte read [ 79.339784][ T4372] kvm: pic: level sensitive irq not supported [ 79.339915][ T4372] kvm: pic: non byte read [ 79.425960][ T4372] kvm: pic: level sensitive irq not supported [ 79.426688][ T4372] kvm: pic: non byte read [ 79.490010][ T4376] loop4: detected capacity change from 0 to 256 [ 79.514964][ T4193] nfsd: last server has exited, flushing export cache [ 79.594733][ T4376] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.664965][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 79.732593][ T4376] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.106279][ T4389] batman_adv: batadv0: Adding interface: gretap1 [ 80.167899][ T4389] batman_adv: batadv0: The MTU of interface gretap1 is too small (1294) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.203942][ T4389] batman_adv: batadv0: Interface activated: gretap1 [ 81.463563][ C1] sched: RT throttling activated [ 81.991656][ T4383] ODEBUG: Out of memory. ODEBUG disabled [ 83.321880][ T4384] Zero length message leads to an empty skb [ 84.163104][ T4425] jffs2: notice: (4425) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.923211][ T4420] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.930770][ T4420] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.604889][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 85.636993][ T4444] CIFS: Attempting to mount \\127.0.0.1\share [ 85.645256][ T4444] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.718971][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 85.751431][ T4446] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 85.953387][ T4420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.994844][ T4420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.122337][ T4420] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.138613][ T4420] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.149558][ T4420] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.167345][ T4420] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.285182][ T4432] netlink: 'syz.1.47': attribute type 4 has an invalid length. [ 86.443266][ T4433] netlink: 'syz.1.47': attribute type 4 has an invalid length. [ 86.457210][ T4433] syz.1.47 (4433) used greatest stack depth: 20816 bytes left [ 86.473936][ T4444] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 86.500904][ T4444] CIFS: VFS: cifs_mount failed w/return code = -11 [ 86.581316][ T4480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.54'. [ 86.601253][ T4480] netlink: 'syz.0.54': attribute type 6 has an invalid length. [ 86.610139][ T4480] netlink: 72 bytes leftover after parsing attributes in process `syz.0.54'. [ 86.716997][ T1110] cfg80211: failed to load regulatory.db [ 86.973657][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.333889][ T4231] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.403722][ T4231] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 87.411455][ T4231] usb 1-1: can't read configurations, error -71 [ 87.434156][ T4471] ceph: No mds server is up or the cluster is laggy [ 88.251688][ T4509] netlink: 56 bytes leftover after parsing attributes in process `syz.0.64'. [ 88.665084][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 89.067482][ T4525] netlink: 'syz.0.70': attribute type 4 has an invalid length. [ 89.366314][ T4530] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 89.380803][ T4511] loop2: detected capacity change from 0 to 32768 [ 89.550465][ T4537] netlink: 'syz.0.75': attribute type 13 has an invalid length. [ 89.572541][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.636475][ T4511] XFS (loop2): Mounting V5 Filesystem [ 91.103001][ T4511] XFS (loop2): Ending clean mount [ 91.255612][ T4511] XFS (loop2): Quotacheck needed: Please wait. [ 91.564227][ T4564] syz.1.80 uses obsolete (PF_INET,SOCK_PACKET) [ 91.867202][ T4511] XFS (loop2): Quotacheck: Done. [ 92.106846][ T4190] XFS (loop2): Unmounting Filesystem [ 92.671328][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 92.704309][ T4587] loop4: detected capacity change from 0 to 512 [ 92.820551][ T4587] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 93.759447][ T26] audit: type=1804 audit(1788797898.996:2): pid=4595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.87" name="bus" dev="ramfs" ino=33467 res=1 errno=0 [ 93.807021][ T4587] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,nodelalloc,grpquota,auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 93.853667][ T26] audit: type=1804 audit(1788797898.996:3): pid=4595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.87" name="bus" dev="ramfs" ino=33467 res=1 errno=0 [ 93.886214][ T4587] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.967256][ T4587] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.86: bad entry in directory: inode out of bounds - offset=24, inode=65547, rec_len=20, size=2048 fake=0 [ 95.195313][ T4602] syz.3.89 (4602) used greatest stack depth: 20784 bytes left [ 95.258810][ T4613] 9pnet: p9_client_clunk (4613): Trying to clunk with invalid fid [ 95.274558][ T4613] CPU: 0 PID: 4613 Comm: syz.0.94 Not tainted syzkaller #0 [ 95.281821][ T4613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.291931][ T4613] Call Trace: [ 95.295245][ T4613] [ 95.298209][ T4613] dump_stack_lvl+0x188/0x250 [ 95.302930][ T4613] ? show_regs_print_info+0x20/0x20 [ 95.303840][ T4609] tipc: Started in network mode [ 95.308195][ T4613] ? load_image+0x410/0x410 [ 95.308223][ T4613] ? do_raw_spin_unlock+0x11d/0x230 [ 95.308247][ T4613] ? _raw_spin_unlock+0x24/0x40 [ 95.313387][ T4609] tipc: Node identity d2ba0e477ad9, cluster identity 4711 [ 95.317828][ T4613] p9_client_clunk+0x2a9/0x380 [ 95.317852][ T4613] ? v9fs_statfs+0xb4/0x380 [ 95.317879][ T4613] v9fs_statfs+0x1b7/0x380 [ 95.317901][ T4613] ? slab_free_freelist_hook+0xec/0x170 [ 95.317926][ T4613] ? v9fs_drop_inode+0x130/0x130 [ 95.359308][ T4613] ? rcu_is_watching+0x11/0xa0 [ 95.364134][ T4613] user_statfs+0x1fa/0x5e0 [ 95.368598][ T4613] ? vfs_statfs+0x2c0/0x2c0 [ 95.373155][ T4613] __x64_sys_statfs+0x11d/0x260 [ 95.378049][ T4613] ? fd_statfs+0x390/0x390 [ 95.382504][ T4613] ? __context_tracking_exit+0x4c/0x80 [ 95.388018][ T4613] ? __lock_acquire+0x7b50/0x7b50 [ 95.393104][ T4613] ? lockdep_hardirqs_on+0x94/0x140 [ 95.398345][ T4613] do_syscall_64+0x4c/0xa0 [ 95.402801][ T4613] ? clear_bhb_loop+0x30/0x80 [ 95.407552][ T4613] ? clear_bhb_loop+0x30/0x80 [ 95.412273][ T4613] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.418238][ T4613] RIP: 0033:0x7f90396f9159 [ 95.422724][ T4613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.442377][ T4613] RSP: 002b:00007f9037951028 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 95.450958][ T4613] RAX: ffffffffffffffda RBX: 00007f9039980fa0 RCX: 00007f90396f9159 [ 95.458975][ T4613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 95.459928][ T4609] tipc: Enabled bearer , priority 0 [ 95.466982][ T4613] RBP: 00007f9039790024 R08: 0000000000000000 R09: 0000000000000000 [ 95.467001][ T4613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.467014][ T4613] R13: 00007f9039981038 R14: 00007f9039980fa0 R15: 00007ffc39d7f9f8 [ 95.467044][ T4613] [ 95.512003][ T4615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'. [ 95.673350][ T4617] device syzkaller0 entered promiscuous mode [ 95.700981][ T4616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.93'. [ 95.801052][ T4608] tipc: Resetting bearer [ 95.889123][ T4608] tipc: Disabling bearer [ 96.109324][ T4224] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.643873][ T4224] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 96.652977][ T4224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.701678][ T4224] usb 1-1: Product: syz [ 96.721915][ T4224] usb 1-1: Manufacturer: syz [ 96.730159][ T4224] usb 1-1: SerialNumber: syz [ 96.760013][ T4224] usb 1-1: config 0 descriptor?? [ 97.733443][ T4656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 97.755894][ T4224] usb 1-1: USB disconnect, device number 4 [ 97.815055][ T4656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 99.332540][ T4670] loop0: detected capacity change from 0 to 128 [ 99.613468][ T4677] tipc: Started in network mode [ 99.621801][ T4677] tipc: Node identity 1297863c30bf, cluster identity 4711 [ 99.639652][ T4677] tipc: Enabled bearer , priority 0 [ 99.742202][ T4680] device syzkaller0 entered promiscuous mode [ 99.862289][ T4676] tipc: Resetting bearer [ 99.980722][ T4676] tipc: Disabling bearer [ 100.776337][ T4224] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 101.067919][ T4224] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 101.624491][ T4460] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 102.134572][ T4693] ceph: No mds server is up or the cluster is laggy [ 104.204688][ T4719] netlink: 'syz.0.122': attribute type 12 has an invalid length. [ 105.141852][ T4730] device syzkaller0 entered promiscuous mode [ 105.474680][ T4735] tipc: Started in network mode [ 105.479656][ T4735] tipc: Node identity 46bf1a26741a, cluster identity 4711 [ 105.563883][ T4735] tipc: Enabled bearer , priority 0 [ 105.623890][ T4729] tipc: Resetting bearer [ 105.765145][ T4729] tipc: Disabling bearer [ 106.178164][ T4757] FAULT_INJECTION: forcing a failure. [ 106.178164][ T4757] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.265705][ T4757] CPU: 1 PID: 4757 Comm: syz.3.134 Not tainted syzkaller #0 [ 106.273073][ T4757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.283178][ T4757] Call Trace: [ 106.286494][ T4757] [ 106.289459][ T4757] dump_stack_lvl+0x188/0x250 [ 106.294183][ T4757] ? show_regs_print_info+0x20/0x20 [ 106.299427][ T4757] ? load_image+0x410/0x410 [ 106.303985][ T4757] ? __lock_acquire+0x7b50/0x7b50 [ 106.309048][ T4757] ? _raw_spin_unlock_irq+0x2a/0x40 [ 106.314287][ T4757] ? get_signal+0x121c/0x12e0 [ 106.319014][ T4757] should_fail+0x383/0x4b0 [ 106.323502][ T4757] _copy_to_user+0x2e/0x130 [ 106.328054][ T4757] copy_siginfo_to_user+0x20/0x80 [ 106.333119][ T4757] arch_do_signal_or_restart+0xcf9/0x12a0 [ 106.338901][ T4757] ? get_sigframe_size+0x10/0x10 [ 106.343890][ T4757] ? __x64_sys_wait4+0x1b4/0x230 [ 106.348886][ T4757] ? exit_to_user_mode_loop+0x3b/0x130 [ 106.354391][ T4757] exit_to_user_mode_loop+0x9e/0x130 [ 106.359721][ T4757] exit_to_user_mode_prepare+0xee/0x180 [ 106.365307][ T4757] syscall_exit_to_user_mode+0x16/0x40 [ 106.370811][ T4757] do_syscall_64+0x58/0xa0 [ 106.375270][ T4757] ? clear_bhb_loop+0x30/0x80 [ 106.379987][ T4757] ? clear_bhb_loop+0x30/0x80 [ 106.384709][ T4757] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.390641][ T4757] RIP: 0033:0x7f1170c05157 [ 106.395092][ T4757] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 106.414871][ T4757] RSP: 002b:00007f116ee5d028 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 106.423332][ T4757] RAX: 000000000000003d RBX: 00007f1170e8cfa0 RCX: 00007f1170c05159 [ 106.431345][ T4757] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 106.439360][ T4757] RBP: 00007f1170c9c024 R08: 0000000000000000 R09: 0000000000000000 [ 106.447373][ T4757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.455376][ T4757] R13: 00007f1170e8d038 R14: 00007f1170e8cfa0 R15: 00007ffcd3d87a78 [ 106.463405][ T4757] [ 106.949011][ T1108] libceph: connect (2)0.0.0.0:6789 error -22 [ 106.959679][ T1108] libceph: ceph_tcp_connect failed: -22 [ 106.972005][ T1108] libceph: mon0 (2)0.0.0.0:6789 connect error [ 107.127506][ T4772] syz.2.138 (4772) used greatest stack depth: 20352 bytes left [ 107.363895][ T1108] libceph: connect (2)0.0.0.0:6789 error -22 [ 107.371283][ T1108] libceph: ceph_tcp_connect failed: -22 [ 107.377032][ T1108] libceph: mon0 (2)0.0.0.0:6789 connect error [ 108.235777][ T4770] ceph: No mds server is up or the cluster is laggy [ 108.324250][ T1108] libceph: connect (2)0.0.0.0:6789 error -22 [ 108.330380][ T1108] libceph: ceph_tcp_connect failed: -22 [ 108.336771][ T1108] libceph: mon0 (2)0.0.0.0:6789 connect error [ 108.344601][ T4754] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.352034][ T4754] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.564758][ T4754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.607706][ T4754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.832050][ T4754] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.842058][ T4754] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.851707][ T4754] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.863029][ T4754] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.042816][ T4808] loop4: detected capacity change from 0 to 512 [ 110.077993][ T4808] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 110.077993][ T4808] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 110.077993][ T4808] [ 110.098970][ T4808] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 110.108979][ T4808] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 110.125211][ T4808] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 110.133311][ T4808] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e042a02c, mo2=0000] [ 110.146719][ T4808] EXT4-fs (loop4): failed to initialize system zone (-117) [ 110.156842][ T4808] EXT4-fs (loop4): mount failed [ 110.246970][ T4804] tipc: Started in network mode [ 110.254590][ T4804] tipc: Node identity e685c962c2af, cluster identity 4711 [ 110.261847][ T4804] tipc: Enabled bearer , priority 0 [ 110.298355][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 110.385796][ T4804] tipc: Disabling bearer [ 111.707002][ T4818] netlink: 'syz.4.152': attribute type 12 has an invalid length. [ 112.577716][ T4839] jffs2: notice: (4839) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 112.761876][ T4845] netlink: 'syz.1.169': attribute type 1 has an invalid length. [ 112.783829][ T4230] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 112.801948][ T4845] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.169'. [ 113.020800][ T4849] loop1: detected capacity change from 0 to 2048 [ 113.049336][ T4849] UDF-fs: bad mount option "rootdir=00000000G00000000013" or missing value [ 113.344498][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.472564][ T4230] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.114580][ T4230] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 114.144306][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 114.217316][ T4230] usb 4-1: Manufacturer: syz [ 114.252325][ T4230] usb 4-1: SerialNumber: syz [ 115.344337][ T4230] usb 4-1: config 0 descriptor?? [ 115.476938][ T1110] usb 4-1: USB disconnect, device number 2 [ 115.541541][ T4863] netlink: 48 bytes leftover after parsing attributes in process `syz.3.164'. [ 116.066638][ T4873] netlink: 798 bytes leftover after parsing attributes in process `syz.3.165'. [ 116.655409][ T4879] sch_fq: defrate 8 ignored. [ 117.380440][ T26] audit: type=1804 audit(1788797922.616:4): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.174" name="bus" dev="ramfs" ino=34943 res=1 errno=0 [ 118.263568][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 118.273581][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 118.283558][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 118.293557][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 118.303565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 118.313564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 118.323588][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 118.333564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 118.343564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 118.353560][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 118.459325][ T26] audit: type=1804 audit(1788797922.646:5): pid=4895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.174" name="bus" dev="ramfs" ino=34943 res=1 errno=0 [ 118.541565][ T4903] netlink: 'syz.2.175': attribute type 12 has an invalid length. [ 120.868470][ T4928] netlink: 48 bytes leftover after parsing attributes in process `syz.2.181'. [ 120.895589][ T4929] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 120.943397][ T4929] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.182'. [ 122.152730][ T4271] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.643725][ T4271] usb 1-1: Using ep0 maxpacket: 32 [ 122.819832][ T4271] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 122.849839][ T4271] usb 1-1: config 0 has no interface number 0 [ 123.164606][ T4271] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 123.244229][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.757865][ T4271] usb 1-1: Product: syz [ 123.762096][ T4271] usb 1-1: Manufacturer: syz [ 123.767415][ T4271] usb 1-1: SerialNumber: syz [ 123.774341][ T4271] usb 1-1: config 0 descriptor?? [ 123.815685][ T4954] loop2: detected capacity change from 0 to 512 [ 123.860093][ T4271] smsc95xx v2.0.0 [ 123.909787][ T4954] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 123.976109][ T4954] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 124.127888][ T4954] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.407783][ T4954] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.194: invalid indirect mapped block 83886080 (level 1) [ 124.601201][ T4954] EXT4-fs (loop2): Remounting filesystem read-only [ 125.018690][ T4954] EXT4-fs (loop2): 1 orphan inode deleted [ 125.033812][ T4271] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 125.045220][ T4271] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 125.056152][ T4271] usb 1-1: USB disconnect, device number 5 [ 125.074548][ T4954] EXT4-fs (loop2): 1 truncate cleaned up [ 125.081031][ T4954] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,errors=remount-ro,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000040,block_validity,nodelalloc,quota,nolazytime,grpjquota=,mblk_io_submit,barrier=0x00000000000000ff,max_batch_time=0x00000. Quota mode: writeback. [ 125.284998][ T4954] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #2: block 13: comm syz.2.194: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 125.305057][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.747374][ T4954] EXT4-fs (loop2): Remounting filesystem read-only [ 127.176055][ T4954] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #2: comm syz.2.194: directory missing '..' [ 127.535613][ T4981] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 128.558246][ T5001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.206'. [ 128.789103][ T5001] device ip6gre1 entered promiscuous mode [ 129.811403][ T5005] netlink: 'syz.3.206': attribute type 6 has an invalid length. [ 129.830596][ T5005] netlink: 72 bytes leftover after parsing attributes in process `syz.3.206'. [ 130.147731][ T5013] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 130.348540][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.365549][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.375037][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.494023][ T5027] netlink: 'syz.1.217': attribute type 10 has an invalid length. [ 131.522320][ T5027] netlink: 156 bytes leftover after parsing attributes in process `syz.1.217'. [ 131.603687][ T5030] netlink: 3 bytes leftover after parsing attributes in process `syz.0.216'. [ 131.677476][ T5030] 0ªX¹¦À: renamed from caif0 [ 131.800780][ T5030] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 132.474327][ T5059] loop1: detected capacity change from 0 to 256 [ 132.614829][ T5059] FAT-fs (loop1): Directory bread(block 64) failed [ 132.663967][ T5059] FAT-fs (loop1): Directory bread(block 65) failed [ 132.688821][ T5059] FAT-fs (loop1): Directory bread(block 66) failed [ 132.763667][ T5059] FAT-fs (loop1): Directory bread(block 67) failed [ 132.785716][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 132.797348][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.797427][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.803202][ T5059] FAT-fs (loop1): Directory bread(block 68) failed [ 132.844516][ T5070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 132.900107][ T5068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.943355][ T5059] FAT-fs (loop1): Directory bread(block 69) failed [ 133.008379][ T5059] FAT-fs (loop1): Directory bread(block 70) failed [ 133.015236][ T5059] FAT-fs (loop1): Directory bread(block 71) failed [ 133.023906][ T5059] FAT-fs (loop1): Directory bread(block 72) failed [ 133.030474][ T5059] FAT-fs (loop1): Directory bread(block 73) failed [ 133.072827][ T5077] netlink: 156 bytes leftover after parsing attributes in process `syz.3.227'. [ 133.118462][ T5072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.153436][ T5072] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 133.228713][ T5072] bond1: (slave gre1): Error -95 calling set_mac_address [ 133.587045][ T5097] tunl0: Caught tx_queue_len zero misconfig [ 133.817530][ T5103] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 133.896943][ T5108] process 'syz.0.235' launched './file0' with NULL argv: empty string added [ 134.169865][ T5118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.186664][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 134.195685][ T5118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 134.208178][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.218811][ T5118] bond1: (slave bond0): making interface the new active one [ 134.232058][ T5118] bond1: (slave bond0): Enslaving as an active interface with an up link [ 134.242665][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 134.333301][ T5118] syz.1.239 (5118) used greatest stack depth: 19120 bytes left [ 134.467682][ T5123] loop4: detected capacity change from 0 to 2048 [ 134.544767][ T4177] loop4: p1 p2 < > p3 p4 < p5 > [ 134.557689][ T4177] loop4: partition table partially beyond EOD, truncated [ 134.600300][ T4177] loop4: p2 start 4294902784 is beyond EOD, truncated [ 134.617544][ T4177] loop4: p3 start 3724543488 is beyond EOD, truncated [ 134.658625][ T5123] loop4: p1 p2 < > p3 p4 < p5 > [ 134.663729][ T5123] loop4: partition table partially beyond EOD, truncated [ 134.720594][ T5123] loop4: p2 start 4294902784 is beyond EOD, truncated [ 134.728917][ T5123] loop4: p3 start 3724543488 is beyond EOD, truncated [ 134.769158][ T4264] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 134.799076][ T5134] loop1: detected capacity change from 0 to 2048 [ 135.023685][ T4264] usb 3-1: Using ep0 maxpacket: 16 [ 135.037748][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 135.048755][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 135.066688][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 135.143856][ T4264] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.161997][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 135.176894][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 135.186920][ T4264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.206912][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 135.207160][ T5134] loop1: unable to read partition table [ 135.223039][ T5141] loop4: detected capacity change from 0 to 512 [ 135.233630][ T4264] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 135.242704][ T4264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.256273][ T5134] loop1: partition table beyond EOD, truncated [ 135.271151][ T5134] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 135.288821][ T4264] usb 3-1: config 0 descriptor?? [ 135.329898][ T5141] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 135.359247][ T5141] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.615281][ T3558] loop1: unable to read partition table [ 135.633872][ T3558] loop1: partition table beyond EOD, truncated [ 135.669874][ T5141] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 135.791795][ T4264] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 136.146047][ T5127] udc-core: couldn't find an available UDC or it's busy [ 136.153051][ T5127] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.221738][ T5127] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 136.233533][ T5127] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 136.242057][ T5127] CPU: 1 PID: 5127 Comm: syz.2.242 Not tainted syzkaller #0 [ 136.249385][ T5127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.259482][ T5127] RIP: 0010:mcp_i2c_xfer+0x58/0x420 [ 136.264721][ T5127] Code: 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 29 5c 52 fa 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 f4 48 89 04 24 <42> 80 3c 30 00 74 08 48 89 df e8 09 5c 52 fa 4c 8b 33 4d 8d ae 78 [ 136.284355][ T5127] RSP: 0018:ffffc9000393fb38 EFLAGS: 00010246 [ 136.290454][ T5127] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 136.298448][ T5127] RDX: ffffc90005c99000 RSI: 0000000000001a06 RDI: 0000000000001a07 [ 136.306448][ T5127] RBP: 0000000000000001 R08: ffff888073a4069f R09: 1ffff1100e7480d3 [ 136.314445][ T5127] R10: dffffc0000000000 R11: ffffed100e7480d4 R12: dffffc0000000000 [ 136.322439][ T5127] R13: 1ffff1100e74802b R14: dffffc0000000000 R15: ffff888019bbabe0 [ 136.330461][ T5127] FS: 00007fb191c7e6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 136.339417][ T5127] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.346024][ T5127] CR2: 0000001b32817ff8 CR3: 0000000024027000 CR4: 00000000003506e0 [ 136.354026][ T5127] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 136.362014][ T5127] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 136.370006][ T5127] Call Trace: [ 136.373305][ T5127] [ 136.376263][ T5127] ? mcp_gpio_get+0x260/0x260 [ 136.380966][ T5127] __i2c_transfer+0x88d/0x2090 [ 136.385766][ T5127] ? i2c_cmd+0x110/0x110 [ 136.390035][ T5127] i2c_transfer+0x25d/0x3a0 [ 136.394569][ T5127] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 136.400233][ T5127] ? __i2c_transfer+0x2090/0x2090 [ 136.405293][ T5127] i2cdev_ioctl_rdwr+0x3dc/0x6c0 [ 136.410397][ T5127] i2cdev_ioctl+0x610/0x7b0 [ 136.414977][ T5127] ? i2cdev_write+0x120/0x120 [ 136.419713][ T5127] ? bpf_lsm_file_ioctl+0x5/0x10 [ 136.424688][ T5127] ? security_file_ioctl+0x7c/0xa0 [ 136.429842][ T5127] ? i2cdev_write+0x120/0x120 [ 136.434559][ T5127] __se_sys_ioctl+0xfa/0x170 [ 136.439216][ T5127] do_syscall_64+0x4c/0xa0 [ 136.443773][ T5127] ? clear_bhb_loop+0x30/0x80 [ 136.448577][ T5127] ? clear_bhb_loop+0x30/0x80 [ 136.453291][ T5127] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.459215][ T5127] RIP: 0033:0x7fb193a26159 [ 136.463663][ T5127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.483309][ T5127] RSP: 002b:00007fb191c7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.491893][ T5127] RAX: ffffffffffffffda RBX: 00007fb193cadfa0 RCX: 00007fb193a26159 [ 136.499892][ T5127] RDX: 0000200000000000 RSI: 0000000000000707 RDI: 0000000000000008 [ 136.507895][ T5127] RBP: 00007fb193abd024 R08: 0000000000000000 R09: 0000000000000000 [ 136.515977][ T5127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.523990][ T5127] R13: 00007fb193cae038 R14: 00007fb193cadfa0 R15: 00007fff6ed53868 [ 136.532100][ T5127] [ 136.535151][ T5127] Modules linked in: [ 136.865693][ T5127] ---[ end trace f21fb7db460ccc04 ]--- [ 136.871196][ T5127] RIP: 0010:mcp_i2c_xfer+0x58/0x420 [ 136.893916][ T5127] Code: 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 29 5c 52 fa 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 f4 48 89 04 24 <42> 80 3c 30 00 74 08 48 89 df e8 09 5c 52 fa 4c 8b 33 4d 8d ae 78 [ 136.933649][ T5127] RSP: 0018:ffffc9000393fb38 EFLAGS: 00010246 [ 136.939843][ T5127] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 136.951717][ T5127] RDX: ffffc90005c99000 RSI: 0000000000001a06 RDI: 0000000000001a07 [ 136.963961][ T5127] RBP: 0000000000000001 R08: ffff888073a4069f R09: 1ffff1100e7480d3 [ 136.972745][ T5127] R10: dffffc0000000000 R11: ffffed100e7480d4 R12: dffffc0000000000 [ 136.981515][ T5127] R13: 1ffff1100e74802b R14: dffffc0000000000 R15: ffff888019bbabe0 [ 136.990302][ T5127] FS: 00007fb191c7e6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 137.000356][ T5127] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.007914][ T5127] CR2: 0000200000073000 CR3: 0000000024027000 CR4: 00000000003506e0 [ 137.016573][ T5127] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.026027][ T5127] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.036007][ T5127] Kernel panic - not syncing: Fatal exception [ 137.042244][ T5127] Kernel Offset: disabled [ 137.046593][ T5127] Rebooting in 86400 seconds..