last executing test programs: 1m8.837452824s ago: executing program 2 (id=354): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') pread64(r3, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m4.802863932s ago: executing program 2 (id=380): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, 0x0, 0x1) 1m4.613181617s ago: executing program 2 (id=383): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xbabd}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4) 1m4.49579275s ago: executing program 2 (id=384): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1395439, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m3.775486417s ago: executing program 2 (id=385): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x17e}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81c", 0x8b}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000a00)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836", 0x6d}], 0x1) write(r0, &(0x7f0000000e00)="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", 0x51f) 1m1.715957127s ago: executing program 2 (id=405): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, 0x0, 0x1) 1m1.61205344s ago: executing program 32 (id=405): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, 0x0, 0x1) 1.834536895s ago: executing program 4 (id=1108): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000180000032dbd7000ffdbdf2502201000fd04ff03000bb40008001e00d703000006001c004e2300000800060009000000"], 0x34}}, 0x8084) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r3, 0x100000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) unshare(0x2c020400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008", @ANYRESOCT=r8, @ANYRES16=r7, @ANYRESHEX=r6, @ANYBLOB="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", @ANYRES16], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) listen(r0, 0x1) 1.666238189s ago: executing program 1 (id=1113): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r3], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINK={0x8, 0x5, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.480948534s ago: executing program 3 (id=1115): syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6027843500140600fe800000000000000000000000000000000000000000000000aa"], 0x0) 1.454204425s ago: executing program 1 (id=1117): r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0xffa4, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x17}, 0x5000) 1.375518367s ago: executing program 3 (id=1118): socket$inet6(0xa, 0x2, 0x0) pipe2$9p(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x8080) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010003904000000140000000000000010", @ANYRES32=r4, @ANYBLOB="01980600000000001800128008000100677265000c0002800800"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f00000013c0)="4a7dc0196606c227bca8ee165d73ac36f2ad2ed477", 0x15, 0x24044801, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1.347939827s ago: executing program 0 (id=1119): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000180)=0xfd37) 1.317738788s ago: executing program 3 (id=1120): r0 = semget$private(0x0, 0x4, 0x29b) semctl$GETNCNT(r0, 0x3, 0xe, 0x0) 1.286471438s ago: executing program 5 (id=1121): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='net/ptype\x00') read$FUSE(r1, &(0x7f0000001840)={0x2020}, 0x2020) 1.23542924s ago: executing program 3 (id=1122): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xf805, 0x800, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, 0x0, 0x0) 1.23523967s ago: executing program 5 (id=1123): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c7, &(0x7f0000002d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x5d) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, 0xfffffffffffffffe) 1.2350336s ago: executing program 0 (id=1124): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0xff}, 0x1c, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000000000002900000034000000010000000000000014"], 0x30}}], 0x1, 0xff14) 723.530642ms ago: executing program 5 (id=1125): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x801404, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xae4d2f8ed3bfc611) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) setuid(0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffd) 700.314633ms ago: executing program 0 (id=1126): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000000740)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x800, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000001c0), &(0x7f00000003c0), 0x2, 0x3) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 699.769103ms ago: executing program 4 (id=1127): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PPPIOCGL2TPSTATS(r2, 0x80047453, 0xffffffffffffffff) 591.400875ms ago: executing program 4 (id=1128): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r3], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINK={0x8, 0x5, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 525.790857ms ago: executing program 1 (id=1129): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0xd33, 0x7}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 410.30839ms ago: executing program 0 (id=1130): socket$inet6(0xa, 0x2, 0x0) pipe2$9p(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x8080) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010003904000000140000000000000010", @ANYRES32=r4, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f00000013c0)="4a7dc0196606c227bca8ee165d73ac36f2ad2ed477", 0x15, 0x24044801, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 329.846962ms ago: executing program 5 (id=1131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400000079a183199eb81c0000bec846f75861179f1f320c7c4366c6b4f51ac332d1b80b9122226befea479a621e7c38bad723ffee73172e0a4e9d32238aea313355d34f48931cf3f2844f3ec9cf3f0f8fce4bcf3cc552e110fb7c17ea0abcc7693009b018cff032742a65db", @ANYRES16=r1, @ANYBLOB="0500000000", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0xcf34, @default, 0x208a, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x4000000) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, 0x0}}], 0x1, 0x200880d8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 289.219863ms ago: executing program 1 (id=1132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1], 0x1c8}}, 0x0) 268.951703ms ago: executing program 0 (id=1133): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x7c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x74b9c7924d4830a3}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 171.579016ms ago: executing program 4 (id=1134): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 145.787926ms ago: executing program 5 (id=1135): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x20000400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) 120.865277ms ago: executing program 1 (id=1136): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) futex(&(0x7f0000000200), 0x6, 0x0, 0x0, 0x0, 0x34fffffd) 112.303287ms ago: executing program 3 (id=1137): timer_create(0x8, &(0x7f0000000080)={0x0, 0x7, 0x0, @thr={0x0, 0x0}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x68) 54.806739ms ago: executing program 5 (id=1138): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000180000032dbd7000ffdbdf2502201000fd04ff03000bb40008001e00d703000006001c004e2300000800060009000000"], 0x34}}, 0x8084) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r3, 0x100000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) unshare(0x2c020400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008", @ANYRESOCT=r7, @ANYRES16=r6, @ANYRESHEX=r5, @ANYBLOB="ff03242d522c10a58bb86acd0700c7304080a89c1202dd28b1c912a370fcb91bf5006a59c5ae5c64274115695a851e189dec98f1ed947122671d82c1049ddd286370d5291ecc968638dfa14bbff1522d84522a4b6b20a999ae179e1dd98947be986b2672c2d2de3ff18cf7593eabb3be8dcaf273e0a0ef38f6ae7dbfe851631cea0c2d91dcdcf5f5d6627acb9a594c60414270e3a721b2f4e24671383e983c3306ef7d6630cd18a9e7da7d696cb11ea503da501daebb12dce15d35086e978b866f48c66da843d901c25cc388473915778751da9d6da6d3cd36677dade2742af3a90124d56a963d029f61596aacea89e245da9fefa5ea181554ffff822aeb70dc98a81afc0dbf7e35c3f65e89fe3a7ac89baaae4e231019c4e9cf3d041ec545af59129e7c0e8eb4c4c6b5dccbc8cc3f4e0c11bada5fcf117a448e48428c25c363b13dd4f84801f7e965d76f1f2b9da3353959c2aa311f6473a36b25290203143888c91e77d46131dbbab903603fd200cd34956e06c280fe3af2d9f82afd415f8cf140edc1166e13fb2ff7fa22ea17340c809292f4178e939c911caae24ccd24398755cda617bc834644ca12122a706cfece39a120198bbe5bf3b4ed70fbbc97219f605540b6bf6c6d728be3171beb684ce92ba4fb19a37ab0864e32ea4ef5da4e696b3dbf7553991ef7370f27899f1da8f10f1d198b399367ca71268c12222341f604d342576e8bd870d2b5ef3eed8e8829ce0bef0a7bf1616d4b0ed1d8274f96eaf0637fe98fead614e7755da98833ec66878d003b971dd98c8ea65579f9433f9401812b019f1a504fcf674b2d48cdf837a3aae0e516a89d09a86e4a807161a2395d8614d742c4f02b0d382c29c93354b93165317ab18ae2a5cd5c745cf9edf5cd9eef34b41ee5257c074252b01b59fc798932db5687917b18b1b8ffc0c73f977d55bcb1c1ad14cb7c336869d39ffaa88cb2a139c6c056325ee3e7eb9c712f0569f4ac63f3f7cbafe8eb0e2b1caf7a24ec92d435e0a6f8621bef4bcc687f08535817bc81d70f995013011acc449b551c91da4ee4e028477b64686f4ec0c6d224986f764ee6a4e27b4148db933d30c7271b462282fe6a4a6c36a6db2486c974fdd0f03bb433e37cb3be30d3560bee9fd7e8c48dd025bc5c213e919458d2d47cdced8a5cf8977899bc3be5f8533f02db881933f127151ab56e504f5191379d2466a051a0b8a0634c6b9467326d85fa39fd4de7aba925f006aec0691257f26e788c6757ae74c02f755098819924409c47fa0687794e03c6992ab4c449ce78737f0b3a4d827adc4d71f75388d1e49d63fd78f03f00eed02520b737a15d6a6de7d88372ab2a759af89c11eb614327bd9c3e639ad8fa6ee4f132bd88e0160c6c7b3b6b65d953eba4f3a1275a161236e39c8b88e5eb0bd40f6aac2a6dbee3679a69d4dc715f8165a1646e8c46767b99be2cc4a05d3a908fdaa400d6302eb9d64fd55266887186d8416ad7bdf71abdf710ee155d2975eb5557ad940302f01b224be63d084225830223bedb53584db91ef7ef7d6eeb0ba3e8312be0642e62720a756344d18ded754996a0f32641053e907fc5254e34ac40aa3391c5b9b7a3380b94d49123edb067953910c71a9535c6bce0255bdf13f458ea0bdd0901de3ed7121d83dbdbfc88b37bee1e17e9fa1c107617466cb6afe42d689085ea7a9fc1d35155ff0637d67654d73195164cc56fce8634a03c91b5d7dca42624db41de48d5a020ab910b028a0caf8dca17aec5cb33c627c678b4f597b5a973356eb9d91216d2fe233408dda29ccc812436285ed528b6069412618f13984826f796cc6f2d62170aed322e95099e8387a554e8c23e5ad585caf93ef85da7677e3acdf3ad43e6267618416e74e6f6c364f0fda7041dbd60bda002cee3910a642b6b3a40bcc89c7ae5ca1315dd6159898c14a621ac09f5af3b3c8a6017af6f73b3e10c2acc1d2ac45af3c3f63e7061738eb04584ea8af944f933ac79e87a808d52953105ac2a8e99905d01496970ecef63a49a44e6d7921615f90cf50fedafc896a38c67384bae48143cad0d08509ccdcbdcf17fe2d22f584c8efc531f82207ac83843d6b5d8c7c0f5ad2da3e9634b9dd39b7573c3786d163c68a598937bd9107526f4cb730f9aab3aa6d2b202781192f7e42cc242aaf7b435fb9b2448dd916cf2a2db6dcabb3f959edf18840cb9883240c209822db3551fb44951cd0690788274b962ddc8d84ac651c1355e184c484b5a1f61270abf79c9c301a0275a7fba052d101b6a65e78557c9927d742d64f7abc899f780b738615aa7a96b714f6df1332e8cebd65065e045848da213d19e88b1de8a9e04448a143ab36f50ec6b2ac6b82123b3487506ad452a363cee9f6c7da44c2de98a53664986880dcbed540c581e1a4309c9a759e2077a59ca99e38437456889c9cd6c77dc2d0d398be1ba48fad05f9196a8221bddc32ddeb2e90386175a8a9053d80c7c94a7e6508c4198414d577adc9d54b29a8a8b991844a22046f7c72e8c10eee88486b1f2a75c819730e0a217e25fcc8315fc4cb43c32729b9cb5c20108eea1dd98427436db70cd5be85daf571b04e7ca035375cb46545357123f054d8c6828a8fc9f728cca762bf5cdf6bb81c9d93b3a219177ecf70a7ecaf64c3b2964397a408d9e8becdbf30c87c5ac1da35e6667ae19506c48d9d8007aedf178d88275ad15ab3b660f7ecb9b70780506ecab7e4c482ab08a52f4dec4d262ed2ba91ecab76632666ae52c041f80a9d0a80f866da652efe02e509c22a94fae96e432c165b5d39d081d4305b9e24952f8ea2775b396ea963b3620d12fc9521bbc8980a51681331c5fd6f7d9579b64841369efbc95ff029a152404e899f6b18531b1fc1521842b44b1a084a60e5390d00e8d6abaf3483a96cc9aee9fb565d134feac7f0961419fb36e49dbb08f51f4bb167efb44dfa479a4593722637f5931a786314acd8fc860371990de71dee8cf3023b52c4258dc3742a7da195e7c78a3075fed9fae8b1ce531d5c773881b525c5b633fde05d103367f233d6a045fffc60ff8ede0ace1941a033904b599a6de91f37065313b603d8660718d2845dde3e7b8c360264dd2880bc1f4748cf21c38448c671b3cc589309feb892ffd63a0328477559941070724dfb44a87d8bc0d721640e1c5711d98b61bb4e28daae6188b80d104d675c57af820fed0efa671bd9bf419d4dead33ed8b87e061890d34c7f607e1296097d946e9654c209e32d0d6ee030aa34bf405dfc8dd0d4b2cf94f3ff1d8c7167717348860bf17c3dad479816fadcc045e3d15b1845c7c779b278e9a93d80b15a00e4e1deb200e4c4088aea5179b7ffe010ee8214163eac3b3a82213ff2ec6f852413c314060bef4998276e014a983a977d0ff7a0f32e27d8903a6fab6ee121e6548cca7af9c78f45918dbd2bbe824be5008e594ab976d79044b0aedfef1d0f8bdf29a64083926d3fe579e70d3b1de73452900880ca99d39e16b9671e62f91c8917f7540c9be3d77760bf16f27f73194f9f8a76eb53e2f219360b0bc886007b9ba48e6caad61571af20c7581880386d7f082f311c222d18923e4843690fde1447efc78eb53bded4b47b6115448a0d88938e6058099d9467a713a5479259c99efd50d5abab265e62a8f31b3318944d0b13dedcbca73f7fb4de4ab0443d38a6a5685035396e4a1bc536e757f29fe18ec75055da44d20863632512822a4579dcc30fa162f6c4c85148b4759b775a3d03d54630d35856cd62d58e23837dbb148a72f288032411ac2a02b593a93f8ee72059019a927712053f6b016bd983503626e55091d97adf4e3b1fe577529f2bc2f148525ff4a769b4be101ec5dd41714da11cb13f3b51c6e3e7f64ac6a87e9cd4292d0a79751797649e27be17a6af13637f01e75a6d93c89b87734d62d078e4e7bd06debf6a824510ed2e54237ea596841c7e6fe3e547c1d841645151500bd7a1d65fc804386a88a3f471d48aa5643d9bff571cb40ed2a5f4e23cd522d47c78f667e5f60f3a510d6664874d5754a3eb25a49a7260367c3eb71c8eaf355699f37ec5f4803b8f1de1ec4034560a33d7631e0414c0ddfa38eb36ca6d46421fe10a76140182400f5f8495ad141859699a84e6ae6b56b979595448399072d5bb9a6887e4d056d3d32b69d96393c53e7d526d1fa88a69e67c712912fa03739c462afd082616f63f13ed810dfa665a779882921832766c761308ad75a3f7b83623de8c09784889c126ec54f51bb096853643dd7df61f718743e0015ef3e3b93bd4c26da5af641265b3a85d3f6317b7fe11a057f1f748e5f855ab15e77e1d13ce1a8bd0b46b40c10ffc76126babdf8b1ac86e7ed0ce6f77cf5845067c8b6bd283a1a7e3b0a54ee6a73aea2688e6fb62e02eacf27971f39a847be53712e813a804bf6d342383239291a142ae5bdfaebce788bf99d1831dd457ba3459c0b0f4afb72f88516096a7a33125f3d67fae6180eb99a24ad415016257ebaa85d3085607338c822ed1f1b24a33762088d40d07db2319e8d31f3d4d208c1d4165859e9a8b1d210d43fbd708e0343b5e799c761f1605b69ba4d9cb25c86935e8b5e256beebf5eef2cf95fd88a73fce79d6004b321b4ba3def3167c7ac09ce538888f07d1443fc4c53b0dd6f7ba13fe55f540ca054f92cf2508948b0ff5fbd082f6885f488f1a9d3d73494a4998eaafbf6fc4078ce2e11f9bc981c12c700c51c359fa51f6a623895542a7fdc8d8fcd6efa9a49439738932b50b62c28c99443af375bdfc345e33691384af8050b30516b0f614413c4726ba55f140a1e30787e9632aefc021001cf3506170315b121cc242e84e32958f552b6d1440c7b36ba203cbe8b8ac8394556812a8b2ca1b109ca8f910fa6a45ad6bd777a7d36c642270bfa4d7a552bc3d31cd1d57a913cd88bfaa0f2da5b9f4a4cee4942b4800a7d6da7d16953409cc6125f6c111b8db4d75c7c8ba7e63067f08459073d96df15432109922c20fa0be07d6e61c66e7e6d34ea3b85f11fc12cd0fc19231d4e38830ee26852768ff443d9195cdcc2d2eab814f19d96190f0fea9c027ad2f55a5bfb6cfbbf34d2513cbbfc306cfab9541ca5aeda6e8b6b865baf87bdc7766d338b77f501cece84ead885d75584b905aaac6d4e25cfc8832e8c5b4227fe3b1157bf8665908a02ca8743154fa51b29b0a6c9162e2f3fe0bdec6bf5b4bc88b72212fdfa92a6a51d8bf63aa151920fd1f2db98fae5a969c3a44dfa41f63c2f25a9c2ab6649f8c71e00bf90e125a6cd90b9b2af70f05c3c35e00a7541fa3b5e156eeeab6e82532f3f3cfeeaa59abc44735f4b1efb3d90cde438633a58aa80ac8319536ba3d9551724e9d86b91da284d7bf45cb203b87b8311206cf078be111bfc93ba425175f6bf52dd4b096adea30ded62dabec78651984feb3ef0e6a3348316295e85473fa74f29f53f7afda9faf2a6cb5432e66e69e25c95d7045e70b76d5c2b211bc9ae7d2ef6135b0370f383091b274aa3061935e62e23918b2c7e0347d5424e5baccc0c2dff310923154cebfbd570a5fc58150f8c81ff0a001144619ed8c1ccb99017f44b7480630bd657ed52dce1a2ef8a896015a0b7d539d2d9e5bd60871e03628f2959a11e841040252ccd6870a1c7b6969a64d68045d25454904b2ca5c3d1dfe86ef36ee4dd0d8542ca71642c71045c904e775dc42028429bed7215b76cc755b55dcc8c6fc32b739d0001d60f46f41cada4e5a8348f7cc66897a0c7f92a", @ANYRES16], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) listen(r0, 0x1) 54.603159ms ago: executing program 3 (id=1139): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x1, 0x45, 0xffffffff, 0x3ff}, 0x10) 54.280308ms ago: executing program 0 (id=1140): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000000740)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x800, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000001c0), &(0x7f00000003c0), 0x2, 0x3) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 54.043768ms ago: executing program 1 (id=1141): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 36.064469ms ago: executing program 4 (id=1142): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 0s ago: executing program 4 (id=1143): socket$inet6(0xa, 0x2, 0x0) pipe2$9p(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x8080) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010003904000000140000000000000010", @ANYRES32=r4, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f00000013c0)="4a7dc0196606c227bca8ee165d73ac36f2ad2ed477", 0x15, 0x24044801, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 58.510404][ T4174] cgroup: Unknown subsys name 'net' [ 58.643976][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.844145][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.742774][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.762291][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 61.794541][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.860786][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.885537][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 61.923346][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.930697][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.939332][ T4194] device bridge_slave_0 entered promiscuous mode [ 61.965223][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.972439][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.980666][ T4194] device bridge_slave_1 entered promiscuous mode [ 62.036918][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.043991][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.051826][ T4193] device bridge_slave_0 entered promiscuous mode [ 62.065901][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.075194][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.082714][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.090446][ T4186] device bridge_slave_0 entered promiscuous mode [ 62.100370][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.107606][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.115230][ T4193] device bridge_slave_1 entered promiscuous mode [ 62.126292][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.135549][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.142791][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.150494][ T4186] device bridge_slave_1 entered promiscuous mode [ 62.187920][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.209876][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.255146][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.262363][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.270206][ T4189] device bridge_slave_0 entered promiscuous mode [ 62.280898][ T4193] team0: Port device team_slave_0 added [ 62.289706][ T4194] team0: Port device team_slave_0 added [ 62.297337][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.306757][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.313813][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.321749][ T4195] device bridge_slave_0 entered promiscuous mode [ 62.329024][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.336073][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.344346][ T4189] device bridge_slave_1 entered promiscuous mode [ 62.352777][ T4193] team0: Port device team_slave_1 added [ 62.359787][ T4194] team0: Port device team_slave_1 added [ 62.372240][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.381630][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.388816][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.396610][ T4195] device bridge_slave_1 entered promiscuous mode [ 62.438993][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.446139][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.472918][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.491613][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.498614][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.524520][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.537422][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.544371][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.570482][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.592744][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.607316][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.614285][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.640304][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.658694][ T4186] team0: Port device team_slave_0 added [ 62.666570][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.685250][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.709314][ T4186] team0: Port device team_slave_1 added [ 62.717649][ T4189] team0: Port device team_slave_0 added [ 62.724862][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.764558][ T4189] team0: Port device team_slave_1 added [ 62.781272][ T4193] device hsr_slave_0 entered promiscuous mode [ 62.788371][ T4193] device hsr_slave_1 entered promiscuous mode [ 62.813905][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.821324][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.849004][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.862963][ T4195] team0: Port device team_slave_0 added [ 62.874109][ T4194] device hsr_slave_0 entered promiscuous mode [ 62.881047][ T4194] device hsr_slave_1 entered promiscuous mode [ 62.888118][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.895894][ T4194] Cannot create hsr debugfs directory [ 62.915687][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.922706][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.948914][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.968264][ T4195] team0: Port device team_slave_1 added [ 62.982633][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.989966][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.016379][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.050890][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.057987][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.084284][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.134494][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.141753][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.168271][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.183572][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.190601][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.217583][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.242462][ T4186] device hsr_slave_0 entered promiscuous mode [ 63.249683][ T4186] device hsr_slave_1 entered promiscuous mode [ 63.256133][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.264235][ T4186] Cannot create hsr debugfs directory [ 63.358134][ T4195] device hsr_slave_0 entered promiscuous mode [ 63.365551][ T4195] device hsr_slave_1 entered promiscuous mode [ 63.372859][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.381000][ T4195] Cannot create hsr debugfs directory [ 63.394002][ T4189] device hsr_slave_0 entered promiscuous mode [ 63.401155][ T4189] device hsr_slave_1 entered promiscuous mode [ 63.407243][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 63.414260][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.422233][ T4189] Cannot create hsr debugfs directory [ 63.486416][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 63.496746][ T3573] Bluetooth: hci3: command 0x0409 tx timeout [ 63.502787][ T3573] Bluetooth: hci2: command 0x0409 tx timeout [ 63.566912][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 63.635338][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.651332][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.660327][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.671313][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.715575][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.733522][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.744495][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.753879][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.804851][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.833030][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.845849][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.865648][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.873550][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.903460][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.913279][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.940980][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.958210][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.978756][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.988729][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.012274][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.021929][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.032203][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.039861][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.053560][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.062439][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.080043][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.090126][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.099706][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.108515][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.115553][ T3084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.147797][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.165683][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.176544][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.184307][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.193142][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.203789][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.212848][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.222100][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.248195][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.258518][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.267615][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.276816][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.285145][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.292383][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.300872][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.324640][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.333888][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.343361][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.350915][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.360280][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.369314][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.378164][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.387144][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.411561][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.419836][ T4195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.429209][ T4195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.440968][ T4195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.450919][ T4195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.466439][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.474872][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.492470][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.501474][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.511662][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.529292][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.544164][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.553191][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.569408][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.581094][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.599539][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.629596][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.645024][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.655280][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.669432][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.678507][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.687553][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.695887][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.702976][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.710993][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.725155][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.748643][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.755788][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.768377][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.777020][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.784138][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.792084][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.800444][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.836901][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.845531][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.886743][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.898134][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.909191][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.918265][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.934395][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.942880][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.951803][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.961173][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.970477][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.981104][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.004946][ T4194] device veth0_vlan entered promiscuous mode [ 65.015216][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.024248][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.034173][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.043400][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.058033][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.065886][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.080708][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.093295][ T4194] device veth1_vlan entered promiscuous mode [ 65.109570][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.124025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.133392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.142134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.164938][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.178006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.187215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.195980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.205472][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.212608][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.237551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.245635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.264582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.275002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.290171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.299286][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.306421][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.315434][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.323425][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.342425][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.353346][ T4194] device veth0_macvtap entered promiscuous mode [ 65.369144][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.378654][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.386785][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.394449][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.420275][ T4194] device veth1_macvtap entered promiscuous mode [ 65.431251][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.440324][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.449640][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.458846][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.468618][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.478236][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.485304][ T3084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.486452][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 65.494332][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.508654][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.522896][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.531975][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.541245][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.548342][ T3084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.556958][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.565887][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.566628][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 65.574264][ T4226] Bluetooth: hci2: command 0x041b tx timeout [ 65.585967][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 65.586853][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.600883][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.608583][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.616009][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.624446][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.633386][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.641896][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.650766][ T4226] Bluetooth: hci4: command 0x041b tx timeout [ 65.661429][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.684493][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.697286][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.711252][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.722062][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.732839][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.744484][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.753481][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.771315][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.786571][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.801301][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.828680][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.841978][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.852353][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.865901][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.876123][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.888687][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.899088][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.924784][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.946551][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.955158][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.997361][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.007554][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.026219][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.034945][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.057381][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.073645][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.083556][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.098236][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.113350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.122711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.132190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.141146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.162359][ T4186] device veth0_vlan entered promiscuous mode [ 66.169618][ T4193] device veth0_vlan entered promiscuous mode [ 66.181930][ T4193] device veth1_vlan entered promiscuous mode [ 66.195364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.203726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.212673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.222136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.230344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.245283][ T4186] device veth1_vlan entered promiscuous mode [ 66.268182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.278601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.287412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.299798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.307388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.320299][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.345900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.355065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.370200][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.382467][ T4193] device veth0_macvtap entered promiscuous mode [ 66.396925][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.407259][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.415852][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.434895][ T4186] device veth0_macvtap entered promiscuous mode [ 66.453802][ T4186] device veth1_macvtap entered promiscuous mode [ 66.468217][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.477676][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.486053][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.528037][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.536072][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.545579][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.563186][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.572002][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.582919][ T4193] device veth1_macvtap entered promiscuous mode [ 66.600266][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.612225][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.623662][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.631780][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.640364][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.649137][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.657216][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.665800][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.684037][ T4195] device veth0_vlan entered promiscuous mode [ 66.695105][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.714529][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.717366][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.728152][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.738001][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.765954][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.779621][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.782997][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.788073][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.803204][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.812250][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.821113][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.830466][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.838707][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.849446][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.861782][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.869678][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.881680][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.890865][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.900177][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.909275][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.923077][ T4189] device veth0_vlan entered promiscuous mode [ 66.932185][ T4195] device veth1_vlan entered promiscuous mode [ 66.941916][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.952931][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.964006][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.974151][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.984865][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.996117][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.006061][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.022174][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.034089][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.044869][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.062816][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.075627][ T4189] device veth1_vlan entered promiscuous mode [ 67.100041][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.112740][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.123720][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.136066][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.153391][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.168727][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.182199][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.193477][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.245516][ T4195] device veth0_macvtap entered promiscuous mode [ 67.263371][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.275473][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.291142][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.333011][ T4195] device veth1_macvtap entered promiscuous mode [ 67.349973][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.358247][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.368688][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.387881][ T4189] device veth0_macvtap entered promiscuous mode [ 67.427405][ T4189] device veth1_macvtap entered promiscuous mode [ 67.462805][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.474508][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.482117][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.493782][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.504256][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.512406][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.522758][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.533439][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.545967][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.568298][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.577133][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.581034][ T4226] Bluetooth: hci0: command 0x040f tx timeout [ 67.585746][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.600656][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.609729][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.624695][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.636858][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.646746][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 67.648121][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 67.656482][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 67.660930][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.675716][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.686001][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.697315][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.710915][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.728080][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 67.738532][ T4275] netlink: 'syz.3.9': attribute type 1 has an invalid length. [ 67.751593][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.763799][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.775001][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.787276][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.797642][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.809146][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.819316][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.830236][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.842112][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.852375][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.861580][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.870564][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.879377][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.892767][ T4195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.902048][ T4195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.910911][ T4195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.919902][ T4195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.938078][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.947732][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.965210][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.976925][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.986899][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.997780][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.007952][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.018451][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.028290][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.040337][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.055492][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.078653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.087657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.097011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.109615][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.118734][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.128476][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.137627][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.173495][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.189068][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.194113][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.201918][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.256062][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.272023][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.352595][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.363567][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.386524][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.386929][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.402267][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.425579][ T4282] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.435632][ T4287] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 68.441665][ T3084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.456665][ T4287] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5'. [ 68.461553][ T3084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.485608][ T4284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 68.500266][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.508706][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.572536][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.601648][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.648236][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.672557][ T4294] device syzkaller0 entered promiscuous mode [ 68.708762][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 68.722001][ T4302] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 68.737788][ T4295] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 68.875044][ T4290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12'. [ 68.989546][ T4312] tipc: Enabling of bearer rejected, failed to enable media [ 69.306023][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 69.337444][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 69.366340][ T4330] netlink: 'syz.4.22': attribute type 6 has an invalid length. [ 69.647365][ T26] Bluetooth: hci0: command 0x0419 tx timeout [ 69.714853][ T4357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30'. [ 69.726943][ T26] Bluetooth: hci3: command 0x0419 tx timeout [ 69.736774][ T26] Bluetooth: hci1: command 0x0419 tx timeout [ 69.751903][ T26] Bluetooth: hci2: command 0x0419 tx timeout [ 69.783746][ T4357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.806508][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 69.860104][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 69.869454][ T4359] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 69.912270][ T4359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29'. [ 69.989289][ T4370] netlink: 'syz.2.33': attribute type 25 has an invalid length. [ 70.002541][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 70.015323][ T4370] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.024267][ T4370] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.033233][ T4370] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.042060][ T4370] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.054523][ T4370] netlink: 'syz.2.33': attribute type 25 has an invalid length. [ 70.074554][ T4370] Zero length message leads to an empty skb [ 70.719093][ T4381] loop0: detected capacity change from 0 to 16 [ 70.786835][ T4381] ======================================================= [ 70.786835][ T4381] WARNING: The mand mount option has been deprecated and [ 70.786835][ T4381] and is ignored by this kernel. Remove the mand [ 70.786835][ T4381] option from the mount to silence this warning. [ 70.786835][ T4381] ======================================================= [ 70.920600][ T4381] erofs: (device loop0): mounted with root inode @ nid 36. [ 71.176234][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 71.186240][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 71.196220][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 71.206219][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 71.216215][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.226234][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.236233][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.246220][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.256220][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 71.266219][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 72.269818][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.283559][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.298135][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 72.888547][ T4400] 8021q: VLANs not supported on wg1 [ 72.907429][ T4400] wg1: Master is either lo or non-ether device [ 73.009971][ T4406] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 75.314371][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 75.723647][ T4446] x_tables: unsorted underflow at hook 2 [ 76.377192][ T4464] __nla_validate_parse: 3 callbacks suppressed [ 76.377207][ T4464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.65'. [ 76.442951][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.623778][ T4469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.67'. [ 76.885111][ T4482] netlink: 64 bytes leftover after parsing attributes in process `syz.0.72'. [ 77.152864][ T4502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'. [ 77.222164][ T4501] netlink: 56 bytes leftover after parsing attributes in process `syz.0.81'. [ 77.591286][ T4523] can: request_module (can-proto-0) failed. [ 77.704318][ T4535] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 77.962600][ T4544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 78.015396][ T4548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 79.375670][ T1323] cfg80211: failed to load regulatory.db [ 79.388591][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 79.477597][ T4558] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.489640][ T4558] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.498414][ T4558] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.507140][ T4558] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.624085][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 79.733658][ T4573] netlink: 'syz.1.110': attribute type 1 has an invalid length. [ 79.742795][ T4574] tipc: Started in network mode [ 79.758845][ T4574] tipc: Node identity ac14140f, cluster identity 4711 [ 79.776269][ T4573] netlink: 224 bytes leftover after parsing attributes in process `syz.1.110'. [ 79.787935][ T4574] tipc: Enabled bearer , priority 10 [ 79.798418][ T4576] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.139619][ T1323] tipc: Node number set to 2886997007 [ 81.236634][ T4588] can: request_module (can-proto-0) failed. [ 81.328919][ T4597] ip_tables: iptables: counters copy to user failed while replacing table [ 81.965866][ T4617] __nla_validate_parse: 1 callbacks suppressed [ 81.965908][ T4617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 81.984432][ T4617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 82.624489][ T4619] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.758015][ T4630] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 82.809429][ T4626] can: request_module (can-proto-0) failed. [ 82.875315][ T4630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.934560][ T4646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 82.948608][ T4635] bond1: (slave geneve2): making interface the new active one [ 82.959138][ T4635] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 82.970090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 82.981447][ T4645] netlink: 'syz.1.136': attribute type 10 has an invalid length. [ 83.063815][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.073345][ T4645] team0: Port device bond0 added [ 83.087900][ T4635] syz.3.130 (4635) used greatest stack depth: 19648 bytes left [ 83.203563][ T4654] xt_hl: Unknown Hop Limit match mode: 4 [ 83.231825][ T4655] netlink: 'syz.0.140': attribute type 1 has an invalid length. [ 83.264526][ T4655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.322417][ T4661] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 83.415501][ T4661] netlink: 224 bytes leftover after parsing attributes in process `syz.1.141'. [ 83.514556][ T4655] bond1: (slave veth3): Enslaving as an active interface with a down link [ 83.572397][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 83.618251][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.638767][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.666579][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.678217][ T4662] device bridge_slave_0 left promiscuous mode [ 83.700268][ T4662] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.705931][ T4678] can: request_module (can-proto-0) failed. [ 83.734884][ T4662] device bridge_slave_1 left promiscuous mode [ 83.747740][ T4662] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.767935][ T4662] bond0: (slave bond_slave_0): Releasing backup interface [ 83.783587][ T4662] bond0: (slave bond_slave_1): Releasing backup interface [ 83.845497][ T4662] team0: Port device team_slave_0 removed [ 83.872079][ T4662] team0: Port device team_slave_1 removed [ 83.879021][ T4662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.892534][ T4662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.903082][ T4662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.911963][ T4662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.930127][ T4662] bond1: (slave geneve2): Releasing active interface [ 83.972008][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.979976][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.992733][ T4665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.019594][ T4668] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 84.037937][ T4668] bond1: (slave batadv1): making interface the new active one [ 84.053039][ T4668] device batadv1 entered promiscuous mode [ 84.071976][ T4668] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 84.099937][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 84.221872][ T4690] netlink: 'syz.0.149': attribute type 1 has an invalid length. [ 84.315020][ T4690] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.382600][ T4696] bond2: (slave geneve2): making interface the new active one [ 84.393588][ T4696] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 84.407364][ T4701] netlink: 'syz.2.153': attribute type 1 has an invalid length. [ 84.465252][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 84.723026][ T4711] xt_policy: output policy not valid in PREROUTING and INPUT [ 84.769623][ T4711] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.150625][ T4734] overlayfs: failed to clone upperpath [ 86.046427][ T4745] can: request_module (can-proto-0) failed. [ 86.113381][ T4757] xt_policy: output policy not valid in PREROUTING and INPUT [ 86.222337][ T4750] syz.2.172 (4750) used greatest stack depth: 18224 bytes left [ 86.312762][ T4772] FAULT_INJECTION: forcing a failure. [ 86.312762][ T4772] name failslab, interval 1, probability 0, space 0, times 1 [ 86.344369][ T4775] loop1: detected capacity change from 0 to 512 [ 86.357529][ T4772] CPU: 0 PID: 4772 Comm: syz.4.181 Not tainted syzkaller #0 [ 86.364847][ T4772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.374977][ T4772] Call Trace: [ 86.378264][ T4772] [ 86.381201][ T4772] dump_stack_lvl+0x188/0x250 [ 86.385913][ T4772] ? show_regs_print_info+0x20/0x20 [ 86.391130][ T4772] ? load_image+0x410/0x410 [ 86.395649][ T4772] ? __lock_acquire+0x7d40/0x7d40 [ 86.400694][ T4772] should_fail+0x383/0x4b0 [ 86.405128][ T4772] should_failslab+0x5/0x20 [ 86.409650][ T4772] slab_pre_alloc_hook+0x51/0xc0 [ 86.414608][ T4772] ? key_alloc+0x346/0x1030 [ 86.419128][ T4772] __kmalloc_track_caller+0x69/0x330 [ 86.424515][ T4772] ? key_alloc+0x346/0x1030 [ 86.429040][ T4772] kmemdup+0x22/0x50 [ 86.433232][ T4772] key_alloc+0x346/0x1030 [ 86.437604][ T4772] keyring_alloc+0x41/0xa0 [ 86.442049][ T4772] lookup_user_key+0x444/0x1160 [ 86.447025][ T4772] ? lookup_user_key_possessed+0x40/0x40 [ 86.452678][ T4772] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 86.458698][ T4772] ? strncpy_from_user+0x1f4/0x350 [ 86.463828][ T4772] __se_sys_add_key+0x311/0x410 [ 86.469324][ T4772] ? __x64_sys_add_key+0xc0/0xc0 [ 86.474291][ T4772] ? lockdep_hardirqs_on+0x94/0x140 [ 86.479516][ T4772] ? __x64_sys_add_key+0x1c/0xc0 [ 86.484576][ T4772] do_syscall_64+0x4c/0xa0 [ 86.489009][ T4772] ? clear_bhb_loop+0x30/0x80 [ 86.493701][ T4772] ? clear_bhb_loop+0x30/0x80 [ 86.498400][ T4772] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.504416][ T4772] RIP: 0033:0x7f1c72a77199 [ 86.508858][ T4772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.529426][ T4772] RSP: 002b:00007f1c70ccf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 86.537952][ T4772] RAX: ffffffffffffffda RBX: 00007f1c72cfefa0 RCX: 00007f1c72a77199 [ 86.546026][ T4772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 86.554101][ T4772] RBP: 00007f1c72b0e8e0 R08: ffffffffffffffff R09: 0000000000000000 [ 86.562137][ T4772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.570121][ T4772] R13: 00007f1c72cff038 R14: 00007f1c72cfefa0 R15: 00007ffdff643458 [ 86.578126][ T4772] [ 86.824556][ T4775] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.182: inode has both inline data and extents flags [ 87.287765][ T4794] loop2: detected capacity change from 0 to 8192 [ 87.381685][ T4794] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.487850][ T4775] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.182: couldn't read orphan inode 15 (err -117) [ 87.516677][ T4775] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,acl,nodiscard,,errors=continue. Quota mode: none. [ 87.573250][ T4801] xt_policy: output policy not valid in PREROUTING and INPUT [ 87.583815][ T4775] EXT4-fs (loop1): shut down requested (0) [ 87.635427][ T4803] EXT4-fs error (device loop1): ext4_lookup:1860: inode #15: comm syz.1.182: inode has both inline data and extents flags [ 87.955396][ T4809] can: request_module (can-proto-0) failed. [ 87.958019][ T4814] netlink: 68 bytes leftover after parsing attributes in process `syz.3.197'. [ 88.083090][ T4822] loop1: detected capacity change from 0 to 256 [ 89.225163][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.232531][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.243008][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.250511][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.809565][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 90.346476][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 90.507011][ T4902] binder: Binderfs stats mode cannot be changed during a remount [ 91.890962][ T4920] device syzkaller0 entered promiscuous mode [ 91.925464][ T4920] 0: reclassify loop, rule prio 0, protocol 700 [ 92.046786][ T4928] capability: warning: `syz.2.220' uses 32-bit capabilities (legacy support in use) [ 92.769276][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 92.808341][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.828580][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.837172][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.976922][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 94.038980][ T4952] device gretap0 entered promiscuous mode [ 94.488146][ T4962] loop4: detected capacity change from 0 to 8192 [ 94.694856][ T4978] loop1: detected capacity change from 0 to 512 [ 94.774652][ T4980] loop2: detected capacity change from 0 to 512 [ 94.814864][ T4985] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.859912][ T4978] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 94.876531][ T4978] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.917825][ T4980] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.115124][ T4980] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.240: Allocating blocks 41-42 which overlap fs metadata [ 95.124893][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 95.244378][ T4980] EXT4-fs (loop2): Remounting filesystem read-only [ 95.287427][ T4980] Quota error (device loop2): write_blk: dquota write failed [ 95.314807][ T4980] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 95.364764][ T4980] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 95.395065][ T4980] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.240: Failed to acquire dquot type 1 [ 95.429144][ T4980] EXT4-fs (loop2): Remounting filesystem read-only [ 95.435896][ T5015] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 95.457063][ T4980] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 95.506659][ T5015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.540453][ T4980] EXT4-fs (loop2): Remounting filesystem read-only [ 95.550656][ T4980] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.240: corrupted inode contents [ 95.578732][ T4980] EXT4-fs (loop2): Remounting filesystem read-only [ 95.613499][ T4980] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #12: comm syz.2.240: mark_inode_dirty error [ 95.670885][ T4980] EXT4-fs (loop2): Remounting filesystem read-only [ 95.681233][ T4980] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.240: corrupted inode contents [ 95.726851][ T4980] EXT4-fs (loop2): Remounting filesystem read-only [ 95.736094][ T5027] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.257'. [ 95.756442][ T4980] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.240: mark_inode_dirty error [ 95.783863][ T4980] EXT4-fs (loop2): Remounting filesystem read-only [ 95.806914][ T4980] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.240: corrupted inode contents [ 95.894608][ T4980] EXT4-fs (loop2): Remounting filesystem read-only [ 95.934160][ T4980] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 95.950842][ T4980] EXT4-fs (loop2): Remounting filesystem read-only [ 95.952870][ T5032] capability: warning: `syz.4.259' uses deprecated v2 capabilities in a way that may be insecure [ 95.966245][ T4980] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.240: corrupted inode contents [ 96.002758][ T4980] EXT4-fs (loop2): Remounting filesystem read-only [ 96.020849][ T4980] EXT4-fs error (device loop2): ext4_truncate:4286: inode #12: comm syz.2.240: mark_inode_dirty error [ 96.062615][ T4980] EXT4-fs (loop2): Remounting filesystem read-only [ 96.081568][ T4980] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 96.175325][ T4980] EXT4-fs (loop2): Remounting filesystem read-only [ 96.190985][ T4980] EXT4-fs (loop2): 1 truncate cleaned up [ 96.217646][ T4980] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,init_itable,resgid=0x00000000000000002. Quota mode: writeback. [ 97.426062][ T5067] loop4: detected capacity change from 0 to 256 [ 98.576431][ T5080] FAULT_INJECTION: forcing a failure. [ 98.576431][ T5080] name failslab, interval 1, probability 0, space 0, times 0 [ 98.589506][ T5080] CPU: 1 PID: 5080 Comm: syz.3.278 Not tainted syzkaller #0 [ 98.596912][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.607082][ T5080] Call Trace: [ 98.610395][ T5080] [ 98.613423][ T5080] dump_stack_lvl+0x188/0x250 [ 98.618108][ T5080] ? show_regs_print_info+0x20/0x20 [ 98.623313][ T5080] ? load_image+0x410/0x410 [ 98.627855][ T5080] ? __might_sleep+0xf0/0xf0 [ 98.632449][ T5080] ? __lock_acquire+0x7d40/0x7d40 [ 98.637483][ T5080] should_fail+0x383/0x4b0 [ 98.641905][ T5080] should_failslab+0x5/0x20 [ 98.646415][ T5080] slab_pre_alloc_hook+0x51/0xc0 [ 98.651356][ T5080] __kmalloc_node+0x6d/0x3a0 [ 98.655948][ T5080] ? vmemdup_user+0x45/0x170 [ 98.660547][ T5080] vmemdup_user+0x45/0x170 [ 98.664973][ T5080] setxattr+0x1ce/0x360 [ 98.669145][ T5080] ? path_setxattr+0x290/0x290 [ 98.673936][ T5080] ? __mnt_want_write+0x1e2/0x260 [ 98.678966][ T5080] ? mnt_want_write_file+0x174/0x200 [ 98.684257][ T5080] __se_sys_fsetxattr+0x15e/0x1d0 [ 98.689399][ T5080] do_syscall_64+0x4c/0xa0 [ 98.693891][ T5080] ? clear_bhb_loop+0x30/0x80 [ 98.698583][ T5080] ? clear_bhb_loop+0x30/0x80 [ 98.703266][ T5080] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.709162][ T5080] RIP: 0033:0x7f9b9a092199 [ 98.713581][ T5080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.733278][ T5080] RSP: 002b:00007f9b982ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 98.736179][ C0] sched: RT throttling activated [ 98.746618][ T5080] RAX: ffffffffffffffda RBX: 00007f9b9a319fa0 RCX: 00007f9b9a092199 [ 98.754583][ T5080] RDX: 00002000000003c0 RSI: 00002000000001c0 RDI: 0000000000000005 [ 98.762545][ T5080] RBP: 00007f9b9a1298e0 R08: 0000000000000003 R09: 0000000000000000 [ 98.770526][ T5080] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 98.778494][ T5080] R13: 00007f9b9a31a038 R14: 00007f9b9a319fa0 R15: 00007ffcbc326208 [ 98.786595][ T5080] [ 99.157400][ T5077] nvme nvme0: failed to connect socket: -512 [ 99.278324][ T5091] ip_tables: iptables: counters copy to user failed while replacing table [ 99.599473][ T4861] device batadv1 left promiscuous mode [ 101.291188][ T5132] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.295078][ T5127] loop4: detected capacity change from 0 to 4096 [ 101.323863][ T5132] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.424170][ T5127] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.429131][ T5101] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 101.601039][ T5101] wiimote 0005:057E:0306.0001: New device registered [ 101.632680][ T5137] wiimote 0005:057E:0306.0001: Device removed [ 102.464094][ T5158] FAULT_INJECTION: forcing a failure. [ 102.464094][ T5158] name failslab, interval 1, probability 0, space 0, times 0 [ 102.468220][ T5149] fido_id[5149]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.486924][ T5158] CPU: 0 PID: 5158 Comm: syz.2.303 Not tainted syzkaller #0 [ 102.498187][ T5158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.508444][ T5158] Call Trace: [ 102.512727][ T5158] [ 102.516955][ T5158] dump_stack_lvl+0x188/0x250 [ 102.523488][ T5158] ? show_regs_print_info+0x20/0x20 [ 102.530068][ T5158] ? load_image+0x410/0x410 [ 102.534958][ T5158] ? __might_sleep+0xf0/0xf0 [ 102.540122][ T5158] ? __lock_acquire+0x7d40/0x7d40 [ 102.545215][ T5158] should_fail+0x383/0x4b0 [ 102.549747][ T5158] should_failslab+0x5/0x20 [ 102.554329][ T5158] slab_pre_alloc_hook+0x51/0xc0 [ 102.559387][ T5158] kmem_cache_alloc_node+0x47/0x2c0 [ 102.564747][ T5158] ? __alloc_skb+0xf4/0x750 [ 102.569251][ T5158] __alloc_skb+0xf4/0x750 [ 102.574073][ T5158] __ip6_append_data+0x26b7/0x38f0 [ 102.579223][ T5158] ? ip6_setup_cork+0x11e0/0x11e0 [ 102.584242][ T5158] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 102.590244][ T5158] ip6_append_data+0x1d4/0x310 [ 102.595205][ T5158] ? ip_skb_dst_mtu+0x860/0x860 [ 102.600467][ T5158] ? ip_skb_dst_mtu+0x860/0x860 [ 102.605332][ T5158] udpv6_sendmsg+0xc9a/0x2520 [ 102.610030][ T5158] ? aa_sk_perm+0x910/0x910 [ 102.614553][ T5158] ? udp_v6_early_demux+0xe10/0xe10 [ 102.619972][ T5158] ? rcu_lock_release+0x9/0x20 [ 102.624736][ T5158] ? aa_sk_perm+0x7dc/0x910 [ 102.629242][ T5158] ? aa_af_perm+0x340/0x340 [ 102.633875][ T5158] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 102.640385][ T5158] ? sock_rps_record_flow+0x17/0x3b0 [ 102.647321][ T5158] ? inet_send_prepare+0x57/0x250 [ 102.652445][ T5158] ? inet6_sendmsg+0x5b/0xd0 [ 102.657224][ T5158] __sys_sendto+0x46d/0x620 [ 102.661722][ T5158] ? __ia32_sys_getpeername+0x80/0x80 [ 102.667224][ T5158] ? lock_chain_count+0x20/0x20 [ 102.672071][ T5158] __x64_sys_sendto+0xda/0xf0 [ 102.676741][ T5158] do_syscall_64+0x4c/0xa0 [ 102.681148][ T5158] ? clear_bhb_loop+0x30/0x80 [ 102.685811][ T5158] ? clear_bhb_loop+0x30/0x80 [ 102.690479][ T5158] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.696361][ T5158] RIP: 0033:0x7f9933676199 [ 102.700776][ T5158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.720369][ T5158] RSP: 002b:00007f99318ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 102.728810][ T5158] RAX: ffffffffffffffda RBX: 00007f99338fdfa0 RCX: 00007f9933676199 [ 102.736771][ T5158] RDX: 000000000000ffd6 RSI: 00002000000009c0 RDI: 0000000000000004 [ 102.744730][ T5158] RBP: 00007f993370d8e0 R08: 0000000000000000 R09: ffffffffffffff0c [ 102.752797][ T5158] R10: 000000000000c001 R11: 0000000000000246 R12: 0000000000000000 [ 102.761204][ T5158] R13: 00007f99338fe038 R14: 00007f99338fdfa0 R15: 00007fff1a4bc468 [ 102.769698][ T5158] [ 102.776268][ T5101] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 102.867997][ T5101] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 102.892770][ T5101] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input8 [ 102.912208][ T5101] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 103.014323][ T5166] netlink: 144 bytes leftover after parsing attributes in process `syz.2.306'. [ 103.793788][ T5178] binder: Binderfs stats mode cannot be changed during a remount [ 103.797656][ T5179] loop2: detected capacity change from 0 to 256 [ 104.323418][ T5188] loop2: detected capacity change from 0 to 512 [ 104.393937][ T5188] EXT4-fs (loop2): Ignoring removed nobh option [ 104.469952][ T5188] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 104.488454][ T5188] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.550164][ T5188] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #2: comm syz.2.313: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 104.623881][ T5199] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.313: corrupted inode contents [ 104.639968][ T5202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.319'. [ 104.663374][ T5199] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #2: comm syz.2.313: mark_inode_dirty error [ 104.801051][ T5205] input: syz0 as /devices/virtual/input/input9 [ 104.857461][ T5199] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.313: corrupted inode contents [ 104.975251][ T5199] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.313: mark_inode_dirty error [ 105.372680][ T5214] ip_tables: iptables: counters copy to user failed while replacing table [ 105.403294][ T25] audit: type=1326 audit(1791405782.298:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5213 comm="syz.1.324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd251712199 code=0x0 [ 105.422866][ T5219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.327'. [ 105.437740][ T5219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.327'. [ 105.547389][ T5228] xt_policy: output policy not valid in PREROUTING and INPUT [ 105.764328][ T5237] loop2: detected capacity change from 0 to 512 [ 105.778085][ T5237] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 105.796092][ T5237] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.803619][ T5237] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.334: Block bitmap for bg 0 marked uninitialized [ 105.822613][ T5237] EXT4-fs (loop2): Remounting filesystem read-only [ 105.829237][ T5237] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 105.838462][ T5237] EXT4-fs (loop2): Remounting filesystem read-only [ 105.846056][ T5237] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.334: Block bitmap for bg 0 marked uninitialized [ 105.860058][ T5237] EXT4-fs (loop2): Remounting filesystem read-only [ 105.866787][ T5237] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 105.876686][ T5237] EXT4-fs (loop2): Remounting filesystem read-only [ 105.883499][ T5237] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:510: comm syz.2.334: Block bitmap for bg 0 marked uninitialized [ 105.897669][ T5237] EXT4-fs (loop2): Remounting filesystem read-only [ 105.904373][ T5237] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 105.913722][ T5237] EXT4-fs (loop2): Remounting filesystem read-only [ 105.921117][ T5237] EXT4-fs (loop2): 1 orphan inode deleted [ 105.927876][ T5237] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,. Quota mode: none. [ 106.023431][ T5240] FAULT_INJECTION: forcing a failure. [ 106.023431][ T5240] name failslab, interval 1, probability 0, space 0, times 0 [ 106.039298][ T5240] CPU: 0 PID: 5240 Comm: syz.2.335 Not tainted syzkaller #0 [ 106.046618][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.056864][ T5240] Call Trace: [ 106.060326][ T5240] [ 106.063265][ T5240] dump_stack_lvl+0x188/0x250 [ 106.068417][ T5240] ? show_regs_print_info+0x20/0x20 [ 106.073626][ T5240] ? load_image+0x410/0x410 [ 106.078130][ T5240] ? __might_sleep+0xf0/0xf0 [ 106.082815][ T5240] ? __lock_acquire+0x7d40/0x7d40 [ 106.087858][ T5240] should_fail+0x383/0x4b0 [ 106.092301][ T5240] should_failslab+0x5/0x20 [ 106.096913][ T5240] slab_pre_alloc_hook+0x51/0xc0 [ 106.102059][ T5240] kmem_cache_alloc_trace+0x47/0x290 [ 106.108486][ T5240] ? __list_lru_init+0x535/0xac0 [ 106.113452][ T5240] __list_lru_init+0x535/0xac0 [ 106.118234][ T5240] alloc_super+0x787/0x970 [ 106.122673][ T5240] ? kill_litter_super+0xa0/0xa0 [ 106.127896][ T5240] sget_fc+0x2d4/0x6f0 [ 106.131976][ T5240] ? kill_litter_super+0xa0/0xa0 [ 106.136928][ T5240] ? proc_reconfigure+0x370/0x370 [ 106.142051][ T5240] get_tree_nodev+0x26/0x160 [ 106.146657][ T5240] vfs_get_tree+0x88/0x270 [ 106.151225][ T5240] do_new_mount+0x247/0xa40 [ 106.155733][ T5240] __se_sys_mount+0x2e3/0x3d0 [ 106.160514][ T5240] ? __x64_sys_mount+0xc0/0xc0 [ 106.165361][ T5240] ? lockdep_hardirqs_on+0x94/0x140 [ 106.170594][ T5240] ? __x64_sys_mount+0x1c/0xc0 [ 106.175378][ T5240] do_syscall_64+0x4c/0xa0 [ 106.179827][ T5240] ? clear_bhb_loop+0x30/0x80 [ 106.185213][ T5240] ? clear_bhb_loop+0x30/0x80 [ 106.189914][ T5240] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.196803][ T5240] RIP: 0033:0x7f9933676199 [ 106.201496][ T5240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.221385][ T5240] RSP: 002b:00007f99318ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.229889][ T5240] RAX: ffffffffffffffda RBX: 00007f99338fdfa0 RCX: 00007f9933676199 [ 106.237964][ T5240] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 106.246242][ T5240] RBP: 00007f993370d8e0 R08: 0000000000000000 R09: 0000000000000000 [ 106.254314][ T5240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.262295][ T5240] R13: 00007f99338fe038 R14: 00007f99338fdfa0 R15: 00007fff1a4bc468 [ 106.270285][ T5240] [ 106.344292][ T5245] loop1: detected capacity change from 0 to 512 [ 106.400130][ T5245] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 106.411201][ T5245] FAT-fs (loop1): Filesystem has been set read-only [ 106.425272][ T5245] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 106.437170][ T5253] netlink: set zone limit has 8 unknown bytes [ 107.739513][ T5262] xt_policy: output policy not valid in PREROUTING and INPUT [ 107.760261][ T5261] fuse: Bad value for 'fd' [ 107.855376][ T5264] loop1: detected capacity change from 0 to 512 [ 107.886094][ T5267] loop4: detected capacity change from 0 to 512 [ 107.902350][ T5264] EXT4-fs (loop1): can't mount with commit=1048582, fs mounted w/o journal [ 107.948482][ T5267] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 107.986047][ T5267] EXT4-fs (loop4): 1 truncate cleaned up [ 108.011873][ T5267] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 108.734151][ T5264] ODEBUG: Out of memory. ODEBUG disabled [ 109.106531][ T5290] loop2: detected capacity change from 0 to 512 [ 110.241464][ T5307] loop1: detected capacity change from 0 to 512 [ 110.542965][ T5308] loop3: detected capacity change from 0 to 2048 [ 110.757474][ T5290] EXT4-fs (loop2): Test dummy encryption mode enabled [ 110.784919][ T5308] loop3: p1 < > p4 [ 110.784919][ T5308] p4: [ 110.858792][ T5307] attempt to access beyond end of device [ 110.858792][ T5307] loop1: rw=524288, want=17179852722, limit=512 [ 110.888901][ T5290] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.354: inode has both inline data and extents flags [ 110.906472][ T5308] loop3: p4 size 722688 extends beyond EOD, truncated [ 110.946560][ T5307] attempt to access beyond end of device [ 110.946560][ T5307] loop1: rw=0, want=17179852714, limit=512 [ 110.968222][ T25] audit: type=1800 audit(1791405787.878:3): pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.360" name="file2" dev="loop1" ino=1048634 res=0 errno=0 [ 111.006618][ T5290] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.354: couldn't read orphan inode 15 (err -117) [ 111.042592][ T5290] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 111.111714][ T5324] tipc: Failed to remove unknown binding: 66,0,0/0:3596254899/3596254900 [ 111.246863][ T5290] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 111.323617][ T5338] loop3: detected capacity change from 0 to 256 [ 111.592399][ T5341] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 112.340756][ T5354] loop1: detected capacity change from 0 to 2048 [ 112.412440][ T5354] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.431719][ T5354] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.454233][ T5354] EXT4-fs (loop1): resizing filesystem from 256 to 0 blocks [ 112.464487][ T5354] EXT4-fs warning (device loop1): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 113.268304][ T5368] loop1: detected capacity change from 0 to 4096 [ 113.295985][ T5368] EXT4-fs (loop1): Test dummy encryption mode enabled [ 113.350056][ T5339] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.351138][ T5368] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,block_validity,nodelalloc,minixdf,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 113.456661][ T5376] loop2: detected capacity change from 0 to 1024 [ 113.586442][ T5376] EXT4-fs (loop2): Ignoring removed bh option [ 113.814976][ T25] audit: type=1800 audit(1791405790.718:4): pid=5378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.381" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 113.870023][ T5376] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 113.945905][ T5376] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz.2.384: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 113.978605][ T5376] EXT4-fs (loop2): Remounting filesystem read-only [ 113.986437][ T5376] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz.2.384: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 114.015700][ T5376] EXT4-fs (loop2): Remounting filesystem read-only [ 114.070441][ T4189] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 114.092184][ T4189] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /53/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 114.124600][ T4189] EXT4-fs (loop2): Remounting filesystem read-only [ 114.145876][ T4189] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /53/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 114.168572][ T4189] EXT4-fs (loop2): Remounting filesystem read-only [ 114.175351][ T4189] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 114.199761][ T4189] EXT4-fs (loop2): Remounting filesystem read-only [ 114.230526][ T4189] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 114.245459][ T4189] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /53/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 114.268343][ T4189] EXT4-fs (loop2): Remounting filesystem read-only [ 114.275276][ T4189] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /53/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 114.313597][ T4189] EXT4-fs (loop2): Remounting filesystem read-only [ 114.327136][ T4189] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 114.365728][ T4189] EXT4-fs (loop2): Remounting filesystem read-only [ 114.380137][ T4189] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 114.407754][ T4189] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /53/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 114.443856][ T4189] EXT4-fs (loop2): Remounting filesystem read-only [ 114.469564][ T4189] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /53/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 114.512186][ T4189] EXT4-fs (loop2): Remounting filesystem read-only [ 114.533473][ T4189] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 114.564348][ T5339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.567966][ T4189] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 114.625252][ T5339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.627127][ T4189] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 114.681269][ T4189] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 114.704736][ T5398] loop3: detected capacity change from 0 to 1024 [ 114.742217][ T5398] EXT4-fs (loop3): inline encryption not supported [ 114.751740][ T4189] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 114.775706][ T5398] EXT4-fs (loop3): Ignoring removed bh option [ 114.787318][ T4189] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 114.810102][ T4189] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 114.837183][ T5398] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,inlinecrypt,noquota,noquota,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 114.863485][ T5398] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.737580][ T5339] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.746900][ T5339] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.755963][ T5339] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.765116][ T5339] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.805487][ T5339] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.816037][ T5339] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.824991][ T5339] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.834191][ T5339] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.004992][ T5421] loop4: detected capacity change from 0 to 16 [ 116.040911][ T5421] erofs: (device loop4): mounted with root inode @ nid 36. [ 116.274736][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.289726][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.404524][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.435664][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.532035][ T5448] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.588150][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.598708][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.612254][ T5454] loop1: detected capacity change from 0 to 16 [ 116.734998][ T5454] erofs: (device loop1): mounted with root inode @ nid 36. [ 116.758487][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.771674][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.267338][ T5476] IPVS: set_ctl: invalid protocol: 41743 255.255.255.255:5506 [ 117.284026][ T5449] chnl_net:caif_netlink_parms(): no params data found [ 118.367451][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.424107][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.473579][ T5449] device bridge_slave_0 entered promiscuous mode [ 118.546382][ T5508] input: syz1 as /devices/virtual/input/input10 [ 118.554877][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.567048][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.587247][ T5449] device bridge_slave_1 entered promiscuous mode [ 118.686530][ T5101] Bluetooth: hci1: command 0x0409 tx timeout [ 118.699679][ T5449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.748154][ T5449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.862126][ T5527] loop3: detected capacity change from 0 to 512 [ 118.899239][ T5449] team0: Port device team_slave_0 added [ 118.942621][ T5449] team0: Port device team_slave_1 added [ 118.996973][ T5527] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 119.003587][ T5527] EXT4-fs (loop3): mount failed [ 119.085807][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.124371][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.213105][ T5449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.213738][ T5557] loop3: detected capacity change from 0 to 1024 [ 119.226419][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.251738][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.293250][ T5449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.455751][ T5557] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,noauto_da_alloc,resuid=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 119.489798][ T5449] device hsr_slave_0 entered promiscuous mode [ 119.512504][ T5449] device hsr_slave_1 entered promiscuous mode [ 119.531776][ T5449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.539348][ T5557] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.580539][ T4877] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm kworker/u4:16: lblock 0 mapped to illegal pblock 0 (length 6) [ 119.595520][ T5449] Cannot create hsr debugfs directory [ 119.634646][ T4877] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 119.674383][ T4877] EXT4-fs (loop3): This should not happen!! Data will be lost [ 119.674383][ T4877] [ 119.689431][ T4877] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:16: bg 0: block 112: padding at end of block bitmap is not set [ 119.718984][ T4877] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 119.750651][ T4877] EXT4-fs (loop3): This should not happen!! Data will be lost [ 119.750651][ T4877] [ 119.783264][ T4877] EXT4-fs (loop3): Total free blocks count 0 [ 119.797212][ T4877] EXT4-fs (loop3): Free/Dirty block details [ 119.805691][ T4877] EXT4-fs (loop3): free_blocks=0 [ 119.822947][ T4877] EXT4-fs (loop3): dirty_blocks=48 [ 119.830748][ T5594] trusted_key: encrypted_key: master key parameter is missing [ 119.839442][ T4877] EXT4-fs (loop3): Block reservation details [ 119.853289][ T4877] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 120.099734][ T9] device hsr_slave_0 left promiscuous mode [ 120.112045][ T9] device hsr_slave_1 left promiscuous mode [ 120.129252][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.143534][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.155673][ T5606] loop3: detected capacity change from 0 to 256 [ 120.173547][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.202592][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.221759][ T9] device bridge_slave_1 left promiscuous mode [ 120.229733][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.239936][ T9] device bridge_slave_0 left promiscuous mode [ 120.247245][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.286925][ T9] device veth1_macvtap left promiscuous mode [ 120.305497][ T9] device veth0_macvtap left promiscuous mode [ 120.335427][ T9] device veth1_vlan left promiscuous mode [ 120.354779][ T9] device veth0_vlan left promiscuous mode [ 121.055003][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 121.139508][ T25] audit: type=1326 audit(1791405798.048:5): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=5624 comm="syz.0.468" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feca5151199 code=0x0 [ 121.329479][ T9] team0 (unregistering): Port device team_slave_1 removed [ 121.350798][ T9] team0 (unregistering): Port device team_slave_0 removed [ 121.373187][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.390567][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.445081][ T9] bond0 (unregistering): Released all slaves [ 121.469058][ T5449] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.572377][ T5449] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.618919][ T5449] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.689853][ T5449] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.868721][ T5449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.908510][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.924356][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.988596][ T5449] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.044939][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.057185][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.065382][ T5670] netlink: 'syz.4.481': attribute type 11 has an invalid length. [ 122.073627][ T5670] netlink: 448 bytes leftover after parsing attributes in process `syz.4.481'. [ 122.090122][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.097262][ T4877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.183702][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.204057][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.241024][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.273792][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.280947][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.352463][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.392753][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.409578][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.431986][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.467601][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.502582][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.522563][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.547342][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.573549][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.588976][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.603145][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.783322][ T5688] can: request_module (can-proto-0) failed. [ 122.896422][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.903904][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.944368][ T5449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.108396][ T3573] Bluetooth: hci1: command 0x040f tx timeout [ 123.381903][ T5719] netlink: 100 bytes leftover after parsing attributes in process `syz.3.489'. [ 124.300518][ T5739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 124.388593][ T5739] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.466582][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.488903][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.512119][ T5740] can: request_module (can-proto-0) failed. [ 124.561649][ T5739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 124.589661][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.605924][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.625556][ T5449] device veth0_vlan entered promiscuous mode [ 124.654453][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.678570][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.719744][ T5449] device veth1_vlan entered promiscuous mode [ 124.833501][ T5449] device veth0_macvtap entered promiscuous mode [ 124.859747][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.873577][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.886666][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.905518][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.930048][ T5449] device veth1_macvtap entered promiscuous mode [ 124.948607][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.968315][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.012266][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.060537][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.082324][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.094148][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.142583][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.166397][ T3573] Bluetooth: hci1: command 0x0419 tx timeout [ 125.175380][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.204463][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.239600][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.262387][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.297403][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.324051][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.366587][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.397606][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.420314][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.464072][ T5449] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.486764][ T5449] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.489446][ T5794] can: request_module (can-proto-0) failed. [ 125.505519][ T5449] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.525552][ T5449] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.726072][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'. [ 125.793094][ T5804] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.835325][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 125.890495][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.900453][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.904338][ T5818] netlink: 108 bytes leftover after parsing attributes in process `syz.3.517'. [ 125.928594][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.997805][ T4861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.005653][ T4861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.052455][ T4861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.293227][ T5834] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.039980][ T5841] can: request_module (can-proto-0) failed. [ 127.427543][ T5880] xt_policy: output policy not valid in PREROUTING and INPUT [ 127.656495][ T4864] wlan1: Trigger new scan to find an IBSS to join [ 128.255186][ T5890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.539'. [ 128.435684][ T5897] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 128.636613][ T5920] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(4) [ 128.705023][ T5920] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(9) [ 128.820025][ T5941] ªªªªªª: renamed from vlan0 [ 128.878381][ T5942] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 128.885512][ T5944] can: request_module (can-proto-0) failed. [ 130.028994][ T5975] process 'syz.0.567' launched './file0' with NULL argv: empty string added [ 130.211423][ T5986] can: request_module (can-proto-0) failed. [ 130.450012][ T6009] xt_policy: output policy not valid in PREROUTING and INPUT [ 130.536013][ T6016] sock: sock_timestamping_bind_phc: sock not bind to device [ 130.632547][ T6022] loop3: detected capacity change from 0 to 512 [ 130.658444][ T6022] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 130.871087][ T6022] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 130.885816][ T6029] overlayfs: failed to clone upperpath [ 130.889383][ T6022] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.982132][ T6062] device syzkaller0 entered promiscuous mode [ 132.309645][ T6098] fuse: Bad value for 'fd' [ 132.610638][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.616986][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.208767][ T6132] bridge0: port 3(syz_tun) entered blocking state [ 133.227680][ T6132] bridge0: port 3(syz_tun) entered disabled state [ 133.240359][ T6132] device syz_tun entered promiscuous mode [ 133.296575][ T6135] bridge0: port 3(syz_tun) entered blocking state [ 133.303164][ T6135] bridge0: port 3(syz_tun) entered forwarding state [ 133.507741][ T6143] xt_policy: output policy not valid in PREROUTING and INPUT [ 133.524104][ T6143] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 133.679512][ T6164] loop3: detected capacity change from 0 to 512 [ 133.765518][ T6164] EXT4-fs (loop3): Unrecognized mount option "quota.dax=always" or missing value [ 133.973521][ T6176] fuse: Bad value for 'fd' [ 134.167597][ T6185] netlink: 'syz.5.639': attribute type 1 has an invalid length. [ 134.557176][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 135.419617][ T6244] xt_policy: output policy not valid in PREROUTING and INPUT [ 135.561389][ T6253] bridge0: port 1(syz_tun) entered blocking state [ 135.580469][ T6253] bridge0: port 1(syz_tun) entered disabled state [ 135.613850][ T6253] device syz_tun entered promiscuous mode [ 135.645970][ T6253] bridge0: port 1(syz_tun) entered blocking state [ 135.652764][ T6253] bridge0: port 1(syz_tun) entered forwarding state [ 135.707793][ T6256] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 136.023739][ T6270] netlink: 64 bytes leftover after parsing attributes in process `syz.1.653'. [ 136.160573][ T6279] loop3: detected capacity change from 0 to 512 [ 136.244190][ T6279] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.260544][ T6279] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.281486][ T6279] EXT4-fs (loop3): shut down requested (1) [ 136.334239][ T6298] xt_policy: output policy not valid in PREROUTING and INPUT [ 137.925301][ T25] audit: type=1326 audit(1791405814.828:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd251712199 code=0x7ffc0000 [ 137.951166][ T25] audit: type=1326 audit(1791405814.828:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd251712199 code=0x7ffc0000 [ 137.984487][ T25] audit: type=1326 audit(1791405814.828:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd251712199 code=0x7ffc0000 [ 138.015207][ T25] audit: type=1326 audit(1791405814.828:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd251712199 code=0x7ffc0000 [ 138.051519][ T25] audit: type=1326 audit(1791405814.828:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6331 comm="syz.1.672" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd251712199 code=0x7ffc0000 [ 138.196271][ T6343] can: request_module (can-proto-0) failed. [ 139.134732][ T6280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.334115][ T6356] fuse: Bad value for 'fd' [ 139.938011][ T6384] loop3: detected capacity change from 0 to 512 [ 140.006541][ T6382] can: request_module (can-proto-0) failed. [ 140.023293][ T6384] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.689: bg 0: block 385: padding at end of block bitmap is not set [ 140.168564][ T6384] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 140.179203][ T6384] EXT4-fs (loop3): 2 truncates cleaned up [ 140.185042][ T6384] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.217309][ T6399] xt_policy: output policy not valid in PREROUTING and INPUT [ 140.302663][ T6404] syz.4.693 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 142.185759][ T6441] can: request_module (can-proto-0) failed. [ 142.227760][ T6452] xt_policy: output policy not valid in PREROUTING and INPUT [ 143.097023][ T6468] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 143.700805][ T6499] xt_policy: output policy not valid in PREROUTING and INPUT [ 144.026980][ T6520] fuse: Bad value for 'fd' [ 144.253885][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 144.500670][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 144.523330][ T6533] netlink: 'syz.3.730': attribute type 18 has an invalid length. [ 144.708751][ T6548] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 144.723341][ T6549] xt_policy: output policy not valid in PREROUTING and INPUT [ 144.825343][ T6548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.863933][ T6552] bond1: (slave veth3): Enslaving as an active interface with a down link [ 144.889608][ T6558] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 144.923591][ T6558] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.933520][ T6558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.980639][ T6548] device veth0_virt_wifi entered promiscuous mode [ 145.030568][ T6548] bond1: (slave veth0_virt_wifi): making interface the new active one [ 145.060682][ T6548] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 145.093929][ T6565] @0Ù: renamed from bond_slave_1 [ 145.107246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 146.298581][ T6631] loop5: detected capacity change from 0 to 1024 [ 146.356308][ T6631] EXT4-fs (loop5): Ignoring removed oldalloc option [ 146.385096][ T6631] EXT4-fs (loop5): Ignoring removed orlov option [ 146.512579][ T6631] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,oldalloc,orlov,quota,,errors=continue. Quota mode: writeback. [ 146.536527][ T6631] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.605884][ T6631] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm syz.5.758: lblock 0 mapped to illegal pblock 0 (length 6) [ 146.628012][ T6631] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 146.641273][ T6631] EXT4-fs (loop5): This should not happen!! Data will be lost [ 146.641273][ T6631] [ 146.719280][ T6224] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:19: bg 0: block 112: padding at end of block bitmap is not set [ 146.804777][ T6224] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 146.913060][ T6224] EXT4-fs (loop5): This should not happen!! Data will be lost [ 146.913060][ T6224] [ 146.962383][ T6224] EXT4-fs (loop5): Total free blocks count 0 [ 146.978623][ T6224] EXT4-fs (loop5): Free/Dirty block details [ 146.992765][ T6224] EXT4-fs (loop5): free_blocks=0 [ 147.011843][ T6224] EXT4-fs (loop5): dirty_blocks=48 [ 147.020669][ T6224] EXT4-fs (loop5): Block reservation details [ 147.028191][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.778'. [ 147.034704][ T6224] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 147.704455][ T6759] loop5: detected capacity change from 0 to 512 [ 147.728537][ T6759] EXT4-fs (loop5): can't mount with commit=1048582, fs mounted w/o journal [ 148.114155][ T6780] overlayfs: failed to clone upperpath [ 148.345578][ T6803] FAULT_INJECTION: forcing a failure. [ 148.345578][ T6803] name fail_futex, interval 1, probability 0, space 0, times 1 [ 148.362564][ T6803] CPU: 0 PID: 6803 Comm: syz.5.805 Not tainted syzkaller #0 [ 148.369971][ T6803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.380041][ T6803] Call Trace: [ 148.383323][ T6803] [ 148.386255][ T6803] dump_stack_lvl+0x188/0x250 [ 148.390968][ T6803] ? show_regs_print_info+0x20/0x20 [ 148.396182][ T6803] ? load_image+0x410/0x410 [ 148.400696][ T6803] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 148.406692][ T6803] ? lock_chain_count+0x20/0x20 [ 148.411557][ T6803] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 148.417037][ T6803] should_fail+0x383/0x4b0 [ 148.421478][ T6803] get_futex_key+0x1a1/0x12d0 [ 148.426174][ T6803] ? __lock_acquire+0x13b3/0x7d40 [ 148.431217][ T6803] ? futex_wait_restart+0x250/0x250 [ 148.436441][ T6803] futex_wake+0x101/0x540 [ 148.440797][ T6803] ? futex_wait+0x680/0x680 [ 148.445490][ T6803] ? verify_lock_unused+0x140/0x140 [ 148.450817][ T6803] ? verify_lock_unused+0x140/0x140 [ 148.456043][ T6803] do_futex+0xd83/0x12b0 [ 148.460316][ T6803] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 148.465972][ T6803] ? futex_exit_release+0x1c0/0x1c0 [ 148.471189][ T6803] ? __context_tracking_exit+0x4c/0x80 [ 148.476784][ T6803] __se_sys_futex+0x389/0x420 [ 148.481496][ T6803] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 148.487491][ T6803] ? __x64_sys_futex+0xf0/0xf0 [ 148.492278][ T6803] ? __x64_sys_futex+0x1d/0xf0 [ 148.497055][ T6803] do_syscall_64+0x4c/0xa0 [ 148.501483][ T6803] ? clear_bhb_loop+0x30/0x80 [ 148.506170][ T6803] ? clear_bhb_loop+0x30/0x80 [ 148.510859][ T6803] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.516762][ T6803] RIP: 0033:0x7f9305eac199 [ 148.521194][ T6803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.540892][ T6803] RSP: 002b:00007f93041040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.549324][ T6803] RAX: ffffffffffffffda RBX: 00007f9306133fa8 RCX: 00007f9305eac199 [ 148.557309][ T6803] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9306133fac [ 148.565302][ T6803] RBP: 00007f9306133fa0 R08: 00124ef739665696 R09: 0000000000000000 [ 148.573288][ T6803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.581272][ T6803] R13: 00007f9306134038 R14: 00007ffc7ea16730 R15: 00007ffc7ea16818 [ 148.589291][ T6803] [ 148.664512][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'. [ 148.679566][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 148.748419][ T6834] 9pnet: Insufficient options for proto=fd [ 148.763700][ T6835] xt_policy: output policy not valid in PREROUTING and INPUT [ 148.832364][ T6839] loop5: detected capacity change from 0 to 16 [ 148.872867][ T6839] erofs: (device loop5): mounted with root inode @ nid 36. [ 150.024274][ T6868] netlink: 'syz.0.828': attribute type 13 has an invalid length. [ 150.276861][ T6870] netlink: 'syz.5.834': attribute type 1 has an invalid length. [ 150.589100][ T6870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.642447][ T6871] bond1: (slave veth3): Enslaving as an active interface with a down link [ 150.661586][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.675610][ T6873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.028773][ T6870] device veth0_virt_wifi entered promiscuous mode [ 151.535815][ T6870] bond1: (slave veth0_virt_wifi): making interface the new active one [ 151.548410][ T6870] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 151.565122][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 151.679230][ T6898] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 151.715898][ T6898] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 151.797950][ T6909] 9pnet: Insufficient options for proto=fd [ 151.810941][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 152.017754][ T6922] overlayfs: failed to clone upperpath [ 152.068082][ T6925] overlayfs: failed to resolve './file0': -2 [ 152.882647][ T6937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.857'. [ 153.594511][ T6953] 9pnet: Insufficient options for proto=fd [ 153.839914][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 155.654875][ T6989] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 155.813434][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 155.993816][ T7005] xt_policy: output policy not valid in PREROUTING and INPUT [ 156.237928][ T7015] netlink: 72 bytes leftover after parsing attributes in process `syz.0.890'. [ 156.733592][ T7039] xt_policy: output policy not valid in PREROUTING and INPUT [ 157.079170][ T7054] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 158.638372][ T25] audit: type=1326 audit(1791405835.548:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.1.910" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd251712199 code=0x7ffc0000 [ 158.710216][ T25] audit: type=1326 audit(1791405835.568:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.1.910" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd251712199 code=0x7ffc0000 [ 158.727245][ T7080] IPVS: Unknown mcast interface: veth0_to_bond [ 158.765046][ T25] audit: type=1326 audit(1791405835.578:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.1.910" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd251712199 code=0x7ffc0000 [ 158.836231][ T25] audit: type=1326 audit(1791405835.578:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.1.910" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd251712199 code=0x7ffc0000 [ 158.884482][ T25] audit: type=1326 audit(1791405835.598:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.1.910" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd251712199 code=0x7ffc0000 [ 158.908781][ T25] audit: type=1326 audit(1791405835.598:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.1.910" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd251712199 code=0x7ffc0000 [ 159.822212][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.5.926'. [ 159.887448][ T7116] xt_policy: output policy not valid in PREROUTING and INPUT [ 160.129329][ T25] audit: type=1326 audit(1791405837.038:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.0.932" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca5151199 code=0x7ffc0000 [ 160.780759][ T25] audit: type=1326 audit(1791405837.068:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.0.932" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca5151199 code=0x7ffc0000 [ 160.926739][ T25] audit: type=1326 audit(1791405837.218:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.0.932" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca5151199 code=0x7ffc0000 [ 160.975465][ T25] audit: type=1326 audit(1791405837.228:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.0.932" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7feca5151199 code=0x7ffc0000 [ 162.970116][ T7171] xt_policy: output policy not valid in PREROUTING and INPUT [ 162.998194][ T7172] 9pnet: Insufficient options for proto=fd [ 163.213082][ T7194] netlink: 'syz.4.955': attribute type 4 has an invalid length. [ 163.231239][ T7194] netlink: 17 bytes leftover after parsing attributes in process `syz.4.955'. [ 163.345461][ T7211] xt_policy: output policy not valid in PREROUTING and INPUT [ 163.354413][ T7211] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.463244][ T7217] 9pnet: Insufficient options for proto=fd [ 163.555212][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.968'. [ 164.226754][ T7249] 9pnet: Insufficient options for proto=fd [ 164.236446][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 165.023227][ T7272] netlink: 24 bytes leftover after parsing attributes in process `syz.4.984'. [ 165.223161][ T7290] 9pnet: Insufficient options for proto=fd [ 165.320240][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'. [ 165.658925][ T7324] 9pnet: Insufficient options for proto=fd [ 165.812904][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'. [ 165.912881][ T7349] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 167.304608][ T7372] 9pnet: Insufficient options for proto=fd [ 167.725945][ T7378] bridge0: port 1(syz_tun) entered disabled state [ 168.744425][ T7378] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.753633][ T7378] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.762664][ T7378] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.781397][ T7378] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.936315][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'. [ 169.901945][ T7421] 9pnet: Insufficient options for proto=fd [ 169.958264][ T7427] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.967156][ T7427] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.976413][ T7427] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.985782][ T7427] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.002112][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1042'. [ 170.241523][ T7442] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 171.439349][ T7455] 9pnet: Insufficient options for proto=fd [ 171.517174][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.542324][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.625037][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 172.065908][ T7470] fuse: Bad value for 'fd' [ 172.350251][ T7473] xt_policy: output policy not valid in PREROUTING and INPUT [ 172.777253][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 173.001711][ T7508] xt_policy: output policy not valid in PREROUTING and INPUT [ 173.916032][ T7529] 9pnet: Insufficient options for proto=fd [ 174.002665][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 174.095944][ T7543] xt_policy: output policy not valid in PREROUTING and INPUT [ 174.187991][ T7547] Illegal XDP return value 4294967274, expect packet loss! [ 174.622110][ T7552] futex_wake_op: syz.4.1091 tries to shift op by -1; fix this program [ 175.122659][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 175.317290][ T7580] xt_policy: output policy not valid in PREROUTING and INPUT [ 176.155865][ T25] kauditd_printk_skb: 5 callbacks suppressed [ 176.155877][ T25] audit: type=1326 audit(1791405853.058:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.5.1112" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9305eac199 code=0x7ffc0000 [ 176.250308][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1113'. [ 176.275529][ T25] audit: type=1326 audit(1791405853.108:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.5.1112" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9305eac199 code=0x7ffc0000 [ 176.299850][ T25] audit: type=1326 audit(1791405853.108:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.5.1112" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9305eac199 code=0x7ffc0000 [ 176.466470][ T7620] xt_policy: output policy not valid in PREROUTING and INPUT [ 177.533515][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 177.618212][ T7653] xt_policy: output policy not valid in PREROUTING and INPUT [ 177.909752][ T4190] ================================================================== [ 177.918271][ T4190] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12cf/0x3ca0 [ 177.926097][ T4190] Read of size 1 at addr ffff88807725d40a by task kworker/u5:2/4190 [ 177.934092][ T4190] [ 177.936423][ T4190] CPU: 1 PID: 4190 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 177.943978][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 177.954044][ T4190] Workqueue: hci4 hci_rx_work [ 177.958734][ T4190] Call Trace: [ 177.962102][ T4190] [ 177.965034][ T4190] dump_stack_lvl+0x188/0x250 [ 177.969728][ T4190] ? show_regs_print_info+0x20/0x20 [ 177.975040][ T4190] ? load_image+0x410/0x410 [ 177.979646][ T4190] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 177.985225][ T4190] print_address_description+0x60/0x2d0 [ 177.990877][ T4190] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 177.996016][ T4190] kasan_report+0xdf/0x130 [ 178.000452][ T4190] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 178.005590][ T4190] hci_le_meta_evt+0x12cf/0x3ca0 [ 178.010545][ T4190] ? hci_event_packet+0x363/0x1310 [ 178.015769][ T4190] ? __lock_acquire+0x7d40/0x7d40 [ 178.020835][ T4190] ? hci_remote_host_features_evt+0x240/0x240 [ 178.026917][ T4190] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 178.032566][ T4190] ? mark_lock+0x94/0x320 [ 178.036907][ T4190] ? mutex_unlock+0x10/0x10 [ 178.041423][ T4190] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 178.047476][ T4190] ? lock_chain_count+0x20/0x20 [ 178.052344][ T4190] ? __rwlock_init+0x140/0x140 [ 178.057129][ T4190] hci_event_packet+0xe0b/0x1310 [ 178.062173][ T4190] ? _raw_spin_unlock+0x40/0x40 [ 178.067039][ T4190] ? rcu_lock_release+0x20/0x20 [ 178.072022][ T4190] ? hci_send_to_monitor+0x9c/0x4a0 [ 178.077242][ T4190] hci_rx_work+0x255/0xa10 [ 178.081686][ T4190] process_one_work+0x867/0xff0 [ 178.086559][ T4190] ? worker_detach_from_pool+0x240/0x240 [ 178.092196][ T4190] ? lockdep_hardirqs_off+0x70/0x100 [ 178.097498][ T4190] ? _raw_spin_lock_irq+0xb7/0xf0 [ 178.102533][ T4190] ? _raw_spin_lock_irqsave+0x100/0x100 [ 178.108089][ T4190] ? wq_worker_running+0x97/0x170 [ 178.113128][ T4190] worker_thread+0xad7/0x12a0 [ 178.117865][ T4190] kthread+0x42e/0x520 [ 178.121934][ T4190] ? rcu_lock_release+0x20/0x20 [ 178.126793][ T4190] ? kthread_blkcg+0xd0/0xd0 [ 178.131397][ T4190] ret_from_fork+0x1f/0x30 [ 178.135857][ T4190] [ 178.138879][ T4190] [ 178.141204][ T4190] Allocated by task 7676: [ 178.145542][ T4190] __kasan_kmalloc+0xaf/0xe0 [ 178.150146][ T4190] __alloc_skb+0x22c/0x750 [ 178.154572][ T4190] vhci_write+0xbd/0x440 [ 178.158833][ T4190] vfs_write+0x748/0xd70 [ 178.163102][ T4190] ksys_write+0x153/0x260 [ 178.167440][ T4190] do_syscall_64+0x4c/0xa0 [ 178.171846][ T4190] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.177723][ T4190] [ 178.180059][ T4190] Last potentially related work creation: [ 178.185752][ T4190] kasan_save_stack+0x35/0x60 [ 178.190411][ T4190] kasan_record_aux_stack+0xb8/0x100 [ 178.195678][ T4190] kvfree_call_rcu+0x105/0x7f0 [ 178.200437][ T4190] neigh_remove_one+0x4e0/0x5e0 [ 178.205300][ T4190] ___neigh_create+0x48f/0x2210 [ 178.210160][ T4190] ip6_finish_output2+0xacc/0x1640 [ 178.215281][ T4190] ndisc_send_skb+0xb7c/0x1410 [ 178.220052][ T4190] ndisc_send_ns+0x662/0x860 [ 178.224646][ T4190] addrconf_dad_work+0xa2e/0x1530 [ 178.229673][ T4190] process_one_work+0x867/0xff0 [ 178.234529][ T4190] worker_thread+0xad7/0x12a0 [ 178.239209][ T4190] kthread+0x42e/0x520 [ 178.243276][ T4190] ret_from_fork+0x1f/0x30 [ 178.247690][ T4190] [ 178.250016][ T4190] The buggy address belongs to the object at ffff88807725d000 [ 178.250016][ T4190] which belongs to the cache kmalloc-1k of size 1024 [ 178.264153][ T4190] The buggy address is located 10 bytes to the right of [ 178.264153][ T4190] 1024-byte region [ffff88807725d000, ffff88807725d400) [ 178.277950][ T4190] The buggy address belongs to the page: [ 178.283684][ T4190] page:ffffea0001dc9600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77258 [ 178.293838][ T4190] head:ffffea0001dc9600 order:3 compound_mapcount:0 compound_pincount:0 [ 178.302308][ T4190] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 178.310314][ T4190] raw: 00fff00000010200 ffffea0001dd0600 0000000300000003 ffff888016c41dc0 [ 178.319650][ T4190] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 178.328430][ T4190] page dumped because: kasan: bad access detected [ 178.334855][ T4190] page_owner tracks the page as allocated [ 178.340575][ T4190] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4189, ts 67237234204, free_ts 67148036806 [ 178.361340][ T4190] get_page_from_freelist+0x24f6/0x2670 [ 178.366990][ T4190] __alloc_pages+0x1ee/0x480 [ 178.371706][ T4190] new_slab+0xc0/0x4b0 [ 178.375785][ T4190] ___slab_alloc+0x807/0xdd0 [ 178.380395][ T4190] __kmalloc_node+0x142/0x3a0 [ 178.385208][ T4190] qdisc_alloc+0x97/0xae0 [ 178.389898][ T4190] qdisc_create_dflt+0x5f/0x410 [ 178.394746][ T4190] dev_activate+0x33d/0x1330 [ 178.399337][ T4190] __dev_open+0x33b/0x430 [ 178.403683][ T4190] __dev_change_flags+0x1e4/0x6a0 [ 178.408801][ T4190] dev_change_flags+0x78/0x1a0 [ 178.413576][ T4190] do_setlink+0xca4/0x29d0 [ 178.418004][ T4190] rtnl_newlink+0x15bb/0x1920 [ 178.422694][ T4190] rtnetlink_rcv_msg+0x7f1/0xf10 [ 178.427724][ T4190] netlink_rcv_skb+0x1e9/0x430 [ 178.432497][ T4190] netlink_unicast+0x78f/0x940 [ 178.437264][ T4190] page last free stack trace: [ 178.441942][ T4190] free_unref_page_prepare+0x637/0x6c0 [ 178.447420][ T4190] free_unref_page+0x8f/0x2a0 [ 178.452108][ T4190] __unfreeze_partials+0x188/0x1e0 [ 178.457228][ T4190] put_cpu_partial+0x12d/0x190 [ 178.461994][ T4190] qlist_free_all+0x35/0x90 [ 178.466497][ T4190] kasan_quarantine_reduce+0x150/0x160 [ 178.471954][ T4190] __kasan_slab_alloc+0x2f/0xc0 [ 178.476879][ T4190] slab_post_alloc_hook+0x4c/0x380 [ 178.481994][ T4190] __kmalloc+0x189/0x340 [ 178.486237][ T4190] fib6_info_alloc+0x2e/0xe0 [ 178.490827][ T4190] ip6_route_info_create+0x455/0x1220 [ 178.496205][ T4190] ip6_route_add+0x24/0x130 [ 178.500718][ T4190] addrconf_add_dev+0x295/0x3c0 [ 178.505570][ T4190] addrconf_init_auto_addrs+0x633/0xab0 [ 178.511116][ T4190] addrconf_notify+0xa6b/0xf20 [ 178.515891][ T4190] raw_notifier_call_chain+0xcb/0x160 [ 178.521278][ T4190] [ 178.523789][ T4190] Memory state around the buggy address: [ 178.529413][ T4190] ffff88807725d300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 178.537478][ T4190] ffff88807725d380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 178.545536][ T4190] >ffff88807725d400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 178.553593][ T4190] ^ [ 178.558078][ T4190] ffff88807725d480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 178.566146][ T4190] ffff88807725d500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 178.574209][ T4190] ================================================================== [ 178.582268][ T4190] Disabling lock debugging due to kernel taint [ 178.614946][ T4190] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 178.622182][ T4190] CPU: 0 PID: 4190 Comm: kworker/u5:2 Tainted: G B syzkaller #0 [ 178.631214][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 178.641272][ T4190] Workqueue: hci4 hci_rx_work [ 178.645977][ T4190] Call Trace: [ 178.649252][ T4190] [ 178.652179][ T4190] dump_stack_lvl+0x188/0x250 [ 178.656861][ T4190] ? show_regs_print_info+0x20/0x20 [ 178.662061][ T4190] ? load_image+0x410/0x410 [ 178.666575][ T4190] panic+0x2f8/0x850 [ 178.670474][ T4190] ? bpf_jit_dump+0xd0/0xd0 [ 178.674989][ T4190] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 178.680979][ T4190] ? _raw_spin_unlock+0x40/0x40 [ 178.685828][ T4190] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 178.690957][ T4190] check_panic_on_warn+0x80/0xa0 [ 178.695877][ T4190] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 178.700966][ T4190] end_report+0x6d/0xf0 [ 178.705105][ T4190] kasan_report+0x102/0x130 [ 178.709760][ T4190] ? hci_le_meta_evt+0x12cf/0x3ca0 [ 178.714852][ T4190] hci_le_meta_evt+0x12cf/0x3ca0 [ 178.719776][ T4190] ? hci_event_packet+0x363/0x1310 [ 178.724895][ T4190] ? __lock_acquire+0x7d40/0x7d40 [ 178.729904][ T4190] ? hci_remote_host_features_evt+0x240/0x240 [ 178.735956][ T4190] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 178.741570][ T4190] ? mark_lock+0x94/0x320 [ 178.745877][ T4190] ? mutex_unlock+0x10/0x10 [ 178.750366][ T4190] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 178.756366][ T4190] ? lock_chain_count+0x20/0x20 [ 178.761213][ T4190] ? __rwlock_init+0x140/0x140 [ 178.765958][ T4190] hci_event_packet+0xe0b/0x1310 [ 178.770878][ T4190] ? _raw_spin_unlock+0x40/0x40 [ 178.775713][ T4190] ? rcu_lock_release+0x20/0x20 [ 178.780544][ T4190] ? hci_send_to_monitor+0x9c/0x4a0 [ 178.785760][ T4190] hci_rx_work+0x255/0xa10 [ 178.790166][ T4190] process_one_work+0x867/0xff0 [ 178.795001][ T4190] ? worker_detach_from_pool+0x240/0x240 [ 178.800613][ T4190] ? lockdep_hardirqs_off+0x70/0x100 [ 178.805884][ T4190] ? _raw_spin_lock_irq+0xb7/0xf0 [ 178.810912][ T4190] ? _raw_spin_lock_irqsave+0x100/0x100 [ 178.816467][ T4190] ? wq_worker_running+0x97/0x170 [ 178.821492][ T4190] worker_thread+0xad7/0x12a0 [ 178.826196][ T4190] kthread+0x42e/0x520 [ 178.830251][ T4190] ? rcu_lock_release+0x20/0x20 [ 178.835112][ T4190] ? kthread_blkcg+0xd0/0xd0 [ 178.839789][ T4190] ret_from_fork+0x1f/0x30 [ 178.844199][ T4190] [ 178.847440][ T4190] Kernel Offset: disabled [ 178.851758][ T4190] Rebooting in 86400 seconds..