last executing test programs: 1m3.917838493s ago: executing program 1 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000380)={0x1, 0x1, 0x0, 0x0, 0xd}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m2.592535465s ago: executing program 1 (id=107): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5800001a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000000c0)='./bus\x00', 0x2) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) 1m2.536273957s ago: executing program 1 (id=109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000000)="360f7883b81e2626660fc7350ff4650666b95c030010dada32f4656df30f09e3650f01ef66b9720500000f32f8000f0d35", 0x31}], 0x1, 0x2, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x109, 0x0, 0x2080, {0x0, 0x8000000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m2.273794463s ago: executing program 1 (id=111): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbb0, &(0x7f0000000bc0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 1m1.59554438s ago: executing program 1 (id=115): syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008005}, 0x8000002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffd9f, 0x0, 0x1, 0x0, 0x0, 0x24080001}, 0x24044040) 1m0.905169056s ago: executing program 1 (id=125): socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2dff) 1m0.821693428s ago: executing program 32 (id=125): socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2dff) 54.309719456s ago: executing program 2 (id=160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000580)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x2) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000680)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 54.13188932s ago: executing program 2 (id=161): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) 53.905751105s ago: executing program 2 (id=163): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x24020400) syz_io_uring_setup(0x73b5, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) clock_settime(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x2d48afcf7ca88e26) connect$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0xfff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x401}, 0xe) 53.670108251s ago: executing program 2 (id=164): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)=' /new_!omain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain', 0x64) rename(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 52.940311589s ago: executing program 2 (id=169): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x8, 0x4, 0xc08}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000180), 0x4) write$UHID_INPUT(r1, &(0x7f00000011c0)={0x8, {"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", 0xfffffffffffffcb7}}, 0x1006) 50.230078735s ago: executing program 2 (id=174): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x4080) 50.00512533s ago: executing program 33 (id=174): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x4080) 12.83623692s ago: executing program 3 (id=399): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0xc, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8058}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd27, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x845}, 0x2000c050) sendmsg$inet(r0, &(0x7f0000000c00)={0x0, 0x14, &(0x7f0000000c40)=[{&(0x7f0000000c80)=' ', 0xffffff1f}], 0x1}, 0x0) 11.765145675s ago: executing program 3 (id=406): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 11.665148508s ago: executing program 3 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 11.440235273s ago: executing program 3 (id=412): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000009c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000a40)='./bus\x00', &(0x7f0000000a80), 0x8, &(0x7f0000000ac0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) chdir(&(0x7f0000000b00)='./bus\x00') mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000400)='p:t_st/event1 ./file0:0x0 arg2=%bx', 0x22) 11.223171008s ago: executing program 3 (id=413): r0 = socket$inet6(0xa, 0x3, 0xff) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES64, @ANYBLOB='.'], 0x48) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r1 = dup2(r0, r0) write$tun(r1, 0x0, 0x46) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@getneightbl={0x14, 0x42, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x80000007}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 10.828597088s ago: executing program 3 (id=416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000300)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5d99, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xdf, 0x10000, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffdffffffffffff, 0xffffffffffffffff, 0xff7fffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x56, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff]}) 10.568941764s ago: executing program 34 (id=416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000300)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5d99, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xdf, 0x10000, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffdffffffffffff, 0xffffffffffffffff, 0xff7fffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x56, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff]}) 5.858754228s ago: executing program 0 (id=439): r0 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x12e8, 0x9, 0x88fd, 0x6, 0x7, 0x8000003fe, 0x4002004c4, 0x1000, 0x8, 0x97, 0xf, 0x4, 0x9, 0x2, 0x1, 0x2000000000008], 0xeeee7ffb, 0x514}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$usbfs(&(0x7f0000000500), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) 5.404414939s ago: executing program 0 (id=440): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c0002"], 0xbc}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') openat$binderfs(0xffffff9c, &(0x7f0000001e40)='./binderfs/binder0\x00', 0x2, 0x0) 4.894199981s ago: executing program 0 (id=443): read$msr(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x1, 0x5004) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4.602025679s ago: executing program 0 (id=447): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x65) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000780000/0x1000)=nil, 0x1000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xdb0c, 0xbc, 0x9, 0x800, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x5}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, 0x18e5, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0xc094) 4.322738806s ago: executing program 0 (id=448): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010004, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x24, 0x628f, &(0x7f000000c880)="$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") syz_clone(0x2000000, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0x1fff, 0x100000, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000002240)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES16, @ANYRES32, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd2372404ea0b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59139c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e722f5d78742d622d4ccbc1a7bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8ebe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc711148695378c1b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf6d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c53e8afceede4caf8850d585d4134559a6abbee463da46f316c3faeffa30fec0b35fff3f320b99e805fa2d3d179fe0d9a40e8b5a3df3d5fea5e743163c8a21eb10b84046c95b735e5c727336666c9922041490702d1e17c8b", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC=r0, @ANYRES8], 0xd, 0x0, &(0x7f0000000000)) 3.779655569s ago: executing program 6 (id=450): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 2.685041235s ago: executing program 6 (id=454): open(0x0, 0x64842, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$hfs(&(0x7f0000000d80), &(0x7f0000000dc0)='./file1\x00', 0x4810, &(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYBLOB="e6b9560b9eb60651c8d861e16cafb4b5006725db63a742488f27db28a3b869f9a114e3f806c42595dd30b03d1acb2a404a6d705dcf1efd2e1fa0042e335f582178d72a1d22166abbfc7955582faa65f8d8f80263129df5b788f53846f8c88e9050f753551f19ad50976b889736158a98f148ec0baee53bfde9dd1bf4dffde3e44cc05b6b969ab5c530d4c8f5488ec6231315fd02386e30ce86a388410478a2ead75ba02275faf3839d05fbdadd6f7eece5190eb4bc079f6c5ddff08d4cda7d0cd232bcd711777e46720665", @ANYRES16], 0x7, 0x2ce, &(0x7f0000001000)="$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") syz_mount_image$vfat(&(0x7f0000001300), &(0x7f0000001340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f00000013c0)) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2.389909322s ago: executing program 5 (id=456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x81, @dev={0xfe, 0x80, '\x00', 0x26}, 0x5}}, 0x0, 0x0, 0x31, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9a8bf9b93129488f6d1a8de213eb94cd46e19d9c65a09607462029adceaee8c4d54eb1727517308a3d40aa1c788df600"}, 0xd8) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x9) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x100, @empty, 0x8d}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000440)=0x3, 0x4) writev(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) 2.152839428s ago: executing program 5 (id=457): set_mempolicy(0x4006, &(0x7f0000000080)=0x3576, 0x8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xc3, 0x0, 0x7fff0000}]}) r1 = gettid() r2 = getpgid(r1) rt_tgsigqueueinfo(r2, r2, 0xa, &(0x7f0000000200)={0x5, 0x4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x48033, 0xffffffffffffffff, 0x40000000) 1.812519736s ago: executing program 5 (id=458): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="001c", 0x480}], 0x1}, 0x4000841) 1.769062988s ago: executing program 6 (id=459): request_key(&(0x7f0000000040)='.dead\x00', 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x70000, 0x0, 0xb, 0x6, 0x4, 0xa, 0x3, 0xe, 0x4, 0x1, 0x3, 0x1d}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x8000000, 0xf, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xb5, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x1, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000001, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.735963388s ago: executing program 0 (id=460): ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x1, 0x6, 0x0, 0x8000, 0x2000000000001004}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) 1.636500151s ago: executing program 5 (id=461): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d1) 1.499949134s ago: executing program 5 (id=462): read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000380)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000340)='10', 0x2) mount(0x0, &(0x7f0000000400)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x0, 0x2504e0, 0x0) 1.440589035s ago: executing program 6 (id=464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000010000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r4, r3, 0x25, 0x0, @void}, 0x10) 744.305572ms ago: executing program 4 (id=465): fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='270', 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)='*', 0xfdef}], 0x1) 682.527664ms ago: executing program 5 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r0, &(0x7f0000001640)="8b", 0x11) 548.470287ms ago: executing program 4 (id=467): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 456.528829ms ago: executing program 6 (id=468): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './mnt/file0', [{0x20, '-!:1$,#'}], 0xa, "c2bc5dfb33c2199b3febec6003b6ac1d07388becfecc8163b0b3567218ca0935"}, 0x37) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r1, &(0x7f0000000500), 0x1000) 387.357871ms ago: executing program 4 (id=469): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0x800002, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0xb3f97f6c43c4fec6, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xfffffffffffffffe, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22001, 0xa) syz_fuse_handle_req(r0, &(0x7f000001ba80)="7f5ddce0da8577e3f3d9be9fa5f199c9e478525df6d6ca720b0bbe6d15f85892df7a0989f99c080043ccc654f195d19c4c1b48ff861beb3d841201ee7c40ef321722f7c28e9eb343f839dd13c7178e783798449100b7f6462f2d9422bcf837767cbebac60891968effec1e501cf5259b273b093bb5f107be803dad957bd5e20f8beabd4c37df168d2a523757c16848c7535b694fa67dca1f30ceac001886ec163e60ea4b7f084b49e52869e820eef75f99125f7e90df5235b901024a563e1de1e6db5ceedf0d024991b743c47570464a3fc0bf70a3d9c5f9c1fc70035d574a746ea0fc381e9894648d421983aae8199165b0859e620e17254c84d75eae723d771147777243c1fb1ca296f1324e62886e68bba185f27a574dbf07ca0e0a895115b79a2693a2a2222c28f909ad5e840345f36435321c89531354b4a39aee2207b60a5f430ce93d571ee060d19f95a415d7f8594fd4e2fb58191c0eae690c4ecd15a9a86a8670b423ecc075e7b6f006acfb3d76018173c9c3ba2883aeec962f03d132d95fdf781e6cabc296f13df51309d7fb8ed9edf52bedc2a683f2b19a608e38c4a6d0e4126457a5dbf23c9bece6b3b02ec0ed3d5d14047e024e16cc0d40e9884dfcf1b0f7cd4fd5a78a85dbd29a13011aa9e063813822bf8a054254e2fa6a8c899bb4295090d94a41b7bb648f45875ccb8ba48399cad82243d9ed47fdee5940d49440d1ebe344585d6a9cd4adc9ccf53eb6297ff1a2d9099911890f9e40fdef6b3ffb165ddc011f21ea25ff7c10961c14c0c7e1f2301ecf871f56a4c2f9e42cb65a369aa43eee695774f9e798ec84d2b0140d23a0dbc5a91a60bdae7f6f2a8dbbeb330e7387ecf2e2008700c702249887b4b428f386ac7c7f9feff140eaa2b5fb8143c8d6645f9556749ef6eb1c4aef0eb7eb60cef55e5cddd9b8e80084b2bd1bf4c7b700bd427b3ade1b36439a17847ff3d36506cf5c8e1c57b1f761f477493f2eac0c8e790a2a1929891f08c231f147ce399e4572a232e5327442280a7a2a8f45fb18ba42a06b86de61aba4897835abba6a612a6816c6607f17a5b00f4ed2a5b1b40e6bb9b9d081ddeb4dc58dcdac768e95431b422162394445f9a78cd6cf3fcf6e6d4466132054d9d2497f41f6cfed24a06bf022d6c21c92ee8256c68505bd11f8e57a8694ab11a1a2018ddb8b4adc3cf898a9bc633aee2fd2a859d663951a288651e59bf867400c930c1007de92485c712588cbd5abfaad0e928a1818dc32ae4857cb16b2d475894c4e75442f961931b45f512a78b44af90f8d19f3d2544e51c3d59e25143fbcaf784e8d165baa166ac9aab259d75f8ae847278510afc12ce97a44192abc1d04040ea1fd0ef0b5c041af20d6523433adc7151f4f0c9464caa6adb2bdb21d64c8d670695632e275b96832f143a80446ee788ffb0c32c23cdb7b9e7cc5810ef2b99d1b038c63c07c9393ee11237037bb1e97a9f98daf161ba8683f8c106b17c8ecbe201893ba8ef1781f32efa567259d26962db543eacd806ba14ef1fbca6c177ad7f77dc8de235191619491b052a9d885ffe8a0efe61c60de1d0de37cee14c1a48be7807125cba24b43a878f3bfa49179ca1b314c0ef749d24473ce0289eaf7951fad8ba321352d9df98f3b87e9e63af4cc2e0e475971e5f150cc589d3f94d02843e0a7799dc583695c7564b064cf2ea0795d12e80f2aaaa83776e1126ecac6a63cbcf4f54f8ca0c4eb360309868535e78ba84cbe013c99fba21bb5077ba81b0efb3e81be70ed08effd6a812033ae86233e2409afd39524b64130afe1a54c22102b496a947df703adffaa3f9f7d8b2d9a51e5a8b7b2bcbfa05de9e20784ffb39dfcfa610148230de51d367438ed3145d2ac7b8742d13ebb1f783ad502785a1290cd97917da78d16b0c802466f004a69222ab5704cae2ebd9393ee746129259d504e06ea848e0d48f40a72bab0ecde06dff96b4b139b7343dde46e72b064f1d84c068983a204522826f23e95df0ac21b95f8dc96cdbbead2a34e21e9e97615017a82fffbec3a7edd32dfabefad5bffa9cb0f3a33866e009c4aec73076f0108074945676ea472284287dbe5bf38dd847d9a1bc509426a93bb37dd1dea635ab0fde93184b7d9d8f50eee49f4df8aa5a1bc5acbaab7cf4c8649b20668332bd28c85e5ae266c3135e445e5e32aaaf3facf083f142f580c928ce7b96d405a5f75cfbf614819fac806be50236a049795c4371c1766d26bcb577a05829e8669657b95358cc1240b834e0300f8faf4d951c7fa6804496ab394090b4d93435bf1579370822440c25e69d95d44d93cfb2d0171943d653c0d260217499c3a6c2aa5aa565404a4068f9800578540c34886bc63ab2e5ef0c6dd81016ae27579b854d2268f5c6cf31af7c537bca20732826c2ecd65642ac31e0de77b5e5f49807e235467a11aa43b44d95665d27cf8e61c31e6d6728af3fedf6514f948945e6f24d475fbbfc76ab88ee7f4188ac405a1282dea43009a45cd1275655f5376bb9257a669433b0971ebfb4508af8e032a604950e1705d70d73f45c00f7c5bdf8d7d5cc43d18bec07544fb0924a7983250d3f07049e1e4aab74a0994d8fc04a0b9f23f200b133de0461855e791dbb9606a03ed1fa69c1402b974b1cbd4de1872ba4228aad57e9ee90a934eb4ff318c0db84d3e83fb6ee3c00bd409e879112699fea2c31e03b20024323a609e0e6f26242eb971e16292db9b26b0208dd1693f12a5b9fd1e8834bebebf2b88575a298f81923d7cfec4d271f97f96a88b4473657a369b21f6cd58f302b479c908917688a75454f239d44146a8fa9da690edf1d8155add548fe14bc74bd6f9886307184b71ba50adb9b37fbeda5c639425b4af035d6854c3121660590214c8cc0d62a0dd30a99b3e4753c443e4d580252ecb77b02b4d17d350c0e27965ba1da6b46582a49d6668621bfc1b9d3c5b910a054b8e3b546a2ef1dbd4a492e294e8cfc16eb1f2128f03e71fabb1b4fa3b11c20cb7de620313706c204b792899e7689a1efc09c35e589d6dd29dd04ea6291fc2a7c191bd73c6268e98e3703ea32154ee04b080cf76bc68a65ab3c8ea1c3c980dcb6a66e92ca7cd40da46de281127e8d52c10206d400aa0aed66f502e26c309963cec6434dd14d6996d565743f41ebf5907f41ed1a95472974ff73fec3168f186ef0ba9bf24e1c17f97e32a954b4c002d3e91447719d8a36310f38d79263b9dd70a6572fac0eb73a580e043dc2ace765a595c71520a8feac0f2df7cc484c632d5b488c0ff27b028be92aff5dfe81f1a5a7c949ef4a8116a48ba27326d6c649a82bbadae16020d8b3dd817bce208f4ea79fe1dd55341f5925bdb1fd53ed7afa65e3520c127ada5e7aa5062e7ba25e53656cbbc46e18d635cc14d91a9e900d92d28a99a57e950dbb462aaeb5c91c3eb2528e74e5ac40e47b797d779c71bf5ed2be9c601b4218969fc89b16df1a8313492809fa723c6542f94ede7775ae1e286d9b3aa0a29932782334a84550e3a39ba11be966d7871ed2a525a94dc3a184fc928a8d3181bb7cf4b17909a01f7641f6bc88f955e32cdeede53a2e22abfc6bcfc6d8effa8d0561cd3d6c1ec45b14c3952c4f43233f4f38dfe67726953523c5bc177019ecdc1ec88a6b1e18e4ad37e78fd8f3b672a1167547ca36192d3f69dd985c6aa476e6cb34e8665f92a05ef7d4366edfd8ad3f91fd053ba45f058d5973e6b890f2dad2032bb95b9a4723b78d7529f7cb3c1d5fdf2d148e32efd15a6cc90a60b6522426d712fa437ad812f0a0ea41e7f5f9a80ebf550b83ed05fc58898ec55f52a74768aae2e3c38926b7c0caaafdebdec5777f3c7b08d501b346222ebe342f79e387d0a26dac49cb53860a0f4c94a20f7b0b3ce87ebc5ef05e854a3b463597db87f282bec3713b8eb3d051add3aa3b72d5954e8917438f2724462ec14a0b87894f9fb485e75bc1e2ee9c153d1eda4d1999f1f151061bd81ad313d74d70f42e800e19668d1086498d4c8c096475b1a1a7ff6bd9e6b40fa3d00d8ce3604e669837f4710ea354916fc3a45bd6841ead9b3043b8be5868cf2e976ecb87f15b9e13ef763fcceba0a44f83a253434ff65b5c5e36c9f002bc2a556ab84ee00fd9d8575303b81d525a2f90675def3f48eecaa0087f9c03616829aedf2d4b49c77733ea03b8f3c414203dbf516e71ba8908cd6cef3484ac9cba4c19814b240bae359553cf20d189fa06d9737a17e1c1d47d01a99c25b7e5f978a3686e947e24aa0cdf673ca91079d1e629f289af044e5679f89826407d9ed3934efaa906505200fca658c7e2e0e493238173b1dc29c8e0aa906a543a23557c6587ba4c9b23d93940705023f78ae9221007f6d590755fc5bbe2db102d8e61083c3ee9812746eb7578ad802d032566faff918de79ded8149db9de650483243e5768b2ac0ce2025963b4d6bc9e04b9677ed6702a57f05cb971b6628e78708fc1ddb764b02e8b88d17486e4f5576d79fa2dc1dc5b4de92aa1465b9949d491cd14b25448f56574859ce89418f8c332e0dd603c2b0e895b1295bd20e66ebcb2e6fc16e6fca1687d84605d650b502b180d83d608fdc80a0a70e950c635b624e8adeedb7fbc04c8f08e3bc1e3071951f1eebe4dd701f6d0fdedd7a170875f79dcd2bc95b3f6da91871c766c82160c71afcfed8852e4f522d625fe4b8cf6070221ee6041d1719445449c612abfe26645386b7f78bd082f72509e03839aefe02df4dc070fda80a799453f69b447fb32cbe0138ac7b01d4280a3e8a6a9cacf3aeee5d30ee843f31426d8549532cba29fb8d571c910f107d2c21d44bfdb10e513307513fc507eb7079329f9c052467e2324bfccaadc5cae224f99cc820f745fb22c5b53e37eac08ed458233409e81a057b1167ba7c7b690d4dbec0077855f80d077d9ebc21b579f28dd4366568ef8461aa3bc189cc2f9529ba1943f29b608e9fa5128b692f807447f9e30ad69f0c6a428abb3d558ef63787c3bde722929b4b8bcb6c8642c5f88673e381300c9cdb757a3070a69a98a88fb41a35d2cdd0f813456c75509252a7b5ffc94c343bc36ec0a12254af208fa032df0f4dccfd3e71406c5b0e60561f2424f10cc90b33d2c1d8b34400d94658a73e15995d2792e1445ac0153daab781746df2bb7f29e59674eaa05450b2e0546007f10d6c3665e3e3971e642ed2d38218c95d18500b0d9c7e113258bdf0835fccfec100fe825557f7ff781fb0bcf4f6ecaf4c096be51240de77630e482cb02dc968a82cc1e96d0f97ce6a5dad654d3107a639cb7dd45642b1c1b1fd4314069988c82f71939fdd70df186be8b327df55427aa80272a66b4b09bfe4167ca23e353d5629169c8d2f4c48a0f78b979c887ad3858def0c07a5bbd41ac7cee97a6c4698a97f09a4aa9bee9b3261455ee067f8f872a64be28bd8a431ad25f6ed4d8df2e28436a0704ac94826ba32ffbd238cd87b608f5e0821890b7ef2d58b69fa55239f439200dba6854adb37d051012ca2918814e73e1b149e6b02a521eb023c833cafb3b0101dcf0eae55e55ac26346b6fd7b895c4557325911e219fb71ead6da5f629bb082123033374b73bba1967e7170f7c7785564f52da9c7ab2c2610e9597ff8b0c75647f64fbeedc226515b890b446cfabb15a21b3c99c9b1c9f7b4ca064c4184c25b9fc9d2175116f4c94e82d90e84f93152112fa4f1d8b14ab7d57dd59510249fa1af3ad7528104d2a9dbaada1905cc3a7149d08707565e1c18f3521903e3d0c34caf13700ba3e112455d959c11b08b3743400a137b730cec9d16d8bc878e222ccf9fe5174932c1423882466d1e673a8e19ab56e9d5a27934ee3d02b2831003243d453ac41456fabe4211acb05dba03371330e83350c0557850f79bb55b214c2f2d00d8f5868e5801974b948f3ae2af8d0c4459926d6f0707af7183c657304a889a124460da524e6509d230f5fe845398898d5602f50ffeb7bc7aecc718bf1d60c58d07d6620497b069d0d87acdddeb6c46703d8cc4998e1677044bdd7b4c5e08275c17ff2020d825e8da884c1f15ae9d2256ad565028836fb2b9c1d2a60d45fa3fe466879cf140d10b64da74b2446c3dfb86b18ba5d9f4032ac68bd8a381ade90c5ab6e02ed5b0abc98e409310aa1dac4121055635cd55de6559643f14e9e00ccae31d8ae283eee5afc4e63dfef236249f660b2020f916e7bedab08baa7490511aa6da933276a9f4dc7ab57d86089de23044fae6983f1ec997bc7df34907290cdbcdccd6ce93319ad7316f94bdcdc79801a8e98d2733a45efee4c99771bf29400d571d91c927a206b4d30e6c41c7cfa880cbab5fdfcd37d9cef4376495421654742012a0ee3cd04fc8e92d7e5f2d965b7bea1b72e9072672c29654052a819e0b8a157edbe2a9f45089cdcb3958f498936f59a539d13a2c5a00cfa4e7aebad620bf5299d4a1c3e42506212b42da6d859b6f2502104f381d76f1f4ce4a6d631bb275f1d6706977f0455ea3d1c035ae3cc39b179740a9e0afb85083849ce4957c794c0af31ca74cc22f2cf82272b40e2b321dfa881f53a3de96cb2d9a8b4e2391d7d3da3d6da125dbb0b369b4c98166af019afb2dd1f98092b2f83e83b96156cbea9153b5068a794154273d589fa3d43e7c4ce5e14849db8fdea1affdf722dffa9727e6c032bff875dcd14551e80eac3d42fb6430e344326c8033b785817c44ebfcedbb8fcfa6da8b89eb7bb4851e987939955c53736143b5214764ae789f9b4cb35c54dfa1f14118cdbe57258ef7ca1e9a5fe3b7ec4af9b193d20d841279a37d22b5a3ca7f9c2faf362c41c5936c02435fbe05659ee4908ba0afe2f843f1e7de4b18670b7414d6f88747ca6f9c2858cf5222a38eab09f79e77499a814d1c83a6541fa306b77182068882e8df93a283329edfe96153453abc74e8eedac8700a085b1674721500a484da0b95924ccfaa519d5e9555e337a52906874f42584b3f4fbb6c41db5cb7aa3c5c4138c194638f031d0b96a9fac3e047b6ad9b7c6d7983d0f95f6a60d3dc28b12fa397edecf9590489fd2306e12bc6d034b791c0fc5c9efd57e9c6076369fe37390af9350b8a1a372c31e89217feb5942346696f0d8c47a554f752232206a2de8c62a6f95c4667235e6c45d1f6e5a59227a287fe974e111a1be16d857103ed006676d079d5ea394c0dee51039a3cd4097e3a63a65ad58266b78fc0a643dbb4e04489dd61577198334a3533e9f48b4b59bb1dabdf9a1db6545977a18f7144fe58183514d3ea31a52715bdb4ece7e1addc175827c08e4e78b3e1e179be0317296fc2a61431a535f59567702894b15d2e1b86ced9d00fafeb5cd78f2505cf6b37ea87ba590f77f687f2dac2f392753d57628cefc5c5a639eff84f180eb3514790200000000e207b94c5eef3e779c477aacf7c4d3e232c108b20d8643a80b817078783ae6c5b42530b90884317a7f0f3fcb12f778eb2966255f4d87ff6ef2c914019cb609ef912e1bab3f24ae89a7cfd9671803c609e1c2c310e5b452c7891ff5b82715cf47ffd438b6405702250c9a3707d442e0c51e62ad62639b97e10aa74c85de4e9eee8c4f35ecbfc13e344179780e627a9285600e2ce5b9faf04e5eb3594091812433ac7642c50b43d2f8dca7b06922a25c9374d8dbed7ecb97824791790d408591dcb3c8091d861e75708a2a392ca1fb5ae58239d0440bdde8b9ca99855a563513e6608587f3d8f7b1dc00fb6f9af34124ba62c0bacdc028dd9bb13f733efe575cf6978396c7ed8288952089bf41ae85379988e3a83ffec6365fc8a790c74db01ef8af2d662187f6dca2dc85d301e1ec2e0b4a671a2b70cda1e645fab2058f268392316156563006f29f1b30cd8f6b756dd0c72a6b2b4136cbbbc76a5bec615281a4d876520cafb8e5c1da458cf903a031df0dc8c30d34dcb7795cab7eaa9783d5317ec0061f268125b861f6018eb945e48fc650ca8a3c34e47154aba660d58cea2749c68161cb7e5810bcb80d5bbab9010ea78e87e483221b29091a77b6d18faafaf1176d9bcc64dbd12614d110f0e6bff68a0cee75958329daad45783d753ed16f5c9cbd05e75f1c87027e4e210c31f30c883cebcd8a520fa8f150e1f11e448f625e7d132b299c775fcbe987df4bf23d64db7e0ed4e6041e69c6921fbc6c10c952ece83cffb7004f82759a8949333b4e1ef3ade3349a7a4738988f047b7c867d258bb2e748d8a007c9391a70dbd48b83def6cf61da48b0f228b39491c4da587550d78076ca1a7fad6703411652b13535b366e0296092f360f0424bbe0533e966e6043d82cc92655737889b7691a2106efe97a31f53a726ef178175f79d44c23476bde2fb09afeabe8b412e13bf639b95ccea0dd667161d45e130b27034708a0100e2df45c83c854728c440214bf8b155c95c9e7ad0366346e678739ab05e8fd44c45bff8ad36d4b76b532554dab807c3317e88817600d8ae7a3b5bbfdfa23064a082cb01f6105c4bec4fa1ba04947ad7033a396a91f6c01fbf3c93da5cd6455c872ce49b95f35c74a89300bfc0b7c6f54b8bbd2d48dc9fba1a1bfaf4df7e4621afa47ba1bb2c4b5748340729f8bda041dfe64580a771b53bb909ad586e3330821a628d974e5dd14512b172d6404a12f2fe337fbf749150df750e93096403cf2de4e1cc02b0576e953d76154c9ff161f5b14d1f69f39a344b9c313ba006b726a2a060eefa505a99c50a484f046312b292fba0290d3d407aa585f59c1a7512e4406e433d19861ffbdf2027bcac73d5a2690ec8a6ed79a4f3ffa3d443ebb9cfcee2d48962bda1525c1ca7dd790254f5431e9b9c0f4a34e21b450c16f9862a67a22f0df800ea4cf558e96a3248b67a99a33f0b2e0ab084182c865506c6588b933e74c81aa8d537f5d29246d40ea3cb437a3be7941b5a31191c3622ee0b3e34ff883652e848c215a8f827bc996a1b01107153aaeb8f482b0d3cf3489815f9473c4c039f5cf970a944e861558525e20cef07955d9870617e527c3a0ca5d12e42501364dee6707e7775e0d2541097dd3d9f52ed2192c4019c2b9ea72ecc7b91c8266e87806334674293a1fe85b6a11775913a049970c1c943004cc2789fda14dfbc88026a7c16f328bceee1a8c70cefcbaa4798a64e6c9dac7a80ec216be5c1df5d3c886e4c4b7280dffb2a873f4bd48ec93ecd7a77a9b565c742739d1cd51647162ab9dc7e9819f91ea0a6863b2ab9e9c5fd6e1a1acf67006a3a39191da37d27049ba421eb73d2ec0a60554b952812513de907d16795780b9b3bb90ab96ebe015a18c681a68cc89005d088894843e6f63cc2b9b4da69bfc2ed56736218584abe327411d576ec865888582843ea53198dc214503dd9c78b676a63a79ee95f829c514c8ec142340655dac725cd0d6491e509465fef9b13b85b162ffbee4f05775b84c101919c337f2de782e6db36f5734f69674e6ec5e4dcd9f7cf5b07330f104aa513546626080f2714465f73eb751b5ef1ae8735ea3c8b84789c64f03cd070f39ad82c7973501df51b10bd6337b784b34152edd68db63e0db52b985cc3e0518bb46cdf2d6872f90fff8d4dbced213829f9a92559058cd55973c4269c23559fccce066bb157345587fb495b61d6c91653c96ea96cc7d9ed77e00904298e81e1e11f20bd91332536cb68b7e39784bbc2b34579b46291f0c1aaab4add9e83ce6d4e996cd0b1b4c4b6b41bd7c1a5abcfd2e462718040e026719f850fae2f0a42deadcc36dd6ae6aeff803afda97bac8c2ac6168d3323dd9c651f7210ea14d94b99916e3f9847385e2861543dec94587ff12f3db09c6c06ab67368e21c15925e02c151cff523a71edd7888762a34e5304441ab86b72558c6da568b300654bf17487190d104588f9be3d74ed4894c23e89dec980aa22c9d3510bf5f8d2afb3b14ffddb55e3c6b8054fef32b6f95cc106ec960100f4b2fb14a270f9b49248556ceda812204a1366acb91df5e0d007e76bc64697a8748f52ddf6b83a59cc730b914374620fab20ed9b353ae98afe0ddb55ff6c9b02d9ddfe5632fbabeae04b52d118c93cb8334b0786eb811cc521ef55f0de4829f6d77f06926cb4b2137bffda5a44581c941c97d40844ff5eba9abcf30763ea6a8e85dedd0fd9afa62d6af0fa9a3258c041d65427f372b1f72116b7c7a004eda22938fcdfade2d8a73de8e6911fb5d20bbdffc4ecaadf73f29df98569f70e40afb26d4ce1fcb421dddd622ac91c6069d600c1b2d14528815ec4ca30613a4179ff7591d1471a96f2bda1d4cb7a9e747f5218ea1170379935e8cef0a10abae45e0d25faf61b1f2b58ff59ca40bc35f262b15ff1a33a31fedffc7e2d2fac45a9bd1906bb2340df200a3beafbe0c44ba27ecb4aeac77d286bacf6470ef80b675524c5eec417ff1b04a833f9898b5a984220a4c5fb8303585bbfd1055da471eef46e69098639b6b9de1fd6a3c06b4ab6c6a75f7cc04629735a45a229f3850403e8c53afeb43c55653c6a362a22519f8b8b1eac1ed3ff923fa1ca7151d9b4cd991d01c50eda4224d9a83767ac3ced786d4bd3c0868ba97d1f8d094a46c2f794c029f8b1b98936a257908d7273d7f62fe5a49b6a75c9fb7f04d95086fc4f7314ddf6ab03676f004a197d87aabf18071df693ac808742693d343b7a514a0ab096fa8fa4bc02b557181c9fcfc4099049c6eae7fa7a0d77356808f6b4df61fc1993c17a0d1a1dd1462fa7d76692fde3792020cdc2cb294c441dfe1d94f7837ebe1f4e296bff756cb49ace3461a5c8f6c1a95a653079a8b47c1d4e0b365e2d564b92462e44209977f797a6c95573634db2105e96078fb31dede670d7d300a7aaa8d610fc5e50d40c12241f2b959e6e9cfe1748784bd5e51ea1d88a9f25f43437fea79ff7262086fbd255c53b4cb5519c2c85e66259b9f959e2c90f5ac456b674ca9806923ce9d43f1dc5469d51d818468ccd505d3ee657ef480c30cbfe92cf0f29f054a60b59b3807ef1ec490d4635b6edd9bc97f4bdca75a8c177e0a721e335d5b8842116200de2b839309ccf4bcd9b61bcc7a101f88f916cbd8ef941d52b97ace85958321c2ad491418bc636f42a510ddbcfa38c5829352b5d2e44b3619acc385cfa935eb3f1da36cc4ef95c94cd7b84e987ddeb33041c2f956a007c8db97356749fd09c49a70a8f296d128184a9e0a4123cb1299585c5d3a192f9f8ba1cb00d4ad75dcc067b12bdfb886ff3798fc8a93b9b8a3a8fcc22dcad67a7666c6c3e3999fc1dbddc32d21f7ec09296eac09beb1c09ff2bb0840c5213f50e1a7a54cc634032109ba72f3167bdf4e647a5fe16f18adf2f05972e7668104b4ba03a9e5344410aa5c27a508d196a5ed0568ab07c2dfdefe6e6ac2425d158a5bae32a47fbc4c81ce0709cf53222e4aeef4ef3f5a4bc61620141a32a57297b30c55df8447e54eaf269f99286010544b4bedfe670960c76e4d95c0c6db0d1e1b4a0a42c00", 0x2000, &(0x7f00000070c0)={&(0x7f0000000140)={0x50, 0x0, 0x20000000000002, {0x7, 0x2d, 0x9, 0xffffffffc5000d04, 0x3, 0x2005, 0x8, 0x2000b, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r2, 0x6700000000000000) 228.544805ms ago: executing program 4 (id=470): mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)}, 0x2320) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7d, 0x76, 0x1, 0x0, 0x0, 0x8, 0x90, 0xc, 0x8, 0x0, '\x00', 0x9, 0x7c}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"8fef3569e8d70dbc4f0d07edc79997de5ca94ea1d6d6122ad9c88f1441216c8570462261d46cd11adc918ef9c21cc59626c549d79562f7148e95b67f4140e43b46252292ec9364f375a97f025b58a6b7a9a36a2f785c64c74c7e5a06729fe4befeecc82f39ee1269746b2b5e00c5723322ecad7dc758c4c9a3bc8c02f98ccc3444762031728fbe7ef0a2d892650239fbd4a57bdb86acdd0af86418e9444409e44943c9ca088e6bf95a27b9197f5295514abef9f18cd61602c52532208fb7be5e3d8290c7a240e8b849b7b9cad03ff17a35dc7f4055e8b17d43ab8ecdee7139f6731733bc7cc7a14b3deb29748b7bec871604abd79632c13c6fd92d8e560bd83111c3630f1d0978f05a1e1541a74e3b62c167cf56e77fa1ac134c62cc53506cbbd85a0eec91d1123784931aadc9c94bb442912155959015ac03b240600d477ae3289bb44885a601653e74feaceafc0271dd3d7a43f7981fcae10bed055062560b98726d55cdd46a6f99b1b777f28b6e140672f1ce084d08e4ec5f99d820430eaad797926bf88ec5434412f5bbf830f6b9896a4cce672fb43487449da264b9ada305663524c731b8e43c40e5e87a2c277b0c5a8fec0f469172b14e33c25d5fd58cb5e2b74c8077ad9b7651ddb74170d69dcda8a1e08451d02d92f36e221c45ab37065f6da1d0a1005306f6a34fddd167628781f2ab7b1f0a4728c611514ad51a369f990d846ecff97acd1921c0dd67e3e1c7ca78e37bf1fc8d819399d6a29bfc76c612c0beae4febb737f68ad199defd64cb692a1c670bc9b3ea5b9f3075d69e6adb971f7f3a9c0743f877780dc0449c999fa6335fda520b4048d14799fc92b3916013a7631a05546ed8e8f8b49ee840b2b4e713442bdfff433729c5f9985f11df5a28d4c53bd968e5757b595bf5e5da346f206e27cef0a254d9fa9137fbdd6b3ddfacfc3861cc222add0746f9fa0b7057477096ad812cf90463974757875feb2667d58ac9da22af05deddac3387cf92f77962607fa4444050570354d7430ea41b14eed9136f43d0c1d06b86d42455407fdd813af34dadacf9b71fe0e794e7b6b0a6504bfb3ae718646fe2df90a4e02765f5998b9a5b85d2be9f0039b0779cc6206457921a2463a945453a5d6a1694163253455316a760cd2e62c5c37943d3d5717bfe26a6e40956079f14cf2bab615eb46e866fb6b1fcd9771c2505ce189876ad5c02b651695342665e5d12eee838f474f92f6a8fe2bbb168bb3ab54c050aa4180cc3d4a4153d1683d651d68ec3e41354707c7d6a5550856b97b6db66a370c802d02469f4ced055e1c8d8a77b33fd4e497b5aeff4d181970435ca0c975b511609c9b5c56382eb9b93b61a0e39e3f674f29958a39217e3069c6477b6cd769579698f0bce590d6a8885624dbe4d073ac82e8560bd4142237758066d0eea8dd2f946"}) 228.300854ms ago: executing program 6 (id=471): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 152.245366ms ago: executing program 4 (id=472): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000280)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 0s ago: executing program 4 (id=473): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x69e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfcff}, {}, {0xe, 0x10}}, [@TCA_RATE={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x7fe0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00fbff00000090000000000a"], 0x1c}}, 0x8000) recvfrom$inet_nvme(r1, 0x0, 0x0, 0x102, 0x0, 0x0) kernel console output (not intermixed with test programs): device bond0 [ 81.702173][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.715266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.730372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.755763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.768805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.783619][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.792889][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.806334][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.822567][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.840808][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.854940][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.879497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.918703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.933684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.949294][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.962096][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.973646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.005239][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.023920][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.033474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.050076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.062560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.079752][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.101203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.112829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.125662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.136706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.146888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.172372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.183891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.196625][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.212039][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.225606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.236012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.253533][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.272885][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.292892][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.306634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.319298][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.327380][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.341010][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.360485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.377004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.389517][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.398196][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.445883][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.466336][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.491806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.545893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.560082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.570336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.583859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.599854][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.632230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.642585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.654424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.666828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.677326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.700513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.724936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.763680][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.776726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.790287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.803159][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.812649][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.826755][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.864196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.874675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.886418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.901263][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.909521][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.922702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.933511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.950750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.961111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.976497][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.007405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.020643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.034500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.047171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.074279][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.101063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.115878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.130769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.142439][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.153571][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.164464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.177842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.192219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.205328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.220394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.242961][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.265229][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.277088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.289463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.303260][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.311223][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.323078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.339437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.350402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.372630][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.445211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.464884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.477938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.519606][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.532654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.544149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.554616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.567750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.584784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.597702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.615934][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 83.625452][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 83.642788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.653396][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 83.663667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.677478][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 83.688046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.700241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.712443][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 83.734202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.745401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.758884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.776487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.789444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.806117][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.826880][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.842801][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.858437][ T4192] device veth0_vlan entered promiscuous mode [ 83.875714][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.890221][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.905698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.918070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.934226][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.944372][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.973645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.991106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.007484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.031800][ T4192] device veth1_vlan entered promiscuous mode [ 84.047534][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.060099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.072648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.099967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.126234][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.139071][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.160790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.200954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.217863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.230018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.243329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.278790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.300166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.322916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.344240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.355513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.373307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.387842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.405441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.424863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.439914][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.485609][ T4192] device veth0_macvtap entered promiscuous mode [ 84.504621][ T4184] device veth0_vlan entered promiscuous mode [ 84.540298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.559289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.578885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.606472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.645313][ T4184] device veth1_vlan entered promiscuous mode [ 84.661567][ T4192] device veth1_macvtap entered promiscuous mode [ 84.676777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.687662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.701097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.713156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.724959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.735412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.745814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.767598][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.834024][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.885920][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.897871][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.914668][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.951624][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.963769][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.975998][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.989981][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.002077][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.013317][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.027650][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.046733][ T4184] device veth0_macvtap entered promiscuous mode [ 85.068577][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.079668][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.090958][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.109538][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.121461][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.135755][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.148085][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.171904][ T4184] device veth1_macvtap entered promiscuous mode [ 85.185271][ T4193] device veth0_vlan entered promiscuous mode [ 85.195166][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.205947][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.216623][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.226778][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.236736][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.249098][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.258963][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.269549][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.282817][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.317346][ T4185] device veth0_vlan entered promiscuous mode [ 85.343326][ T4193] device veth1_vlan entered promiscuous mode [ 85.353585][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.367619][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.378697][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.393203][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.417059][ T4185] device veth1_vlan entered promiscuous mode [ 85.440281][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.454585][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.469971][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.496773][ T4193] device veth0_macvtap entered promiscuous mode [ 85.509798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.531785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.541163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.557067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.573192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.586665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.598194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.611160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.641404][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.655542][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.671020][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.685697][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.698651][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.700235][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 85.712272][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.730830][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.743046][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 85.758128][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 85.767567][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 85.775835][ T4193] device veth1_macvtap entered promiscuous mode [ 85.783396][ T4173] Bluetooth: hci4: command 0x0419 tx timeout [ 85.801587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.815185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.826036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.840124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.954463][ T4185] device veth0_macvtap entered promiscuous mode [ 85.966714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.982409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.994536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.004634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.018093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.028061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.037685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.051053][ T4186] device veth0_vlan entered promiscuous mode [ 86.063615][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.077805][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.093683][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.105958][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.126106][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.153317][ T4185] device veth1_macvtap entered promiscuous mode [ 86.165494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.177788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.189756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.203621][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.216544][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.229506][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.235387][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.242314][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.268746][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.271986][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.308859][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.317986][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.339333][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.358885][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.365958][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.367571][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.389952][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.400359][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.413293][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.429597][ T4186] device veth1_vlan entered promiscuous mode [ 86.464653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.474930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.494306][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.507441][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.519070][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.530951][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.541801][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.556895][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.571063][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.591141][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.602143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.612969][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.613665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.634062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.654502][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.667238][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.679393][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.697133][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.710581][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.726190][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.744330][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.768269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.781043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.806743][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.817839][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.831722][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.844215][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.856361][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.869039][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.901345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.948200][ T4186] device veth0_macvtap entered promiscuous mode [ 86.960515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.997014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.008943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.036173][ T4186] device veth1_macvtap entered promiscuous mode [ 87.086767][ T4219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.105267][ T4219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.117590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.152377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.192063][ T4313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.241878][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.253334][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.269895][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.290877][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.305853][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.320310][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.339712][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.350717][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.362046][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.376344][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.394760][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.434993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.449565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.477449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.521353][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.550007][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.581151][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.599133][ T4313] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 87.612279][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.627485][ T4313] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 87.639562][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.656583][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.684824][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.720445][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.773725][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.807396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.817117][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.825979][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.839399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.869133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.906749][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.964474][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.980472][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.009193][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.080740][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.146965][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.185890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.236208][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.278755][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.293637][ T4325] loop2: detected capacity change from 0 to 512 [ 88.307929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.326786][ T4323] loop0: detected capacity change from 0 to 2048 [ 88.366501][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.382707][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.409784][ T4325] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.464908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.478803][ T4325] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 88.494922][ T4323] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.506711][ T4325] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.8: bg 0: block 104: invalid block bitmap [ 88.512373][ T4325] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 88.532961][ T4325] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.8: invalid indirect mapped block 1 (level 1) [ 88.550976][ T4325] EXT4-fs (loop2): 1 truncate cleaned up [ 88.556826][ T4325] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.581669][ T4327] overlayfs: failed to resolve './cgroup': -2 [ 89.942776][ T4349] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.389369][ T4361] xt_hashlimit: size too large, truncated to 1048576 [ 90.980186][ T4376] gadgetfs: bound to dummy_udc driver [ 91.299545][ T4364] loop3: detected capacity change from 0 to 32768 [ 91.490271][ T4364] XFS (loop3): Mounting V5 Filesystem [ 91.677347][ T4364] XFS (loop3): Ending clean mount [ 91.867709][ T4403] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 91.943855][ T7] cfg80211: failed to load regulatory.db [ 92.060426][ T4405] team0: Port device geneve2 added [ 92.086906][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.600283][ T4411] device syzkaller0 entered promiscuous mode [ 92.631450][ T4192] XFS (loop3): Unmounting Filesystem [ 94.068199][ T4435] loop2: detected capacity change from 0 to 512 [ 94.309003][ T4435] ======================================================= [ 94.309003][ T4435] WARNING: The mand mount option has been deprecated and [ 94.309003][ T4435] and is ignored by this kernel. Remove the mand [ 94.309003][ T4435] option from the mount to silence this warning. [ 94.309003][ T4435] ======================================================= [ 94.529602][ T4435] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.577297][ T4435] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.606058][ T4435] Quota error (device loop2): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 94.617289][ T4435] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 94.629422][ T4435] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.30: Failed to acquire dquot type 0 [ 94.822010][ T4437] loop3: detected capacity change from 0 to 32768 [ 95.044892][ T4454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35'. [ 95.238493][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.498471][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 95.548470][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.618645][ T7] usb 1-1: config 0 has no interfaces? [ 95.776325][ T4467] loop1: detected capacity change from 0 to 512 [ 95.801952][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 95.819965][ T7] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 95.855768][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.884596][ T7] usb 1-1: Product: syz [ 95.890632][ T7] usb 1-1: Manufacturer: syz [ 95.926043][ T7] usb 1-1: SerialNumber: syz [ 95.943500][ T4470] loop2: detected capacity change from 0 to 4096 [ 95.966946][ T7] usb 1-1: config 0 descriptor?? [ 95.992002][ T4467] EXT4-fs (loop1): Test dummy encryption mode enabled [ 96.007034][ T4467] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.41: inode #7: comm syz.1.41: iget: illegal inode # [ 96.034511][ T4467] EXT4-fs (loop1): Remounting filesystem read-only [ 96.045825][ T4467] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.41: error while reading EA inode 7 err=-117 [ 96.074601][ T4467] EXT4-fs (loop1): Remounting filesystem read-only [ 96.082539][ T21] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 96.097044][ T4467] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.41: inode #1: comm syz.1.41: iget: illegal inode # [ 96.124104][ T4467] EXT4-fs (loop1): Remounting filesystem read-only [ 96.125133][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.133591][ T4467] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.41: error while reading EA inode 1 err=-117 [ 96.144882][ T21] usb 4-1: Product: syz [ 96.167504][ T4467] EXT4-fs (loop1): Remounting filesystem read-only [ 96.175383][ T4467] EXT4-fs (loop1): 1 orphan inode deleted [ 96.181994][ T21] usb 4-1: Manufacturer: syz [ 96.188222][ T4467] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x0000000000000048,nouid32,resgid=0x0000000000000000,delalloc,init_itable=0x0000000000008d55,data_err=abort,errors=remount-ro,. Quota mode: none. [ 96.219499][ T21] usb 4-1: SerialNumber: syz [ 96.237307][ T21] usb 4-1: config 0 descriptor?? [ 96.333139][ T26] audit: type=1800 audit(1792040991.242:2): pid=4470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.42" name="file1" dev="loop2" ino=0 res=0 errno=0 [ 96.533124][ T21] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 96.768987][ T4483] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 96.788261][ T4483] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 96.910641][ T4487] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 96.930894][ T4487] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 97.089520][ T4493] capability: warning: `syz.1.49' uses deprecated v2 capabilities in a way that may be insecure [ 97.326396][ T4501] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901993312 (7803986624 ns) > initial count (6429106268 ns). Using initial count to start timer. [ 97.388607][ T4501] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.679494][ T21] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 97.694405][ T4513] netlink: 'syz.4.58': attribute type 39 has an invalid length. [ 97.815179][ T4306] usb 1-1: USB disconnect, device number 3 [ 97.932567][ T4272] usb 4-1: USB disconnect, device number 2 [ 98.207614][ T4531] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 98.540309][ T4546] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.594781][ T4548] FAULT_INJECTION: forcing a failure. [ 98.594781][ T4548] name failslab, interval 1, probability 0, space 0, times 1 [ 98.663362][ T4548] CPU: 1 PID: 4548 Comm: syz.3.67 Not tainted syzkaller #0 [ 98.670697][ T4548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.681250][ T4548] Call Trace: [ 98.684949][ T4548] [ 98.688265][ T4548] dump_stack_lvl+0x188/0x250 [ 98.694600][ T4548] ? show_regs_print_info+0x20/0x20 [ 98.700291][ T4548] ? load_image+0x410/0x410 [ 98.705256][ T4548] ? __might_sleep+0xf0/0xf0 [ 98.709988][ T4548] ? __lock_acquire+0x7d40/0x7d40 [ 98.716414][ T4548] should_fail+0x383/0x4b0 [ 98.720926][ T4548] should_failslab+0x5/0x20 [ 98.726912][ T4548] slab_pre_alloc_hook+0x51/0xc0 [ 98.732730][ T4548] ? __kernfs_new_node+0xe3/0x6b0 [ 98.738387][ T4548] kmem_cache_alloc+0x3d/0x280 [ 98.743469][ T4548] __kernfs_new_node+0xe3/0x6b0 [ 98.748578][ T4548] ? kernfs_new_node+0x250/0x250 [ 98.754191][ T4548] kernfs_new_node+0x148/0x250 [ 98.759617][ T4548] kernfs_create_dir_ns+0x40/0x120 [ 98.765771][ T4548] sysfs_create_dir_ns+0x12c/0x290 [ 98.770969][ T4548] ? sysfs_warn_dup+0xa0/0xa0 [ 98.776014][ T4548] ? do_raw_spin_unlock+0x11d/0x230 [ 98.781473][ T4548] kobject_add_internal+0x5ba/0xcd0 [ 98.787113][ T4548] kobject_add+0x160/0x230 [ 98.792229][ T4548] ? kobject_init+0x1c0/0x1c0 [ 98.798544][ T4548] ? get_device_parent+0x288/0x3e0 [ 98.805976][ T4548] device_add+0x470/0x1050 [ 98.810910][ T4548] hci_register_dev+0x3d2/0x980 [ 98.816279][ T4548] hci_uart_tty_ioctl+0x875/0xa80 [ 98.821643][ T4548] ? hci_uart_tty_write+0x10/0x10 [ 98.822765][ T4556] fuse: Bad value for 'fd' [ 98.827217][ T4548] tty_ioctl+0x8e3/0xc30 [ 98.827282][ T4548] ? security_file_ioctl+0x7c/0xa0 [ 98.842948][ T4548] ? tty_get_icount+0xa0/0xa0 [ 98.848142][ T4548] __se_sys_ioctl+0xfa/0x170 [ 98.854153][ T4548] do_syscall_64+0x4c/0xa0 [ 98.860058][ T4548] ? clear_bhb_loop+0x30/0x80 [ 98.865419][ T4548] ? clear_bhb_loop+0x30/0x80 [ 98.870660][ T4548] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.880011][ T4548] RIP: 0033:0x7f136af0e559 [ 98.885463][ T4548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.909672][ T4548] RSP: 002b:00007f1369166028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.920250][ T4548] RAX: ffffffffffffffda RBX: 00007f136b195fa0 RCX: 00007f136af0e559 [ 98.930076][ T4548] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003 [ 98.939836][ T4548] RBP: 00007f136afa58b0 R08: 0000000000000000 R09: 0000000000000000 [ 98.949620][ T4548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.959248][ T4548] R13: 00007f136b196038 R14: 00007f136b195fa0 R15: 00007fff99a7eba8 [ 98.970672][ T4548] [ 99.065504][ T4548] kobject_add_internal failed for hci5 (error: -12 parent: bluetooth) [ 99.119611][ T4548] Bluetooth: Can't register HCI device [ 99.409300][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.668420][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 99.788520][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 99.958844][ T21] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 99.971085][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.982684][ T21] usb 1-1: Product: syz [ 99.987754][ T21] usb 1-1: Manufacturer: syz [ 99.993693][ T21] usb 1-1: SerialNumber: syz [ 100.002220][ T21] usb 1-1: config 0 descriptor?? [ 100.038757][ T4561] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.059322][ T21] hub 1-1:0.0: bad descriptor, ignoring hub [ 100.079427][ T21] hub: probe of 1-1:0.0 failed with error -5 [ 100.106882][ T21] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 100.222805][ T4607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 100.318166][ T4272] usb 1-1: USB disconnect, device number 4 [ 100.325142][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 100.506755][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 100.606433][ T4621] loop3: detected capacity change from 0 to 64 [ 102.458643][ T4271] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.829522][ T4271] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 102.849082][ T4271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.876957][ T4271] usb 4-1: config 0 descriptor?? [ 103.384481][ T4271] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 103.400484][ T4271] [drm] Initialized udl on minor 2 [ 103.624571][ T4680] loop1: detected capacity change from 0 to 4096 [ 103.663635][ T4675] loop0: detected capacity change from 0 to 32768 [ 103.688639][ T4271] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 103.706872][ T4271] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 103.727393][ T4680] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.759865][ T4271] usb 4-1: USB disconnect, device number 3 [ 103.785095][ T4272] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 103.809861][ T4272] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 103.824978][ T4272] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 103.840167][ T4675] JBD2: Ignoring recovery information on journal [ 103.914955][ T4675] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 104.054769][ T4680] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 104.599968][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 104.696654][ T4706] loop3: detected capacity change from 0 to 512 [ 104.806375][ T4706] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 104.871549][ T4706] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0022] [ 104.921396][ T4706] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.000225][ T4706] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.121: attempt to clear invalid blocks 1024 len 1 [ 105.072402][ T4706] EXT4-fs (loop3): Remounting filesystem read-only [ 105.083490][ T4706] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.121: bg 0: block 361: padding at end of block bitmap is not set [ 105.143245][ T4706] EXT4-fs (loop3): Remounting filesystem read-only [ 105.165583][ T4706] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 105.185182][ T4706] EXT4-fs (loop3): Remounting filesystem read-only [ 105.186272][ T4728] IPVS: nq: FWM 3 0x00000003 - no destination available [ 105.212119][ T4706] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.121: invalid indirect mapped block 1811939328 (level 0) [ 105.256832][ T4706] EXT4-fs (loop3): Remounting filesystem read-only [ 105.273837][ T4706] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.121: invalid indirect mapped block 2185560079 (level 1) [ 105.313271][ T4706] EXT4-fs (loop3): Remounting filesystem read-only [ 105.325022][ T4706] EXT4-fs (loop3): 1 truncate cleaned up [ 105.335031][ T4706] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,noblock_validity,dax=never,errors=remount-ro,sb=0x0000000000000009. Quota mode: none. [ 105.398660][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.446549][ T4734] loop2: detected capacity change from 0 to 512 [ 105.461859][ T4729] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.554239][ T4734] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.130: Unrecognised inode hash code 255 [ 105.569156][ T4734] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.130: Corrupt directory, running e2fsck is recommended [ 105.587029][ T4734] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 105.599052][ T4734] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.130: corrupted in-inode xattr [ 105.618847][ T4734] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.130: couldn't read orphan inode 15 (err -117) [ 105.637128][ T4734] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 105.659010][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 105.808583][ T21] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 105.830229][ T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 105.864083][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 105.890643][ T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 105.939676][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 105.985506][ T21] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.029829][ T21] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.053371][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.232436][ T4729] chnl_net:caif_netlink_parms(): no params data found [ 106.258126][ T4754] clocksource: Switched to clocksource kvm-clock [ 106.348521][ T21] usb 1-1: GET_CAPABILITIES returned 0 [ 106.354773][ T21] usbtmc 1-1:16.0: can't read capabilities [ 106.531041][ T4752] rxe_eth0 speed is unknown, defaulting to 1000 [ 106.544481][ T4729] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.557927][ T4729] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.619764][ T4729] device bridge_slave_0 entered promiscuous mode [ 106.677330][ T21] usb 1-1: USB disconnect, device number 5 [ 106.685381][ T4729] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.714079][ T4729] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.733590][ T4729] device bridge_slave_1 entered promiscuous mode [ 106.823419][ T4729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.872420][ T4729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.017369][ T4733] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.130: Unrecognised inode hash code 255 [ 107.036036][ T4729] team0: Port device team_slave_0 added [ 107.059019][ T4733] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.130: Corrupt directory, running e2fsck is recommended [ 107.078244][ T4729] team0: Port device team_slave_1 added [ 107.136698][ T4729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.162585][ T4729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.196662][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.297668][ T4729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.375951][ T4729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.393650][ T4729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.426881][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.458540][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 107.514290][ T4729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.735743][ T4729] device hsr_slave_0 entered promiscuous mode [ 107.755094][ T4729] device hsr_slave_1 entered promiscuous mode [ 107.795977][ T4729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.820805][ T4729] Cannot create hsr debugfs directory [ 107.849409][ T4779] device gretap0 entered promiscuous mode [ 107.895426][ T4781] gadgetfs: bound to dummy_udc driver [ 108.188409][ T4273] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 108.228391][ C0] gadgetfs: connected [ 108.234529][ T4273] gadgetfs: disconnected [ 108.478312][ C0] gadgetfs: connected [ 108.598573][ T4273] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 108.619077][ T4273] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 108.653583][ T4729] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.670742][ T4273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.721324][ T4729] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.758378][ C0] gadgetfs: configuration #1 [ 108.792604][ T4729] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.824393][ T4729] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.951609][ T4780] gadgetfs: suspended from state 3 [ 108.978891][ T4273] usb 1-1: can't set config #1, error -71 [ 108.992383][ T4780] gadgetfs: disconnected [ 109.000420][ T4273] usb 1-1: USB disconnect, device number 6 [ 109.149756][ T4729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.242129][ T4729] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.255286][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 109.298878][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.327960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.387524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.436206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.486890][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.496111][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.518980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.538471][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 109.553869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.618629][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.629193][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.745903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.779358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.817328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.866477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.907531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.985650][ T4797] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.029833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.069534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.111470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.144665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.170191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.195848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.226787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.270689][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.404216][ T4801] process 'syz.2.152' launched '/dev/fd/7' with NULL argv: empty string added [ 110.673429][ T4811] loop2: detected capacity change from 0 to 16 [ 110.731221][ T4811] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 110.760313][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.824856][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.885124][ T4729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.021298][ T26] audit: type=1804 audit(1792041005.939:3): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.154" name="/newroot/22/merge/file" dev="overlay" ino=144 res=1 errno=0 [ 111.453503][ T4839] loop0: detected capacity change from 0 to 16 [ 111.520285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.543655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.592480][ T4839] erofs: (device loop0): mounted with root inode @ nid 36. [ 111.618738][ T4306] Bluetooth: hci2: command 0x040f tx timeout [ 111.727276][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.749721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.781970][ T4844] overlayfs: upper fs does not support file handles, falling back to index=off. [ 111.796576][ T4729] device veth0_vlan entered promiscuous mode [ 111.836714][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.859360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.913030][ T4729] device veth1_vlan entered promiscuous mode [ 112.057559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.074836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.109350][ T4729] device veth0_macvtap entered promiscuous mode [ 112.150222][ T4729] device veth1_macvtap entered promiscuous mode [ 112.236012][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.255594][ T4852] loop2: detected capacity change from 0 to 1024 [ 112.264833][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.297591][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.320596][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.351227][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.369250][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.390762][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.409403][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.454532][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.498432][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.527997][ T4729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.622600][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.644133][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.683067][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.742074][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.784669][ T4859] device lo entered promiscuous mode [ 112.831014][ T4852] hfsplus: xattr search failed [ 112.992820][ T4859] device tunl0 entered promiscuous mode [ 113.053609][ T4859] device gre0 entered promiscuous mode [ 113.107112][ T4859] device gretap0 entered promiscuous mode [ 113.161237][ T4859] device erspan0 entered promiscuous mode [ 113.173694][ T4859] device ip_vti0 entered promiscuous mode [ 113.253847][ T4859] device ip6_vti0 entered promiscuous mode [ 113.265963][ T4859] device sit0 entered promiscuous mode [ 113.303245][ T4859] device ip6tnl0 entered promiscuous mode [ 113.315457][ T4859] device ip6gre0 entered promiscuous mode [ 113.332483][ T4859] device syz_tun entered promiscuous mode [ 113.355053][ T4859] device ip6gretap0 entered promiscuous mode [ 113.446282][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.455714][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.503243][ T4859] device bridge0 entered promiscuous mode [ 113.567996][ T4859] device vcan0 entered promiscuous mode [ 113.586550][ T4859] device bond0 entered promiscuous mode [ 113.594512][ T4859] device bond_slave_0 entered promiscuous mode [ 113.602040][ T4859] device bond_slave_1 entered promiscuous mode [ 113.628896][ T4859] device team0 entered promiscuous mode [ 113.642496][ T4859] device team_slave_0 entered promiscuous mode [ 113.649521][ T4859] device team_slave_1 entered promiscuous mode [ 113.682353][ T4859] device dummy0 entered promiscuous mode [ 113.701872][ T4255] Bluetooth: hci2: command 0x0419 tx timeout [ 113.732977][ T4859] device nlmon0 entered promiscuous mode [ 113.750780][ T4859] device caif0 entered promiscuous mode [ 113.766859][ T4859] device batadv0 entered promiscuous mode [ 113.799732][ T4859] device vxcan0 entered promiscuous mode [ 113.814377][ T4859] device vxcan1 entered promiscuous mode [ 113.830438][ T4859] device veth0 entered promiscuous mode [ 113.862654][ T4859] device veth1 entered promiscuous mode [ 113.897196][ T4859] device wg0 entered promiscuous mode [ 113.920331][ T4859] device wg1 entered promiscuous mode [ 113.940644][ T4859] device wg2 entered promiscuous mode [ 113.949486][ T4859] device veth0_to_bridge entered promiscuous mode [ 113.999244][ T4859] device veth1_to_bridge entered promiscuous mode [ 114.050363][ T4859] device veth0_to_bond entered promiscuous mode [ 114.079869][ T4859] device veth1_to_bond entered promiscuous mode [ 114.113493][ T4859] device veth0_to_team entered promiscuous mode [ 114.159761][ T4859] device veth1_to_team entered promiscuous mode [ 114.193638][ T4859] device veth0_to_batadv entered promiscuous mode [ 114.234244][ T4859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.246021][ T4859] device batadv_slave_0 entered promiscuous mode [ 114.259213][ T4859] device veth1_to_batadv entered promiscuous mode [ 114.281028][ T4859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.291077][ T4859] device batadv_slave_1 entered promiscuous mode [ 114.308495][ T4859] device xfrm0 entered promiscuous mode [ 114.326146][ T4859] device veth0_to_hsr entered promiscuous mode [ 114.348829][ T4859] device veth1_to_hsr entered promiscuous mode [ 114.428888][ T4859] device hsr0 entered promiscuous mode [ 114.459000][ T4859] device veth1_virt_wifi entered promiscuous mode [ 114.479215][ T4859] device veth0_virt_wifi entered promiscuous mode [ 114.499320][ T4859] device virt_wifi0 entered promiscuous mode [ 114.559726][ T4859] device vlan0 entered promiscuous mode [ 114.566499][ T4859] device vlan1 entered promiscuous mode [ 114.695235][ T4859] device macvlan0 entered promiscuous mode [ 114.708782][ T4859] device macvlan1 entered promiscuous mode [ 114.717894][ T4859] device ipvlan0 entered promiscuous mode [ 114.736488][ T4859] device ipvlan1 entered promiscuous mode [ 114.755129][ T4859] device macvtap0 entered promiscuous mode [ 114.792353][ T4859] device macsec0 entered promiscuous mode [ 114.820080][ T4859] device geneve0 entered promiscuous mode [ 114.829279][ T4859] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.839528][ T4859] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.850956][ T4859] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.861409][ T4859] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.872461][ T4859] device geneve1 entered promiscuous mode [ 114.908613][ T4859] device netdevsim0 entered promiscuous mode [ 114.920908][ T4859] device netdevsim1 entered promiscuous mode [ 114.983486][ T4859] device netdevsim2 entered promiscuous mode [ 115.007072][ T4859] device netdevsim3 entered promiscuous mode [ 115.036934][ T4859] device wlan0 entered promiscuous mode [ 115.056010][ T4859] device wlan1 entered promiscuous mode [ 115.073461][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.117726][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.139737][ T4859] syz.0.165 (4859) used greatest stack depth: 21104 bytes left [ 115.149620][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.149644][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.149656][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.149670][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.149718][ T4729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.220446][ T4729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.241332][ T4729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.275297][ T4899] loop0: detected capacity change from 0 to 512 [ 115.325744][ T4899] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 115.342700][ T4899] EXT4-fs (loop0): Unrecognized mount option "context=root" or missing value [ 115.391416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.416210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.439734][ T4729] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.474432][ T4729] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.494828][ T4729] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.514891][ T4729] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.694520][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.713609][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.745033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.769144][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.821103][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.843890][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.926408][ T4910] loop3: detected capacity change from 0 to 1024 [ 115.960091][ T4893] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.238438][ T4893] usb 1-1: Using ep0 maxpacket: 32 [ 116.312399][ T4916] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.380863][ T4893] usb 1-1: config 0 has no interfaces? [ 116.588539][ T4893] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.608255][ T4893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.634759][ T4893] usb 1-1: Product: syz [ 116.658677][ T4893] usb 1-1: Manufacturer: syz [ 116.673820][ T4893] usb 1-1: SerialNumber: syz [ 116.697407][ T4893] usb 1-1: config 0 descriptor?? [ 116.881283][ T4916] chnl_net:caif_netlink_parms(): no params data found [ 117.039339][ T4274] usb 1-1: USB disconnect, device number 7 [ 117.092917][ T4916] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.156126][ T4916] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.176679][ T4916] device bridge_slave_0 entered promiscuous mode [ 117.219835][ T4916] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.248384][ T4916] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.279551][ T4916] device bridge_slave_1 entered promiscuous mode [ 117.364290][ T4916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.417701][ T4916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.459986][ T4916] team0: Port device team_slave_0 added [ 117.478973][ T4916] team0: Port device team_slave_1 added [ 117.553625][ T4916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.586846][ T4916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.686530][ T4916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.725131][ T4916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.754707][ T4916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.845494][ T4916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.860945][ T4194] kernel write not supported for file bpf-prog (pid: 4194 comm: kworker/1:3) [ 117.996878][ T4916] device hsr_slave_0 entered promiscuous mode [ 118.054109][ T4916] device hsr_slave_1 entered promiscuous mode [ 118.111162][ T4916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.158538][ T4916] Cannot create hsr debugfs directory [ 118.250379][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 118.440874][ T4900] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.671414][ T4900] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.903426][ T4900] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.145719][ T4900] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.192762][ T4956] loop3: detected capacity change from 0 to 128 [ 120.112003][ T4965] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.329394][ T4194] Bluetooth: hci4: command 0x041b tx timeout [ 120.347233][ T4916] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 120.401541][ T4916] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 120.416413][ T4960] loop3: detected capacity change from 0 to 32768 [ 120.437344][ T4916] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 120.553154][ T4960] JBD2: Ignoring recovery information on journal [ 120.661973][ T4960] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 120.680965][ T4916] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 120.918691][ T4980] fuse: Bad value for 'fd' [ 121.001491][ T4960] syz.3.191 (4960) used greatest stack depth: 18240 bytes left [ 121.173631][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 121.217107][ T4916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.329866][ T4996] loop4: detected capacity change from 0 to 7 [ 121.358637][ T4916] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.367657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.405289][ T4996] loop4: [ 121.418776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.439691][ T4996] loop4: partition table partially beyond EOD, truncated [ 121.564704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.587374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.651724][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.661695][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.708208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.810159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.843679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.868601][ T4274] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 121.885209][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.894850][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.906334][ T5011] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 121.947184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.962060][ T5017] fuse: Bad value for 'fd' [ 122.049898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.069670][ T5021] loop5: detected capacity change from 0 to 128 [ 122.088930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.113646][ T5021] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.141937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.156871][ T5021] FAT-fs (loop5): bogus number of reserved sectors [ 122.183381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.209046][ T5021] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 122.225033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.242027][ T5021] FAT-fs (loop5): Can't find a valid FAT filesystem [ 122.251750][ T4274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.268054][ T4274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.270587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.279932][ T4274] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 122.279965][ T4274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.310695][ T4274] usb 1-1: config 0 descriptor?? [ 122.347298][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.370380][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.457477][ T4309] Bluetooth: hci4: command 0x040f tx timeout [ 122.532693][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.549830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.618788][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.822629][ T4274] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 122.852414][ T4274] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 122.903324][ T4274] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 122.937042][ T4274] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 122.955932][ T4274] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 122.977664][ T4274] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 123.023211][ T4274] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 123.105606][ T4274] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 123.240341][ T4274] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 123.392807][ T5055] loop3: detected capacity change from 0 to 1024 [ 123.476040][ T4900] device hsr_slave_0 left promiscuous mode [ 123.487741][ T5055] EXT4-fs (loop3): Ignoring removed orlov option [ 123.525927][ T4900] device hsr_slave_1 left promiscuous mode [ 123.555234][ T4900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.577304][ T5055] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 123.665529][ T4900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.753321][ T4900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.818453][ T4900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.828558][ T5005] cp2112 0003:10C4:EA90.0001: Unsupported transaction 0 [ 123.860184][ T5005] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 123.872426][ T4900] device bridge_slave_1 left promiscuous mode [ 123.901159][ T4900] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.909183][ T4274] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 124.013664][ T4274] usb 1-1: USB disconnect, device number 8 [ 124.096567][ T4900] device bridge_slave_0 left promiscuous mode [ 124.148466][ T4900] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.202545][ T5074] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.255587][ T5071] fido_id[5071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 124.433731][ T4900] device veth1_macvtap left promiscuous mode [ 124.448953][ T4900] device veth0_macvtap left promiscuous mode [ 124.469477][ T4900] device veth1_vlan left promiscuous mode [ 124.481364][ T4900] device veth0_vlan left promiscuous mode [ 124.489514][ T4309] Bluetooth: hci4: command 0x0419 tx timeout [ 124.933299][ T4900] team0 (unregistering): Port device geneve2 removed [ 125.316148][ T4900] team0 (unregistering): Port device team_slave_1 removed [ 125.364186][ T4900] team0 (unregistering): Port device team_slave_0 removed [ 125.424713][ T4900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.467694][ T4900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.682673][ T4900] bond0 (unregistering): Released all slaves [ 125.791019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.807130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.846341][ T4916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.938339][ T5106] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.122369][ T5119] netlink: 'syz.5.232': attribute type 4 has an invalid length. [ 126.242440][ T5123] netlink: 'syz.5.232': attribute type 4 has an invalid length. [ 126.575727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.593721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.674716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.695886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.722458][ T4916] device veth0_vlan entered promiscuous mode [ 126.758724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.772506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.801856][ T4916] device veth1_vlan entered promiscuous mode [ 126.854207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.876858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.896731][ T4916] device veth0_macvtap entered promiscuous mode [ 126.916303][ T4916] device veth1_macvtap entered promiscuous mode [ 126.986166][ T4916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.014602][ T4916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.041786][ T4916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.064357][ T4916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.087888][ T4916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.114511][ T4916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.144642][ T4916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.172794][ T5151] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 127.193155][ T4916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.229508][ T4916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.243948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.259370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.281629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.303944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.345921][ T4916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.378486][ T4916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.392169][ T4916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.409242][ T4916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.434379][ T4916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.465842][ T4916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.478721][ T4873] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.488775][ T4916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.544812][ T4916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.600285][ T5160] ODEBUG: Out of memory. ODEBUG disabled [ 127.858494][ T4873] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.992190][ T4916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.059681][ T4873] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.113310][ T4916] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.125722][ T4916] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.137606][ T4916] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.150721][ T4916] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.198358][ T4873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 128.207673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.237655][ T4873] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 128.249521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.277181][ T4873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.288752][ T5164] loop5: detected capacity change from 0 to 1024 [ 128.332125][ T4873] usb 1-1: config 0 descriptor?? [ 128.465213][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.485389][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.530672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.565998][ T5164] EXT4-fs (loop5): Ignoring removed orlov option [ 128.634516][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.686248][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.736397][ T5164] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 128.799379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.618582][ T4873] sony 0003:054C:09CC.0002: Failed to get calibration data from Dualshock 4 [ 129.672428][ T4873] sony 0003:054C:09CC.0002: hidraw0: USB HID vb6.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 129.752111][ T4873] sony 0003:054C:09CC.0002: failed to claim input [ 129.814156][ T4873] usb 1-1: USB disconnect, device number 9 [ 130.042369][ T5212] fido_id[5212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 130.326704][ T5185] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.337197][ T5185] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.152359][ T5185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.196130][ T5185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.218435][ T4268] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 131.425167][ T5185] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.447941][ T5185] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.468380][ T5185] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.485251][ T5185] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.678729][ T4268] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.705463][ T4268] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.733605][ T4268] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 131.749085][ T4268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.810228][ T4268] option 6-1:1.0: GSM modem (1-port) converter detected [ 131.837687][ T4268] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 131.893185][ T5215] netlink: 'syz.0.250': attribute type 4 has an invalid length. [ 131.951806][ T5216] netlink: 'syz.0.250': attribute type 4 has an invalid length. [ 132.235496][ T5248] fuse: Bad value for 'fd' [ 132.693121][ T26] audit: type=1326 audit(1792041027.609:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.6.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa1c9f559 code=0x7ffc0000 [ 132.798844][ T26] audit: type=1326 audit(1792041027.609:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.6.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa1c9f559 code=0x7ffc0000 [ 132.893318][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.905089][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.917748][ T26] audit: type=1326 audit(1792041027.649:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.6.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcfa1c9f559 code=0x7ffc0000 [ 132.987748][ T26] audit: type=1326 audit(1792041027.649:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.6.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa1c9f559 code=0x7ffc0000 [ 133.139334][ T26] audit: type=1326 audit(1792041027.649:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.6.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa1c9f559 code=0x7ffc0000 [ 133.288085][ T26] audit: type=1326 audit(1792041027.649:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.6.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcfa1c9f559 code=0x7ffc0000 [ 133.447370][ T26] audit: type=1326 audit(1792041027.649:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.6.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa1c9f559 code=0x7ffc0000 [ 133.589488][ T26] audit: type=1326 audit(1792041027.649:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.6.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa1c9f559 code=0x7ffc0000 [ 133.762571][ T26] audit: type=1326 audit(1792041027.669:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.6.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcfa1c9f559 code=0x7ffc0000 [ 133.909558][ T26] audit: type=1326 audit(1792041027.669:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5264 comm="syz.6.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa1c9f559 code=0x7ffc0000 [ 133.985604][ T4271] usb 6-1: USB disconnect, device number 2 [ 134.070976][ T4271] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 134.131535][ T5291] loop5: detected capacity change from 0 to 1024 [ 134.150771][ T4271] option 6-1:1.0: device disconnected [ 134.749740][ T5302] device lo left promiscuous mode [ 134.789429][ T4194] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 134.819910][ T5302] device tunl0 left promiscuous mode [ 134.867773][ T5302] device gre0 left promiscuous mode [ 134.930948][ T5302] device gretap0 left promiscuous mode [ 134.979328][ T5302] device erspan0 left promiscuous mode [ 135.008663][ T5302] device ip_vti0 left promiscuous mode [ 135.058879][ T5302] device ip6_vti0 left promiscuous mode [ 135.078582][ T4194] usb 7-1: Using ep0 maxpacket: 16 [ 135.095861][ T5302] device sit0 left promiscuous mode [ 135.132346][ T5302] device ip6tnl0 left promiscuous mode [ 135.161570][ T5302] device ip6gre0 left promiscuous mode [ 135.195027][ T5302] device syz_tun left promiscuous mode [ 135.230161][ T5302] device ip6gretap0 left promiscuous mode [ 135.275097][ T5302] device bridge0 left promiscuous mode [ 135.288816][ T4194] usb 7-1: config 1 interface 0 altsetting 11 endpoint 0x82 has invalid maxpacket 1032, setting to 1024 [ 135.321112][ T5302] device vcan0 left promiscuous mode [ 135.348352][ T4194] usb 7-1: config 1 interface 0 altsetting 11 bulk endpoint 0x82 has invalid maxpacket 1024 [ 135.382699][ T5302] device bond0 left promiscuous mode [ 135.393857][ T4194] usb 7-1: config 1 interface 0 altsetting 11 bulk endpoint 0x3 has invalid maxpacket 8 [ 135.409180][ T4893] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 135.424035][ T5302] device team0 left promiscuous mode [ 135.452902][ T4194] usb 7-1: config 1 interface 0 has no altsetting 0 [ 135.468928][ T5302] device dummy0 left promiscuous mode [ 135.507272][ T5302] device nlmon0 left promiscuous mode [ 135.537774][ T5302] device caif0 left promiscuous mode [ 135.582716][ T5302] device batadv0 left promiscuous mode [ 135.606017][ T5302] device vxcan0 left promiscuous mode [ 135.635161][ T5302] device vxcan1 left promiscuous mode [ 135.648589][ T4194] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.670495][ T5302] device veth0 left promiscuous mode [ 135.676722][ T5302] device veth1 left promiscuous mode [ 135.688759][ T4893] usb 6-1: Using ep0 maxpacket: 16 [ 135.688761][ T4194] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.688785][ T4194] usb 7-1: Product: syz [ 135.718823][ T5302] device wg0 left promiscuous mode [ 135.726632][ T5302] device wg1 left promiscuous mode [ 135.754180][ T5302] device wg2 left promiscuous mode [ 135.773002][ T5302] device veth0_to_bridge left promiscuous mode [ 135.773797][ T4194] usb 7-1: Manufacturer: ␊ [ 135.799872][ T4194] usb 7-1: SerialNumber: syz [ 135.815395][ T5302] device veth1_to_bridge left promiscuous mode [ 135.835621][ T5302] device veth0_to_bond left promiscuous mode [ 135.847155][ T5296] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 135.856464][ T4893] usb 6-1: config 9 has an invalid interface number: 7 but max is 1 [ 135.867698][ T5302] device bond_slave_0 left promiscuous mode [ 135.880754][ T4893] usb 6-1: config 9 has an invalid interface number: 242 but max is 1 [ 135.889192][ T5302] device veth1_to_bond left promiscuous mode [ 135.904025][ T5296] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 135.920471][ T5302] device bond_slave_1 left promiscuous mode [ 135.931108][ T4893] usb 6-1: config 9 has no interface number 0 [ 135.948868][ T5302] device veth0_to_team left promiscuous mode [ 135.956043][ T5302] device team_slave_0 left promiscuous mode [ 135.963174][ T4893] usb 6-1: config 9 has no interface number 1 [ 135.977923][ T5302] device veth1_to_team left promiscuous mode [ 135.985172][ T5302] device team_slave_1 left promiscuous mode [ 135.993177][ T4893] usb 6-1: config 9 interface 7 has no altsetting 0 [ 136.009456][ T5302] device veth0_to_batadv left promiscuous mode [ 136.018808][ T4893] usb 6-1: config 9 interface 242 has no altsetting 0 [ 136.058235][ T5302] device batadv_slave_0 left promiscuous mode [ 136.085866][ T5302] device veth1_to_batadv left promiscuous mode [ 136.116850][ T5302] device batadv_slave_1 left promiscuous mode [ 136.133428][ T5302] device xfrm0 left promiscuous mode [ 136.143610][ T5302] device veth0_to_hsr left promiscuous mode [ 136.163531][ T5302] device veth1_to_hsr left promiscuous mode [ 136.182124][ T5302] device hsr0 left promiscuous mode [ 136.195112][ T5302] device veth1_virt_wifi left promiscuous mode [ 136.212967][ T5302] device veth0_virt_wifi left promiscuous mode [ 136.222643][ T5302] device virt_wifi0 left promiscuous mode [ 136.237320][ T5302] device vlan0 left promiscuous mode [ 136.240195][ T4893] usb 6-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=20.ea [ 136.261419][ T5302] device vlan1 left promiscuous mode [ 136.279831][ T4194] cdc_ether: probe of 7-1:1.0 failed with error -71 [ 136.296518][ T5302] device macvlan0 left promiscuous mode [ 136.303200][ T4893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.317132][ T5302] device macvlan1 left promiscuous mode [ 136.334380][ T4893] usb 6-1: Product: syz [ 136.340036][ T4194] usb 7-1: USB disconnect, device number 2 [ 136.345987][ T4893] usb 6-1: Manufacturer: syz [ 136.357396][ T5302] device ipvlan0 left promiscuous mode [ 136.372869][ T4893] usb 6-1: SerialNumber: syz [ 136.389359][ T5302] device ipvlan1 left promiscuous mode [ 136.426289][ T5302] device macvtap0 left promiscuous mode [ 136.441748][ T5302] device macsec0 left promiscuous mode [ 136.453960][ T5302] device geneve0 left promiscuous mode [ 136.465232][ T5302] device geneve1 left promiscuous mode [ 136.477243][ T5302] device netdevsim0 left promiscuous mode [ 136.494381][ T5302] device netdevsim1 left promiscuous mode [ 136.505551][ T5302] device netdevsim2 left promiscuous mode [ 136.523529][ T5302] device netdevsim3 left promiscuous mode [ 136.536575][ T5302] device wlan0 left promiscuous mode [ 136.544554][ T5302] device wlan1 left promiscuous mode [ 136.730038][ T4893] usb 6-1: Expected 3 endpoints, found: 0 [ 136.819864][ T4893] sierra 6-1:9.242: Sierra USB modem converter detected [ 136.890490][ T4893] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 136.949919][ T4893] usb 6-1: USB disconnect, device number 3 [ 137.045099][ T4893] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 137.103051][ T4893] sierra 6-1:9.242: device disconnected [ 137.119147][ T5322] loop0: detected capacity change from 0 to 4096 [ 137.434300][ T5322] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 137.707767][ T5322] fs-verity: sha256 using implementation "sha256-avx2" [ 137.823015][ T5322] fs-verity (loop0, inode 16): fs-verity keyring is empty, rejecting signed file! [ 137.948548][ T4871] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 137.968514][ T5335] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.977604][ T5335] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.340446][ T4871] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 138.365000][ T4871] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 138.466445][ T5374] syz.4.292 uses obsolete (PF_INET,SOCK_PACKET) [ 138.548543][ T4871] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 138.575011][ T4871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.600898][ T4871] usb 6-1: Product: syz [ 138.626427][ T4871] usb 6-1: Manufacturer: syz [ 138.639771][ T4871] usb 6-1: SerialNumber: syz [ 138.669432][ T4871] usb 6-1: config 0 descriptor?? [ 138.688796][ T5354] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 138.702198][ T5354] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 138.729517][ T4871] usb 6-1: ucan: probing device on interface #0 [ 138.736478][ T4871] usb 6-1: ucan: invalid EP count (1) [ 138.758818][ T4871] usb 6-1: ucan: probe failed; try to update the device firmware [ 139.337706][ T5335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.377772][ T5385] loop6: detected capacity change from 0 to 1024 [ 139.426789][ T5335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.574689][ T155] hfsplus: b-tree write err: -5, ino 25 [ 139.594884][ T155] hfsplus: b-tree write err: -5, ino 4 [ 139.611540][ T155] hfsplus: b-tree write err: -5, ino 2 [ 140.367618][ T5335] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.389518][ T5335] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.402672][ T5335] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.415825][ T5335] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.665044][ T5354] netlink: 'syz.5.285': attribute type 3 has an invalid length. [ 140.754911][ T4871] usb 6-1: USB disconnect, device number 4 [ 140.836061][ T5399] loop5: detected capacity change from 0 to 512 [ 140.945976][ T5399] EXT4-fs (loop5): inline encryption not supported [ 140.986649][ T5399] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.060199][ T5399] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 141.100334][ T5399] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.300: bg 0: block 248: padding at end of block bitmap is not set [ 141.130390][ T5399] __quota_error: 58 callbacks suppressed [ 141.130408][ T5399] Quota error (device loop5): write_blk: dquota write failed [ 141.157310][ T5399] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 141.172981][ T5399] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.300: Failed to acquire dquot type 1 [ 141.218725][ T5399] EXT4-fs (loop5): 1 truncate cleaned up [ 141.231108][ T5399] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 141.831711][ T5444] loop6: detected capacity change from 0 to 164 [ 142.042169][ T5448] loop0: detected capacity change from 0 to 256 [ 142.331414][ T5452] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 142.374878][ T5452] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 142.543651][ T5459] gadgetfs: bound to dummy_udc driver [ 142.561229][ T5435] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.574004][ T5435] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.181965][ T5435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.252991][ T5435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.846991][ T5435] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.865959][ T5435] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.877198][ T5435] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.895238][ T5435] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.973004][ T5455] netlink: 'syz.3.318': attribute type 10 has an invalid length. [ 144.006301][ T5455] team0 (unregistering): Port device team_slave_0 removed [ 144.044451][ T5455] team0 (unregistering): Port device team_slave_1 removed [ 144.109266][ T5457] bridge0: port 3(syz_tun) entered blocking state [ 144.119063][ T5457] bridge0: port 3(syz_tun) entered disabled state [ 144.129501][ T5457] device syz_tun entered promiscuous mode [ 144.654622][ T5512] netlink: 64 bytes leftover after parsing attributes in process `syz.4.333'. [ 145.313395][ T5535] loop5: detected capacity change from 0 to 512 [ 145.432928][ T5535] EXT4-fs (loop5): Unrecognized mount option "defcontext=system_u" or missing value [ 146.010514][ T5565] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 147.267673][ T5558] loop5: detected capacity change from 0 to 32768 [ 147.358001][ T5587] input: syz0 as /devices/virtual/input/input8 [ 147.378895][ T5577] loop6: detected capacity change from 0 to 32768 [ 147.405785][ T5558] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.341 (5558) [ 147.494893][ T5577] XFS (loop6): Mounting V5 Filesystem [ 147.537514][ T5558] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 147.604290][ T5558] BTRFS info (device loop5): setting nodatacow, compression disabled [ 147.637123][ T5558] BTRFS info (device loop5): disabling tree log [ 147.663336][ T5558] BTRFS info (device loop5): max_inline at 0 [ 147.678546][ T5558] BTRFS info (device loop5): using free space tree [ 147.686272][ T5558] BTRFS info (device loop5): has skinny extents [ 147.734511][ T5577] XFS (loop6): Ending clean mount [ 147.784075][ T5607] netlink: 'syz.0.354': attribute type 16 has an invalid length. [ 147.800458][ T5577] XFS (loop6): Quotacheck needed: Please wait. [ 147.827610][ T5607] netlink: 'syz.0.354': attribute type 17 has an invalid length. [ 147.839733][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 147.856965][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 147.870334][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 147.886905][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 147.900441][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 147.912888][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 147.931875][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 147.950554][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 147.982969][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 147.996948][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 148.010587][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 148.024828][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 148.042875][ T5607] bridge0: port 3(syz_tun) entered blocking state [ 148.055315][ T5607] bridge0: port 3(syz_tun) entered forwarding state [ 148.154989][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.189223][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.228197][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.237406][ T5577] XFS (loop6): Quotacheck: Done. [ 148.259506][ T26] audit: type=1800 audit(1792041043.179:72): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.341" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 148.280492][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 148.341849][ T5633] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.358'. [ 148.375755][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.412608][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 148.479838][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 148.528773][ T5607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.591568][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready [ 148.788912][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.428075][ T26] audit: type=1326 audit(1792041044.339:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d636d559 code=0x7ffc0000 [ 149.502538][ T26] audit: type=1326 audit(1792041044.359:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d636d559 code=0x7ffc0000 [ 149.543370][ T26] audit: type=1326 audit(1792041044.359:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d636d559 code=0x7ffc0000 [ 149.598762][ T26] audit: type=1326 audit(1792041044.359:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc2d636d559 code=0x7ffc0000 [ 149.648928][ T26] audit: type=1326 audit(1792041044.399:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d636d559 code=0x7ffc0000 [ 149.777261][ T26] audit: type=1326 audit(1792041044.419:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d636d559 code=0x7ffc0000 [ 149.849143][ T26] audit: type=1326 audit(1792041044.419:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d636d559 code=0x7ffc0000 [ 149.884504][ T26] audit: type=1326 audit(1792041044.419:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc2d636d559 code=0x7ffc0000 [ 149.921114][ T26] audit: type=1326 audit(1792041044.419:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.4.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d636d559 code=0x7ffc0000 [ 150.075746][ T4916] XFS (loop6): Unmounting Filesystem [ 150.185356][ T5669] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 150.387206][ T5462] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 150.678561][ T5462] usb 6-1: Using ep0 maxpacket: 16 [ 150.852934][ T5462] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.870245][ T5462] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.894782][ T5462] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 150.898082][ T5702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.379'. [ 150.927961][ T5462] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 150.930364][ T5702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.379'. [ 150.969663][ T5702] device wlan0 entered promiscuous mode [ 150.972641][ T5462] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.006129][ T5462] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 151.029525][ T5462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.089407][ T5462] usb 6-1: config 0 descriptor?? [ 151.192032][ T5708] UBIFS error (pid: 5708): cannot open "ubi0_0", error -19 [ 151.192716][ T5708] UBIFS error (pid: 5708): cannot open "ubi0", error -19 [ 151.205617][ T5708] UBIFS error (pid: 5708): cannot open "ubi:0", error -19 [ 151.228513][ T5462] rc_core: IR keymap rc-hauppauge not found [ 151.249907][ T5462] Registered IR keymap rc-empty [ 151.269193][ T5462] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 151.341282][ T5462] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 151.390370][ T5462] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 151.456903][ T5462] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 151.499286][ T5665] loop5: detected capacity change from 0 to 2048 [ 151.516343][ T5462] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 151.578536][ T5462] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 151.615303][ T5665] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.638683][ T5462] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 151.658498][ T5665] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.718608][ T5462] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 151.778811][ T5462] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 151.827869][ T5737] loop6: detected capacity change from 0 to 2048 [ 151.836330][ T5462] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 151.899061][ T5462] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 151.925879][ T5737] loop6: p1 < > p3 [ 151.930890][ T5462] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 151.955233][ T5737] loop6: p3 size 134217728 extends beyond EOD, truncated [ 151.978634][ T5462] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 152.067138][ T5462] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 152.130354][ T5462] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 152.148436][ T5462] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 152.176746][ T5714] loop0: detected capacity change from 0 to 32768 [ 152.190073][ T5462] usb 6-1: USB disconnect, device number 5 [ 152.353683][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 152.376956][ T4973] udevd[4973]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 152.451462][ T5714] JBD2: Ignoring recovery information on journal [ 152.727194][ T5714] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 152.853362][ T5765] device macvlan2 entered promiscuous mode [ 152.863444][ T5765] bond1: (slave macvlan2): Opening slave failed [ 153.027829][ T5780] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.107834][ T5785] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 153.159104][ T5714] loop_set_status: loop0 () has still dirty pages (nrpages=7) [ 153.280540][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 153.346589][ T5796] Illegal XDP return value 4294967285, expect packet loss! [ 153.525465][ T5802] FAULT_INJECTION: forcing a failure. [ 153.525465][ T5802] name failslab, interval 1, probability 0, space 0, times 0 [ 153.554339][ T5802] CPU: 0 PID: 5802 Comm: syz.6.405 Not tainted syzkaller #0 [ 153.563611][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.576772][ T5802] Call Trace: [ 153.580758][ T5802] [ 153.584384][ T5802] dump_stack_lvl+0x188/0x250 [ 153.589537][ T5802] ? show_regs_print_info+0x20/0x20 [ 153.595384][ T5802] ? load_image+0x410/0x410 [ 153.600883][ T5802] ? __lock_acquire+0x7d40/0x7d40 [ 153.607646][ T5802] should_fail+0x383/0x4b0 [ 153.612720][ T5802] should_failslab+0x5/0x20 [ 153.618025][ T5802] slab_pre_alloc_hook+0x51/0xc0 [ 153.628241][ T5802] ? getname_kernel+0x56/0x2e0 [ 153.634799][ T5802] kmem_cache_alloc+0x3d/0x280 [ 153.641385][ T5802] getname_kernel+0x56/0x2e0 [ 153.647307][ T5802] kern_path+0x1f/0x190 [ 153.651927][ T5802] ovl_mount_dir_noesc+0x59/0x240 [ 153.659213][ T5802] ? ovl_mount_dir+0x15f/0x2b0 [ 153.666455][ T5802] ovl_mount_dir+0x184/0x2b0 [ 153.672086][ T5802] ovl_get_workdir+0x105/0x12a0 [ 153.677532][ T5802] ? do_raw_spin_unlock+0x11d/0x230 [ 153.684452][ T5802] ? ovl_get_upper+0x600/0x600 [ 153.689461][ T5802] ? ovl_inuse_trylock+0xb9/0xd0 [ 153.698190][ T5802] ? ovl_get_upper+0x456/0x600 [ 153.703831][ T5802] ? ovl_fill_super+0x42a0/0x42a0 [ 153.709993][ T5802] ovl_fill_super+0x1cd4/0x42a0 [ 153.717191][ T5802] ? ovl_mount+0x30/0x30 [ 153.723349][ T5802] ? __lock_acquire+0x7d40/0x7d40 [ 153.732398][ T5802] ? rwsem_write_trylock+0x135/0x1c0 [ 153.739338][ T5802] ? clear_nonspinnable+0x60/0x60 [ 153.747105][ T5802] ? __lock_acquire+0x7d40/0x7d40 [ 153.756151][ T5802] ? __rwlock_init+0x140/0x140 [ 153.763948][ T5802] ? strlcpy+0x83/0xc0 [ 153.770020][ T5802] ? free_anon_bdev+0x20/0x20 [ 153.775500][ T5802] ? ovl_mount+0x30/0x30 [ 153.783689][ T5802] mount_nodev+0x52/0xe0 [ 153.790105][ T5802] legacy_get_tree+0xe6/0x180 [ 153.796363][ T5802] ? virtio_fs_zero_page_range+0x120/0x120 [ 153.805901][ T5802] vfs_get_tree+0x88/0x270 [ 153.810832][ T5802] do_new_mount+0x247/0xa40 [ 153.816485][ T5802] __se_sys_mount+0x2e3/0x3d0 [ 153.821649][ T5802] ? __x64_sys_mount+0xc0/0xc0 [ 153.829414][ T5802] ? lockdep_hardirqs_on+0x94/0x140 [ 153.835448][ T5802] ? __x64_sys_mount+0x1c/0xc0 [ 153.840998][ T5802] do_syscall_64+0x4c/0xa0 [ 153.845567][ T5802] ? clear_bhb_loop+0x30/0x80 [ 153.850975][ T5802] ? clear_bhb_loop+0x30/0x80 [ 153.858222][ T5802] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.867895][ T5802] RIP: 0033:0x7fcfa1c9f559 [ 153.873404][ T5802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.898866][ T5802] RSP: 002b:00007fcf9fef7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 153.907422][ T5802] RAX: ffffffffffffffda RBX: 00007fcfa1f26fa0 RCX: 00007fcfa1c9f559 [ 153.918860][ T5802] RDX: 00002000000007c0 RSI: 0000200000000780 RDI: 0000000000000000 [ 153.928324][ T5802] RBP: 00007fcfa1d368b0 R08: 0000200000000800 R09: 0000000000000000 [ 153.939543][ T5802] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 153.950840][ T5802] R13: 00007fcfa1f27038 R14: 00007fcfa1f26fa0 R15: 00007ffc61d6ae38 [ 153.960110][ T5802] [ 154.009385][ T5802] overlayfs: failed to resolve './bus': -12 [ 154.588426][ T4872] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 154.819284][ T5826] Zero length message leads to an empty skb [ 154.838442][ T4872] usb 1-1: Using ep0 maxpacket: 8 [ 154.962258][ T4872] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 154.982940][ T4872] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.026174][ T4872] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.047849][ T4872] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.076095][ T4872] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.106931][ T4872] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.128598][ T4872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.421289][ T5831] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 155.477356][ T5831] overlayfs: failed to set xattr on upper [ 155.518153][ T5831] overlayfs: ...falling back to index=off,metacopy=off. [ 155.548522][ T4872] usb 1-1: usb_control_msg returned -32 [ 155.555010][ T4872] usbtmc 1-1:16.0: can't read capabilities [ 155.568863][ T5831] overlayfs: conflicting lowerdir path [ 155.838524][ T4306] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 155.903582][ T5837] rxe_eth0 speed is unknown, defaulting to 1000 [ 156.088403][ T4306] usb 7-1: Using ep0 maxpacket: 32 [ 156.258559][ T4306] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.280963][ T4306] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.292700][ T4306] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 156.304483][ T4306] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.337965][ T4306] usb 7-1: config 0 descriptor?? [ 156.838193][ T4306] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 156.849747][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 156.891390][ T4306] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 156.962489][ T4306] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 157.121761][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.133700][ T5844] ceph: No mds server is up or the cluster is laggy [ 157.148448][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.168719][ T5837] device bridge_slave_0 entered promiscuous mode [ 157.180804][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.190984][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.199145][ T4306] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 157.225353][ T5837] device bridge_slave_1 entered promiscuous mode [ 157.482922][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.565405][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.618924][ T4306] ft260 0003:0403:6030.0003: failed to retrieve status: -32, no wakeup [ 157.761839][ T5837] team0: Port device team_slave_0 added [ 157.778485][ T5462] Bluetooth: hci3: command 0x0409 tx timeout [ 157.801389][ T5837] team0: Port device team_slave_1 added [ 157.918841][ T4306] ft260 0003:0403:6030.0003: failed to reset I2C controller: -71 [ 157.961070][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.991735][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.136211][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.169740][ T5462] usb 1-1: USB disconnect, device number 10 [ 158.193352][ T4306] usb 7-1: USB disconnect, device number 3 [ 158.214425][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.269539][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.344818][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.694391][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.434'. [ 158.798902][ T5837] device hsr_slave_0 entered promiscuous mode [ 158.846837][ T5837] device hsr_slave_1 entered promiscuous mode [ 158.895022][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.929148][ T5837] Cannot create hsr debugfs directory [ 159.202565][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.436'. [ 159.854608][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 160.367041][ T5837] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 160.472538][ T5837] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 160.515358][ T5957] netlink: 64 bytes leftover after parsing attributes in process `syz.0.440'. [ 160.546594][ T5956] input: syz1 as /devices/virtual/input/input10 [ 160.578168][ T5957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.440'. [ 160.634052][ T5837] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 160.690951][ T5957] jffs2: notice: (5957) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 160.800913][ T5837] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 161.321530][ T5987] bond0: option arp_interval: invalid value (18446744073709551615) [ 161.371279][ T5987] bond0: option arp_interval: allowed values 0 - 2147483647 [ 161.406241][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.428790][ T4306] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 161.504732][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.535397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.582259][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.633963][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.664951][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.701124][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.710106][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.780028][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.828657][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.859044][ T4306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 161.884473][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.898324][ T4306] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.930216][ T4900] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.938662][ T4900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.962816][ T4306] usb 6-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 162.028714][ T4306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.042570][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.069745][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.098591][ T4306] usb 6-1: config 0 descriptor?? [ 162.105583][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 162.128697][ T5978] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.152041][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.198679][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.239464][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.352708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.386780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.433280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.468749][ T4306] usbhid 6-1:0.0: can't add hid device: -71 [ 162.475632][ T4306] usbhid: probe of 6-1:0.0 failed with error -71 [ 162.485408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.542333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.552968][ T4306] usb 6-1: USB disconnect, device number 6 [ 162.600135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.648501][ C0] net_ratelimit: 18 callbacks suppressed [ 162.725999][ T5990] loop0: detected capacity change from 0 to 32768 [ 162.966284][ T6009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.990922][ T26] kauditd_printk_skb: 209 callbacks suppressed [ 162.990937][ T26] audit: type=1800 audit(1792041057.909:291): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.448" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 163.141997][ T6022] loop6: detected capacity change from 0 to 64 [ 163.176073][ T4294] read_mapping_page failed! [ 163.218056][ T4294] ERROR: (device loop0): txCommit: [ 163.218056][ T4294] [ 163.309063][ T4294] ERROR: (device loop0): remounting filesystem as read-only [ 163.394019][ T4294] jfs_write_inode: jfs_commit_inode failed! [ 163.555980][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.585312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.607378][ T4294] read_mapping_page failed! [ 163.649661][ T4294] ERROR: (device loop0): txCommit: [ 163.649661][ T4294] [ 163.659701][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.672239][ T4294] jfs_write_inode: jfs_commit_inode failed! [ 163.768712][ T6032] hfs: node 4:3 still has 1 user(s)! [ 164.102364][ T4184] non-latin1 character 0x3ff found in JFS file name [ 164.163742][ T4184] mount with iocharset=utf8 to access [ 164.171101][ T4306] Bluetooth: hci3: command 0x0419 tx timeout [ 164.300806][ T4184] read_mapping_page failed! [ 164.307136][ T4184] ERROR: (device loop0): txCommit: [ 164.307136][ T4184] [ 164.401205][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.440147][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.457429][ T4184] ERROR: (device loop0): remounting filesystem as read-only [ 164.481077][ T6060] FAULT_INJECTION: forcing a failure. [ 164.481077][ T6060] name failslab, interval 1, probability 0, space 0, times 0 [ 164.556610][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.569917][ T6060] CPU: 0 PID: 6060 Comm: syz.5.462 Not tainted syzkaller #0 [ 164.578183][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.590244][ T6060] Call Trace: [ 164.594341][ T6060] [ 164.598554][ T6060] dump_stack_lvl+0x188/0x250 [ 164.603480][ T6060] ? show_regs_print_info+0x20/0x20 [ 164.609190][ T6060] ? load_image+0x410/0x410 [ 164.609280][ T6060] ? __might_sleep+0xf0/0xf0 [ 164.609304][ T6060] ? __lock_acquire+0x7d40/0x7d40 [ 164.627090][ T6060] should_fail+0x383/0x4b0 [ 164.632796][ T6060] should_failslab+0x5/0x20 [ 164.638269][ T6060] slab_pre_alloc_hook+0x51/0xc0 [ 164.644996][ T6060] ? security_inode_alloc+0x30/0x110 [ 164.651011][ T6060] kmem_cache_alloc+0x3d/0x280 [ 164.656661][ T6060] security_inode_alloc+0x30/0x110 [ 164.662438][ T6060] inode_init_always+0x8e5/0xc90 [ 164.662460][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.678040][ T6060] new_inode_pseudo+0x8e/0x210 [ 164.685133][ T6060] new_inode+0x25/0x1d0 [ 164.690573][ T6060] proc_pid_make_inode+0x20/0x1a0 [ 164.695921][ T6060] proc_pident_instantiate+0x69/0x2a0 [ 164.702309][ T6060] proc_pident_lookup+0x1cb/0x270 [ 164.708742][ T6060] __lookup_slow+0x29d/0x410 [ 164.715563][ T6060] ? lookup_one_len+0x2d0/0x2d0 [ 164.721170][ T6060] ? down_read+0x1aa/0x2e0 [ 164.728040][ T6060] lookup_slow+0x53/0x70 [ 164.733992][ T6060] walk_component+0x314/0x460 [ 164.739038][ T6060] link_path_walk+0x688/0xde0 [ 164.749458][ T6060] ? handle_lookup_down+0x130/0x130 [ 164.755084][ T6060] path_lookupat+0x83/0x420 [ 164.759837][ T6060] filename_lookup+0x21e/0x550 [ 164.759867][ T6060] ? __lock_acquire+0x7d40/0x7d40 [ 164.759896][ T6060] ? hashlen_string+0x110/0x110 [ 164.759929][ T6060] ? rcu_lock_release+0x20/0x20 [ 164.759956][ T6060] ? noop_direct_IO+0x10/0x10 [ 164.759983][ T6060] ? strncpy_from_user+0x1f4/0x350 [ 164.798502][ T6060] ? getname_flags+0x1f9/0x4f0 [ 164.798543][ T6060] user_path_at_empty+0x40/0x190 [ 164.798572][ T6060] __se_sys_mount+0x2a4/0x3d0 [ 164.798604][ T6060] ? __x64_sys_mount+0xc0/0xc0 [ 164.804597][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.810810][ T6060] ? lockdep_hardirqs_on+0x94/0x140 [ 164.810849][ T6060] ? __x64_sys_mount+0x1c/0xc0 [ 164.810875][ T6060] do_syscall_64+0x4c/0xa0 [ 164.810905][ T6060] ? clear_bhb_loop+0x30/0x80 [ 164.810927][ T6060] ? clear_bhb_loop+0x30/0x80 [ 164.810952][ T6060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.810977][ T6060] RIP: 0033:0x7f0b1c295559 [ 164.833044][ T6060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.845886][ T6060] RSP: 002b:00007f0b1a4ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 164.845928][ T6060] RAX: ffffffffffffffda RBX: 00007f0b1c51cfa0 RCX: 00007f0b1c295559 [ 164.845946][ T6060] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000000 [ 164.845961][ T6060] RBP: 00007f0b1c32c8b0 R08: 0000000000000000 R09: 0000000000000000 [ 164.859056][ T6060] R10: 00000000002504e0 R11: 0000000000000246 R12: 0000000000000000 [ 164.859087][ T6060] R13: 00007f0b1c51d038 R14: 00007f0b1c51cfa0 R15: 00007ffddba963d8 [ 164.859212][ T6060] [ 165.060541][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.122489][ T5837] device veth0_vlan entered promiscuous mode [ 165.201194][ T5837] device veth1_vlan entered promiscuous mode [ 165.423083][ T6015] bridge0: port 3(syz_tun) entered disabled state [ 165.483181][ T6015] device syz_tun left promiscuous mode [ 165.502924][ T6015] bridge0: port 3(syz_tun) entered disabled state [ 165.588572][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.619205][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.660706][ T5837] device veth0_macvtap entered promiscuous mode [ 165.751546][ T5837] device veth1_macvtap entered promiscuous mode [ 165.799979][ T6015] ------------[ cut here ]------------ [ 165.807754][ T6015] kernel BUG at fs/jfs/inode.c:175! [ 165.822039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.863247][ T6015] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 165.865276][ C1] virtqueue callback for ffff8880236dc600 (ffffffff85497fd0) [ 165.870800][ T6015] CPU: 0 PID: 6015 Comm: syz.0.448 Not tainted syzkaller #0 [ 165.880605][ C1] No more buffers in queue [ 165.893193][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.893213][ T6015] RIP: 0010:jfs_evict_inode+0x420/0x430 [ 165.893247][ T6015] Code: f2 fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 6a 6a f2 fe e9 16 fe ff ff e8 70 25 ad fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 41 54 [ 165.899308][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 165.911154][ T6015] RSP: 0018:ffffc900034cf728 EFLAGS: 00010293 [ 165.911184][ T6015] RAX: ffffffff82cbfdf0 RBX: ffff88805e53d770 RCX: ffff88801fb35940 [ 165.911199][ T6015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805e53d770 [ 165.911213][ T6015] RBP: 0000000000000001 R08: ffffffff91015207 R09: 1ffffffff2202a40 [ 165.917129][ C1] No more buffers in queue [ 165.944180][ T6015] R10: dffffc0000000000 R11: fffffbfff2202a41 R12: dffffc0000000000 [ 165.944207][ T6015] R13: dffffc0000000000 R14: ffff88805e53d3f8 R15: ffff88805e53d798 [ 165.944222][ T6015] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 165.944240][ T6015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.952025][ C1] tcp_in_window: START [ 165.959843][ T6015] CR2: 00007f4ce8091700 CR3: 00000000509ae000 CR4: 00000000003506f0 [ 165.959873][ T6015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.959885][ T6015] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.959899][ T6015] Call Trace: [ 165.959910][ T6015] [ 165.970702][ C1] tcp_in_window: [ 165.979827][ T6015] ? jfs_write_inode+0x220/0x220 [ 165.989561][ C1] seq=3779702674 ack=2129383884+(0) sack=2129383884+(0) win=23088 end=3779702675 [ 165.997842][ T6015] evict+0x4b6/0x8b0 [ 166.008418][ C1] tcp_in_window: sender end=3779702674 maxend=3782827794 maxwin=2955264 scale=7 receiver end=2129383884 maxend=2132339148 maxwin=3144832 scale=7 [ 166.019693][ T6015] ? proc_nr_inodes+0x320/0x320 [ 166.019741][ T6015] ? do_raw_spin_unlock+0x11d/0x230 [ 166.029987][ C1] tcp_in_window: [ 166.039223][ T6015] evict_inodes+0x650/0x6e0 [ 166.039265][ T6015] ? clear_inode+0x150/0x150 [ 166.046141][ C1] seq=3779702674 ack=2129383884+(0) sack=2129383884+(0) win=23088 end=3779702675 [ 166.054481][ T6015] generic_shutdown_super+0x93/0x300 [ 166.054516][ T6015] kill_block_super+0x7c/0xe0 [ 166.064025][ C1] tcp_in_window: sender end=3779702674 maxend=3782827794 maxwin=2955264 scale=7 receiver end=2129383884 maxend=2132339148 maxwin=3144832 scale=7 [ 166.073063][ T6015] deactivate_locked_super+0x93/0xf0 [ 166.073100][ T6015] cleanup_mnt+0x426/0x4d0 [ 166.078123][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 166.081183][ T6015] task_work_run+0x125/0x1a0 [ 166.081214][ T6015] do_exit+0x635/0x2110 [ 166.081237][ T6015] ? put_task_struct+0x80/0x80 [ 166.086025][ C1] tcp_in_window: res=1 sender end=3779702675 maxend=3782827794 maxwin=2955264 receiver end=2129383884 maxend=2132339148 maxwin=3144832 [ 166.092643][ T6015] do_group_exit+0x12c/0x2f0 [ 166.092675][ T6015] ? lockdep_hardirqs_on+0x94/0x140 [ 166.092686][ C1] virtqueue callback for ffff8880236dc600 (ffffffff85497fd0) [ 166.092702][ T6015] get_signal+0x7eb/0x12e0 [ 166.092730][ T6015] arch_do_signal_or_restart+0xe6/0x12a0 [ 166.103918][ C1] tcp_conntracks: [ 166.108548][ T6015] ? _raw_spin_unlock+0x40/0x40 [ 166.108699][ T6015] ? force_sig_info_to_task+0x318/0x3c0 [ 166.131714][ C1] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 166.132983][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888025814198 is addr:fe80::a8aa:aaff:feaa:aaaa for cmd:2 at entry:ffff888074397a00 [ 166.137221][ T6015] ? get_sigframe_size+0x10/0x10 [ 166.137257][ T6015] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 166.143293][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888025814198 is addr:172.20.20.170 for cmd:2 at entry:ffff888074397380 [ 166.148227][ T6015] ? exit_to_user_mode_loop+0x3b/0x130 [ 166.154570][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888019da4198 is addr:fe80::39 for cmd:0 at entry:ffff88806107e900 [ 166.160212][ T6015] exit_to_user_mode_loop+0x9e/0x130 [ 166.160242][ T6015] exit_to_user_mode_prepare+0xee/0x180 [ 166.171758][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888019da4198 is addr:fe80::a8aa:aaff:feaa:aa39 for cmd:0 at entry:ffff88805b45c780 [ 166.179076][ T6015] irqentry_exit_to_user_mode+0x5/0x30 [ 166.179110][ T6015] exc_page_fault+0x88/0x100 [ 166.179136][ T6015] asm_exc_page_fault+0x22/0x30 [ 166.184991][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888019da4198 is addr:fe80::a8aa:aaff:feaa:aa38 for cmd:0 at entry:ffff88805ecc3580 [ 166.203356][ T6015] RIP: 0033:0x0 [ 166.203384][ T6015] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 166.203395][ T6015] RSP: 002b:0000200000000448 EFLAGS: 00010217 [ 166.203414][ T6015] RAX: 0000000000000000 RBX: 00007f4b438f7fa0 RCX: 00007f4b43670559 [ 166.212020][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888019da4198 is addr:172.20.20.58 for cmd:0 at entry:ffff88805b40e300 [ 166.217741][ T6015] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000002000000 [ 166.228585][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888019da4198 is addr:fe80::3a for cmd:0 at entry:ffff88805b40e480 [ 166.234996][ T6015] RBP: 00007f4b437078b0 R08: 0000000000000000 R09: 0000000000000000 [ 166.240185][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888019da4198 is addr:172.20.20.59 for cmd:0 at entry:ffff88805b40e600 [ 166.246951][ T6015] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 166.262378][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888019da4198 is addr:fe80::3b for cmd:0 at entry:ffff88805b458280 [ 166.268802][ T6015] R13: 00007f4b438f8038 R14: 00007f4b438f7fa0 R15: 00007ffc7b322408 [ 166.268836][ T6015] [ 166.268856][ T6015] Modules linked in: [ 166.318315][ C1] virtqueue callback for ffff8880236dc600 (ffffffff85497fd0) [ 166.604038][ C0] virtqueue callback for ffff888146c95800 (ffffffff84450960) [ 166.611561][ C1] nf_conntrack: normal packet for ffff88807c580480 [ 166.621179][ C0] virtqueue interrupt with no work for ffff888146c95700 [ 166.625987][ C1] tcp_in_window: START [ 166.631019][ C0] virtqueue interrupt with no work for ffff888146c95600 [ 166.631164][ T144] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::a8aa:aaff:feaa:aa3a in wq:ffff888019da4198 [ 166.639429][ C1] tcp_in_window: [ 166.650585][ T4270] Added buffer head 0 to ffff888146c95800 [ 166.656970][ C1] seq=2129383884 ack=3779702675+(0) sack=3779702675+(0) win=24569 end=2129383884 [ 166.717128][ C1] tcp_in_window: sender end=2129383884 maxend=2132339148 maxwin=3144832 scale=7 receiver end=3779702675 maxend=3782827794 maxwin=2955264 scale=7 [ 166.734766][ C1] tcp_in_window: [ 166.734787][ C1] seq=2129383884 ack=3779702675+(0) sack=3779702675+(0) win=24569 end=2129383884 [ 166.752932][ C1] tcp_in_window: sender end=2129383884 maxend=2132339148 maxwin=3144832 scale=7 receiver end=3779702675 maxend=3782827794 maxwin=2955264 scale=7 [ 166.759162][ T6100] kcov: kcov_start: t = ffff88802b708000, size = 524288, area = ffffc900133a9000 [ 166.771738][ C1] virtqueue callback for ffff8880236dc600 (ffffffff85497fd0) [ 166.791980][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 166.799791][ C1] tcp_in_window: res=1 sender end=2129383884 maxend=2132339148 maxwin=3144832 receiver end=3779702675 maxend=3782847507 maxwin=2955264 [ 166.820798][ C1] tcp_conntracks: [ 166.820820][ C1] syn=0 ack=1 fin=0 rst=0 old=4 new=5 [ 166.832057][ C1] No more buffers in queue [ 166.839588][ C1] eth0: xmit ffff8880786c1140 42:01:0a:80:00:01 [ 166.847243][ C1] Added buffer head 0 to ffff8880236dc700 [ 166.847276][ C1] virtqueue callback for ffff8880236dc700 (ffffffff854980c0) [ 166.867633][ C1] Sent skb ffff8880786c1140 [ 166.874264][ C1] No more buffers in queue [ 166.880119][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 166.888920][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 166.896167][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 166.904454][ C1] No more buffers in queue [ 166.909298][ C1] tcp_in_window: START [ 166.914244][ C1] tcp_in_window: [ 166.914264][ C1] seq=3779702674 ack=2129383884+(0) sack=2129383884+(0) win=23088 end=3779702675 [ 166.932844][ C1] tcp_in_window: sender end=3779702675 maxend=3782847507 maxwin=2955264 scale=7 receiver end=2129383884 maxend=2132339148 maxwin=3144832 scale=7 [ 166.952923][ C1] tcp_in_window: [ 166.952944][ C1] seq=3779702674 ack=2129383884+(0) sack=2129383884+(0) win=23088 end=3779702675 [ 166.969879][ C1] tcp_in_window: sender end=3779702675 maxend=3782847507 maxwin=2955264 scale=7 receiver end=2129383884 maxend=2132339148 maxwin=3144832 scale=7 [ 166.990100][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 166.996969][ C1] tcp_in_window: res=1 sender end=3779702675 maxend=3782847507 maxwin=2955264 receiver end=2129383884 maxend=2132339148 maxwin=3144832 [ 167.016813][ C1] tcp_conntracks: [ 167.016833][ C1] syn=0 ack=1 fin=1 rst=0 old=5 new=6 [ 167.029339][ C1] tcp_in_window: START [ 167.033639][ C1] tcp_in_window: [ 167.033658][ C1] seq=3779702674 ack=2129383884+(0) sack=2129383884+(0) win=23088 end=3779702675 [ 167.049538][ C1] tcp_in_window: sender end=3779702675 maxend=3782847507 maxwin=2955264 scale=7 receiver end=2129383884 maxend=2132339148 maxwin=3144832 scale=7 [ 167.067047][ C1] tcp_in_window: [ 167.067067][ C1] seq=3779702674 ack=2129383884+(0) sack=2129383884+(0) win=23088 end=3779702675 [ 167.084693][ C1] tcp_in_window: sender end=3779702675 maxend=3782847507 maxwin=2955264 scale=7 receiver end=2129383884 maxend=2132339148 maxwin=3144832 scale=7 [ 167.084711][ T6097] kcov: kcov_task_exit: t = ffff88802c589dc0, kcov->t = ffff88802c589dc0 [ 167.084739][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 167.122801][ C1] tcp_in_window: res=1 sender end=3779702675 maxend=3782847507 maxwin=2955264 receiver end=2129383884 maxend=2132339148 maxwin=3144832 [ 167.139785][ C1] tcp_conntracks: [ 167.139806][ C1] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 167.152592][ C1] tcp_in_window: START [ 167.157020][ C1] tcp_in_window: [ 167.157040][ C1] seq=3779702674 ack=2129383884+(0) sack=2129383884+(0) win=23088 end=3779702675 [ 167.163617][ T6100] kcov: kcov_task_exit: t = ffff88802b708000, kcov->t = ffff88802b708000 [ 167.172616][ C1] tcp_in_window: sender end=3779702675 maxend=3782847507 maxwin=2955264 scale=7 receiver end=2129383884 maxend=2132339148 maxwin=3144832 scale=7 [ 167.200890][ C1] tcp_in_window: [ 167.200911][ C1] seq=3779702674 ack=2129383884+(0) sack=2129383884+(0) win=23088 end=3779702675 [ 167.216229][ C1] tcp_in_window: sender end=3779702675 maxend=3782847507 maxwin=2955264 scale=7 receiver end=2129383884 maxend=2132339148 maxwin=3144832 scale=7 [ 167.218415][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888019da4198 is addr:fe80::a8aa:aaff:feaa:aa3a for cmd:0 at entry:ffff88805b416900 [ 167.237791][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 167.264478][ C1] tcp_in_window: res=1 sender end=3779702675 maxend=3782847507 maxwin=2955264 receiver end=2129383884 maxend=2132339148 maxwin=3144832 [ 167.287767][ C1] tcp_conntracks: [ 167.287786][ C1] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 167.299187][ C1] nf_conntrack: normal packet for ffff88807c580480 [ 167.305928][ C1] tcp_in_window: START [ 167.311955][ C1] tcp_in_window: [ 167.311970][ C1] seq=2129383884 ack=3779702675+(0) sack=3779702675+(0) win=24569 end=2129383884 [ 167.328507][ C1] tcp_in_window: sender end=2129383884 maxend=2132339148 maxwin=3144832 scale=7 receiver end=3779702675 maxend=3782847507 maxwin=2955264 scale=7 [ 167.349195][ C1] tcp_in_window: [ 167.349210][ C1] seq=2129383884 ack=3779702675+(0) sack=3779702675+(0) win=24569 end=2129383884 [ 167.368790][ C1] tcp_in_window: sender end=2129383884 maxend=2132339148 maxwin=3144832 scale=7 receiver end=3779702675 maxend=3782847507 maxwin=2955264 scale=7 [ 167.387220][ C1] tcp_in_window: I=1 II=1 III=1 IV=1 [ 167.393642][ C1] tcp_in_window: res=1 sender end=2129383884 maxend=2132339148 maxwin=3144832 receiver end=3779702675 maxend=3782847507 maxwin=2955264 [ 167.412586][ C1] tcp_conntracks: [ 167.412601][ C1] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 167.424624][ C1] No more buffers in queue [ 167.430816][ C1] eth0: xmit ffff8880786c1b40 42:01:0a:80:00:01 [ 167.438809][ C1] Added buffer head 0 to ffff8880236dc700 [ 167.438843][ C1] virtqueue callback for ffff8880236dc700 (ffffffff854980c0) [ 167.460558][ C1] Sent skb ffff8880786c1b40 [ 167.467313][ C1] No more buffers in queue [ 167.474204][ C1] No more buffers in queue [ 167.480200][ C1] No more buffers in queue [ 167.488685][ T3518] sd 0:0:1:0: cmd ffff888024844928 CDB: 0x2a [ 167.490309][ T6015] ---[ end trace 74e4076cae15f935 ]--- [ 167.496426][ T3518] Added buffer head 53 to ffff88801f7ca700 [ 167.515246][ T6015] RIP: 0010:jfs_evict_inode+0x420/0x430 [ 167.518504][ T4270] nf_conntrack: normal packet for ffff88807c581080 [ 167.522713][ C1] virtqueue callback for ffff88801f7ca700 (ffffffff8506e140) [ 167.540203][ C1] sd 0:0:1:0: cmd ffff888024844928 response 0 status 0x0 sense_len 0 [ 167.549508][ C1] No more buffers in queue [ 167.554998][ T4274] nf_conntrack: new packet for ffff888076d5fc80 [ 167.556099][ T6101] kcov: kcov_start: t = ffff888074e53b80, size = 524288, area = ffffc9000df99000 [ 167.562616][ T4274] nf_nat: Already setup manip DST for ct ffff888076d5fc80 (status bits 0x188) [ 167.584368][ T4274] nf_nat: Already setup manip SRC for ct ffff888076d5fc80 (status bits 0x188) [ 167.594373][ T6102] kcov: kcov_start: t = ffff88801eb99dc0, size = 524288, area = ffffc9000e79b000 [ 167.603970][ C0] virtqueue callback for ffff888146c95800 (ffffffff84450960) [ 167.614279][ C0] virtqueue interrupt with no work for ffff888146c95700 [ 167.618499][ T6015] Code: f2 fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 6a 6a f2 fe e9 16 fe ff ff e8 70 25 ad fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 41 54 [ 167.622563][ C0] virtqueue interrupt with no work for ffff888146c95600 [ 167.658433][ T6015] RSP: 0018:ffffc900034cf728 EFLAGS: 00010293 [ 167.661095][ T4270] Added buffer head 0 to ffff888146c95800 [ 167.678028][ T6015] RAX: ffffffff82cbfdf0 RBX: ffff88805e53d770 RCX: ffff88801fb35940 [ 167.689033][ T144] macsec0: bond_netdev_event received NETDEV_CHANGE [ 167.696542][ T144] net macsec0: siw: event 4 [ 167.702249][ T6015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805e53d770 [ 167.714030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.726237][ T6015] RBP: 0000000000000001 R08: ffffffff91015207 R09: 1ffffffff2202a40 [ 167.747743][ T6015] R10: dffffc0000000000 R11: fffffbfff2202a41 R12: dffffc0000000000 [ 167.750957][ T4171] nf_conntrack: normal packet for ffff88807c580480 [ 167.759163][ T144] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::a8aa:aaff:feaa:aa3b in wq:ffff888019da4198 [ 167.785543][ T4171] tcp_in_window: START [ 167.788470][ T6015] R13: dffffc0000000000 R14: ffff88805e53d3f8 R15: ffff88805e53d798 [ 167.790702][ T4171] tcp_in_window: [ 167.801104][ T4171] seq=2129383884 ack=3779702675+(0) sack=3779702675+(0) win=24569 end=2129383884 [ 167.808622][ T6015] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 167.820064][ T4171] tcp_in_window: sender end=2129383884 maxend=2132339148 maxwin=3144832 scale=7 receiver end=3779702675 maxend=3782847507 maxwin=2955264 scale=7 [ 167.820103][ T4171] tcp_in_window: [ 167.820111][ T4171] seq=2129383884 ack=3779702675+(0) sack=3779702675+(0) win=24569 end=2129383884 [ 167.820141][ T4171] tcp_in_window: sender end=2129383884 maxend=2132339148 maxwin=3144832 scale=7 receiver end=3779702675 maxend=3782847507 maxwin=2955264 scale=7 [ 167.839972][ T5837] Insert table=255 ac14143c/32 [ 167.855886][ T4171] tcp_in_window: I=1 II=1 III=1 IV=1 [ 167.855913][ T4171] tcp_in_window: res=1 sender end=2129383884 maxend=2132339148 maxwin=3144832 receiver end=3779702675 maxend=3782847507 maxwin=2955264 [ 167.872078][ T5837] In tnode_resize ffff88806142b020 inflate_threshold=50 threshold=25 [ 167.872749][ T4171] tcp_conntracks: [ 167.898479][ T6015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.901292][ T4171] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 167.918718][ T6015] CR2: 0000001b32723ffc CR3: 0000000023940000 CR4: 00000000003506e0 [ 167.936452][ T5837] In tnode_resize ffff888057d1ef20 inflate_threshold=50 threshold=25 [ 167.948538][ T6015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 167.959736][ T5837] In tnode_resize ffff888074261b20 inflate_threshold=50 threshold=25 [ 167.988538][ T6015] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 167.998944][ T5837] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:172.20.20.60 in wq:ffff888019da4198 [ 168.012545][ T6015] Kernel panic - not syncing: Fatal exception [ 168.037589][ T6015] Kernel Offset: disabled [ 168.047774][ T6015] Rebooting in 86400 seconds..