last executing test programs: 4.046322394s ago: executing program 3 (id=212): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x1, 0x2}, 0x20) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, 0x2}, 0x20) 3.822420669s ago: executing program 3 (id=217): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0xfffffffd, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x1, 0x80008}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008040}, 0xc4) 3.682544942s ago: executing program 3 (id=221): getpid() r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014"], 0x78}}, 0x400c084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 3.534513795s ago: executing program 3 (id=225): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000001000ffff27bd7000d2dc74286df85dfb", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500480012800e00010069703667726574617000000034000280140007000000000800000000ffffffff370dfffe14000600fe"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.395773887s ago: executing program 3 (id=227): socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0xfffe, 0x40002102, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) 2.222413172s ago: executing program 0 (id=242): ioprio_set$uid(0x3, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$rfkill(r0, 0x0, 0x0) 2.173675944s ago: executing program 2 (id=243): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x782, &(0x7f0000000880)="$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") 2.113644795s ago: executing program 3 (id=244): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getpid() r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x174, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd699eebf9013e06fffe800000000000000000000000000039fe8000000000000000000000000000aa4e224e24", @ANYRES32=0x41424344, @ANYBLOB="61c2fffb90780f"], 0x0) 2.066662396s ago: executing program 0 (id=245): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @private1, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0xf, "aede62497cf56c9ab5bfd7b842f6b7"}}) 2.003727468s ago: executing program 4 (id=247): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xb, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) 1.940334809s ago: executing program 4 (id=248): ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x32}, 0x2, @in6=@local, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.774488062s ago: executing program 0 (id=250): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4000, &(0x7f0000010300)=ANY=[], 0x1, 0x11f0, &(0x7f0000001b00)="$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") ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x46}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 1.688147304s ago: executing program 2 (id=251): io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = syz_io_uring_setup(0x6621, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x1, 0x15c}, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000000)) io_cancel(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0) 1.673622824s ago: executing program 4 (id=252): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB], 0x48) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040), 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x7, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.554995847s ago: executing program 1 (id=254): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x194, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(camellia)\x00'}, 0x80, "1a000b000000366a6a849a7390450024"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) 1.469233429s ago: executing program 4 (id=255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) read$watch_queue(r1, &(0x7f0000000540)=""/222, 0xe80) 1.262703313s ago: executing program 0 (id=256): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fstat(r1, &(0x7f0000000000)) 1.167846945s ago: executing program 2 (id=257): r0 = io_uring_setup(0x3667, &(0x7f0000000140)={0x0, 0x94d3, 0x1000, 0x0, 0x3e0}) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f00000001c0)={0xf, 0x1}, 0x0) 1.137827756s ago: executing program 0 (id=258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x18, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 898.651441ms ago: executing program 0 (id=259): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0xe}) sched_setscheduler(r0, 0x2, 0x0) epoll_pwait2(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 851.746722ms ago: executing program 2 (id=260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0088a8ffffffffffffaaaaaaaaaabb8100040086dd67c182f2001c06"], 0x5a) 481.45561ms ago: executing program 1 (id=261): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x20000) ioctl$BLKRASET(r0, 0x1262, 0x0) 374.616622ms ago: executing program 1 (id=262): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d43, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x3}]}}, @TCA_U32_POLICE={0x4}]}}]}, 0x60}}, 0x24040084) 324.283233ms ago: executing program 4 (id=263): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4) r3 = socket(0x11, 0x3, 0x0) setsockopt(r3, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vlan1\x00', 0x0}) sendmsg(r3, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 276.549644ms ago: executing program 1 (id=264): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x6020400) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) 186.608956ms ago: executing program 2 (id=265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000030601030000000000000000000000000500010007000000f3709de9584bb93bd4bb"], 0x1c}}, 0x0) 143.024877ms ago: executing program 2 (id=266): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x2, 0x20, 0x68, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@rr={0x7, 0x3, 0xb2}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x1}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 127.633697ms ago: executing program 1 (id=267): prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) 6.51669ms ago: executing program 4 (id=268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000c9de00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=269): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x40000100, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc"], 0x120}}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 30.918258][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.928069][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. syzkaller login: [ 47.985377][ T4176] cgroup: Unknown subsys name 'net' [ 48.115496][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.246059][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.478479][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 50.643616][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.651339][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.659523][ T4192] device bridge_slave_0 entered promiscuous mode [ 50.668186][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 50.677488][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 50.692998][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.700057][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.708715][ T4192] device bridge_slave_1 entered promiscuous mode [ 50.729322][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 50.747100][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 50.815482][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.852665][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.873670][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.881850][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.889478][ T4190] device bridge_slave_0 entered promiscuous mode [ 50.913998][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.921267][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.928828][ T4189] device bridge_slave_0 entered promiscuous mode [ 50.936178][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.943454][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.951803][ T4190] device bridge_slave_1 entered promiscuous mode [ 50.969874][ T4192] team0: Port device team_slave_0 added [ 50.977485][ T4192] team0: Port device team_slave_1 added [ 50.988458][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.995739][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.003543][ T4189] device bridge_slave_1 entered promiscuous mode [ 51.026706][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.033943][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.041862][ T4196] device bridge_slave_0 entered promiscuous mode [ 51.053815][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.060985][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.068642][ T4196] device bridge_slave_1 entered promiscuous mode [ 51.087884][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.110339][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.117290][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.143634][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.162767][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.169832][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.178124][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.186639][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.203551][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.213264][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.220385][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.246861][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.267501][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.274842][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.282671][ T4191] device bridge_slave_1 entered promiscuous mode [ 51.297304][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.313788][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.325015][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.339991][ T4190] team0: Port device team_slave_0 added [ 51.360625][ T4189] team0: Port device team_slave_0 added [ 51.379733][ T4190] team0: Port device team_slave_1 added [ 51.391963][ T4189] team0: Port device team_slave_1 added [ 51.399219][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.419165][ T4196] team0: Port device team_slave_0 added [ 51.427502][ T4196] team0: Port device team_slave_1 added [ 51.438513][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.452343][ T4192] device hsr_slave_0 entered promiscuous mode [ 51.459089][ T4192] device hsr_slave_1 entered promiscuous mode [ 51.471454][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.478519][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.504698][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.545227][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.552476][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.578655][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.590411][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.597447][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.623366][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.634774][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.641850][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.668068][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.681757][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.688706][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.714999][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.737601][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.744618][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.771092][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.790968][ T4191] team0: Port device team_slave_0 added [ 51.819241][ T4191] team0: Port device team_slave_1 added [ 51.859552][ T4189] device hsr_slave_0 entered promiscuous mode [ 51.866307][ T4189] device hsr_slave_1 entered promiscuous mode [ 51.875316][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.883177][ T4189] Cannot create hsr debugfs directory [ 51.919946][ T4196] device hsr_slave_0 entered promiscuous mode [ 51.926886][ T4196] device hsr_slave_1 entered promiscuous mode [ 51.933870][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.941535][ T4196] Cannot create hsr debugfs directory [ 51.947394][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.954634][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.980547][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.998032][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.005109][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.032435][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.045783][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.052789][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.059254][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.066881][ T4190] Cannot create hsr debugfs directory [ 52.138934][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.145998][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.152900][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.161064][ T4191] Cannot create hsr debugfs directory [ 52.301110][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 52.301110][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 52.301571][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 52.319766][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 52.326197][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 52.385092][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.395552][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.412470][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.428837][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.468387][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.477158][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.486999][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.503757][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.568578][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.577855][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.588390][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.598026][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.617725][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.667118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.676995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.689580][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.700748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.709278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.718637][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.725885][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.751847][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.772224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.780521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.789103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.797847][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.804928][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.822063][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.833520][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.856846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.865675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.874897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.886959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.895817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.904723][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.916659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.925630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.937232][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.959007][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.966359][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.980064][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.987739][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.011991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.021914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.029489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.038079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.046948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.055034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.065682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.074640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.083425][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.090521][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.100515][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.109591][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.120607][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.138324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.146288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.155863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.164259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.174725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.183310][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.190382][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.198188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.206980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.215721][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.222795][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.247070][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.255926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.271779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.281418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.289748][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.296830][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.306766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.347112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.359566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.368374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.378334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.388841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.397889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.407050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.419599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.427606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.436551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.445172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.454133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.466596][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.477223][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.503144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.513011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.522294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.532038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.542753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.551698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.559911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.601334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.609582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.620845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.629227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.638466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.651190][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.664175][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.681426][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.715158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.731017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.747615][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.769018][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.789515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.799083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.814992][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.822101][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.832939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.842905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.851654][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.858684][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.866686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.875451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.899053][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.918048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.927330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.936316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.948227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.956105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.963635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.972397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.981578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.990007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.999029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.006754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.014272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.022235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.029870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.042903][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.052888][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.077584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.086373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.121387][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.135448][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.144673][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.151763][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.162977][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.171828][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.180083][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.187185][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.194919][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.205329][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.213749][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.222311][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.231368][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.239895][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.248549][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.261446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.269866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.298939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.321885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.329740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.339832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.349783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.371751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.380662][ T26] Bluetooth: hci2: command 0x041b tx timeout [ 54.380744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.386673][ T26] Bluetooth: hci3: command 0x041b tx timeout [ 54.395405][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 54.406894][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 54.415082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.422456][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 54.429388][ T4192] device veth0_vlan entered promiscuous mode [ 54.443104][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.459873][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.483215][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.494283][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.503346][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.512300][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.520685][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.528930][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.539854][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.548109][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.556943][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.568137][ T4192] device veth1_vlan entered promiscuous mode [ 54.581508][ T4190] device veth0_vlan entered promiscuous mode [ 54.616476][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.626180][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.634451][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.645286][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.654596][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.677275][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.692544][ T4190] device veth1_vlan entered promiscuous mode [ 54.706392][ T4192] device veth0_macvtap entered promiscuous mode [ 54.741145][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.749843][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.762564][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.771992][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.780719][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.799452][ T4192] device veth1_macvtap entered promiscuous mode [ 54.816156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.825045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.834457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.846328][ T4190] device veth0_macvtap entered promiscuous mode [ 54.863869][ T4189] device veth0_vlan entered promiscuous mode [ 54.874910][ T4196] device veth0_vlan entered promiscuous mode [ 54.885913][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.894118][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.902595][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.912526][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.919934][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.927670][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.936202][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.944875][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.952684][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.960715][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.968325][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.978842][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.989851][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.001545][ T4189] device veth1_vlan entered promiscuous mode [ 55.014030][ T4190] device veth1_macvtap entered promiscuous mode [ 55.021711][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.029643][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.039341][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.048038][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.059388][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.068018][ T4196] device veth1_vlan entered promiscuous mode [ 55.087996][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.099237][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.113765][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.123793][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.134853][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.146284][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.153730][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.162022][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.169918][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.178941][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.188894][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.197481][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.206058][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.215336][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.225926][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.234869][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.243937][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.252672][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.283343][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.292938][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.301961][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.310888][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.331536][ T4189] device veth0_macvtap entered promiscuous mode [ 55.342459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.350968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.359446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.369224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.378250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.389472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.397788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.406334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.436090][ T4196] device veth0_macvtap entered promiscuous mode [ 55.446574][ T4189] device veth1_macvtap entered promiscuous mode [ 55.464724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.474700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.483174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.492259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.500928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.508622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.521919][ T4191] device veth0_vlan entered promiscuous mode [ 55.532596][ T4196] device veth1_macvtap entered promiscuous mode [ 55.566903][ T4191] device veth1_vlan entered promiscuous mode [ 55.592389][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.604486][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.614614][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.625800][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.636898][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.647043][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.657519][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.669319][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.679903][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.691668][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.708525][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.717602][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.726855][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.735844][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.750524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.758442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.768531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.777242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.786440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.795316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.809931][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.821780][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.832158][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.842877][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.852842][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.863590][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.875073][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.906114][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.917345][ T532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.927347][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.938148][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.948153][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.958789][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.968833][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.979486][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.993224][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.011780][ T532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.030837][ T532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.039275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.048561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.058160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.066964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.075374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.099476][ T4191] device veth0_macvtap entered promiscuous mode [ 56.110679][ T4191] device veth1_macvtap entered promiscuous mode [ 56.119115][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.129585][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.138521][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.147450][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.183496][ T532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.183513][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.199209][ T532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.212044][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.231612][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.247346][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.255549][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.263585][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.272674][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.283253][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.293172][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.304803][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.314717][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.325602][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.335585][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.346266][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.357768][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.372280][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.383883][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.393904][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.404589][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.414913][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.425396][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.435250][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.446179][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.458345][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.471310][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 56.477628][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.486804][ T4236] Bluetooth: hci1: command 0x040f tx timeout [ 56.493124][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 56.500689][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.509337][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.517525][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 56.518304][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.523631][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 56.539261][ T532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.548252][ T532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.557904][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.575896][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.585023][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.593904][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.602674][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.702099][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.709934][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.730328][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.738157][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.777681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.800090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.821994][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.824174][ T4269] loop3: detected capacity change from 0 to 1024 [ 56.842594][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.855448][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.865138][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.890713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.904592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.940424][ T532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.948287][ T532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.998867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.058496][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.100139][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.141859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.194009][ T4278] netlink: zone id is out of range [ 57.199260][ T4278] netlink: zone id is out of range [ 57.257120][ T4278] netlink: zone id is out of range [ 57.286392][ T4278] netlink: zone id is out of range [ 57.295864][ T4278] netlink: zone id is out of range [ 57.322073][ T4278] netlink: zone id is out of range [ 57.333858][ T4278] netlink: zone id is out of range [ 57.339407][ T4286] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 57.356502][ T4278] netlink: zone id is out of range [ 57.376792][ T4279] loop1: detected capacity change from 0 to 764 [ 57.387296][ T4278] netlink: zone id is out of range [ 57.404072][ T4278] netlink: zone id is out of range [ 57.404305][ T4268] loop2: detected capacity change from 0 to 32768 [ 57.434900][ T4279] rock: directory entry would overflow storage [ 57.441367][ T4279] rock: sig=0x4654, size=5, remaining=4 [ 57.470130][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 57.480152][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 57.490129][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 57.500130][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 57.510135][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 57.520141][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 57.530145][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 57.540136][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 57.550135][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 57.560134][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 57.705659][ T25] audit: type=1326 audit(1782707369.296:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4289 comm="syz.3.9" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa44180de59 code=0x0 [ 57.714340][ T4268] ======================================================= [ 57.714340][ T4268] WARNING: The mand mount option has been deprecated and [ 57.714340][ T4268] and is ignored by this kernel. Remove the mand [ 57.714340][ T4268] option from the mount to silence this warning. [ 57.714340][ T4268] ======================================================= [ 57.799808][ T4286] loop0: detected capacity change from 0 to 4096 [ 57.865634][ T4286] ntfs3: loop0: mft corrupted [ 57.876845][ T4286] ntfs3: loop0: Failed to load $MFT. [ 57.903009][ T4268] JBD2: Ignoring recovery information on journal [ 57.940786][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10'. [ 57.955380][ T4295] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.964939][ T4295] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.973717][ T4295] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.982446][ T4295] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.995728][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10'. [ 58.008128][ T4295] Zero length message leads to an empty skb [ 58.009593][ T4268] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 58.508640][ T4306] loop0: detected capacity change from 0 to 764 [ 58.628369][ T4306] rock: directory entry would overflow storage [ 58.634658][ T4306] rock: sig=0x4654, size=5, remaining=4 [ 58.786517][ T4178] Bluetooth: hci2: command 0x0419 tx timeout [ 59.519288][ T4178] Bluetooth: hci4: command 0x0419 tx timeout [ 59.525386][ T4178] Bluetooth: hci0: command 0x0419 tx timeout [ 59.531770][ T4178] Bluetooth: hci1: command 0x0419 tx timeout [ 59.537815][ T4178] Bluetooth: hci3: command 0x0419 tx timeout [ 59.850144][ T4315] loop1: detected capacity change from 0 to 764 [ 59.911590][ T4315] rock: directory entry would overflow storage [ 59.917804][ T4315] rock: sig=0x4654, size=5, remaining=4 [ 60.958459][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 60.962206][ T4331] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19'. [ 60.980289][ T4178] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 60.994480][ T4331] sch_fq: defrate 0 ignored. [ 60.999302][ T4332] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19'. [ 61.043974][ T4332] sch_fq: defrate 0 ignored. [ 61.256977][ T4178] usb 4-1: Invalid ep0 maxpacket: 32 [ 61.389574][ T4329] loop1: detected capacity change from 0 to 40427 [ 61.428567][ T4341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 61.431742][ T4178] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 61.528123][ T4342] loop0: detected capacity change from 0 to 16 [ 61.639836][ T4342] erofs: (device loop0): mounted with root inode @ nid 36. [ 61.723362][ T4329] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 61.791418][ T4342] netlink: 3 bytes leftover after parsing attributes in process `syz.0.20'. [ 61.800948][ T4342] 0ªX¹¦À: renamed from caif0 [ 61.807872][ T4178] usb 4-1: Invalid ep0 maxpacket: 32 [ 61.816922][ T4178] usb usb4-port1: attempt power cycle [ 61.958849][ T4329] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 62.153243][ T4329] F2FS-fs (loop1): invalid crc value [ 62.478520][ T4329] F2FS-fs (loop1): Found nat_bits in checkpoint [ 62.485751][ T4178] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 62.810293][ T4178] usb 4-1: device descriptor read/8, error -71 [ 62.981548][ T4329] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 62.988797][ T4329] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 63.017874][ T4365] syz.4.26 uses obsolete (PF_INET,SOCK_PACKET) [ 63.056697][ T4360] loop3: detected capacity change from 0 to 764 [ 63.087059][ T4367] device syzkaller0 entered promiscuous mode [ 63.119014][ T4360] rock: directory entry would overflow storage [ 63.125239][ T4360] rock: sig=0x4654, size=5, remaining=4 [ 63.372123][ T4329] attempt to access beyond end of device [ 63.372123][ T4329] loop1: rw=10241, want=45104, limit=40427 [ 63.435960][ T4371] loop4: detected capacity change from 0 to 64 [ 63.442608][ T4337] loop2: detected capacity change from 0 to 32768 [ 63.537589][ T4378] loop0: detected capacity change from 0 to 512 [ 63.552786][ T4337] XFS (loop2): Mounting V5 Filesystem [ 63.659277][ T4337] XFS (loop2): Ending clean mount [ 63.688520][ T4383] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.759476][ T4378] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.781538][ T4337] XFS (loop2): Quotacheck needed: Please wait. [ 63.939844][ T4337] XFS (loop2): Quotacheck: Done. [ 63.952063][ T25] audit: type=1800 audit(1782707375.546:3): pid=4378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.29" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 63.980226][ T4389] loop4: detected capacity change from 0 to 2048 [ 64.006039][ T25] audit: type=1800 audit(1782707375.596:4): pid=4337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 64.042791][ T4389] UDF-fs: bad mount option "gid=forg" or missing value [ 64.252299][ T4192] XFS (loop2): Unmounting Filesystem [ 64.291314][ T4265] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.389702][ T4391] loop1: detected capacity change from 0 to 32768 [ 64.423975][ T4391] JBD2: Ignoring recovery information on journal [ 64.450014][ T4391] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 64.537247][ T4405] loop3: detected capacity change from 0 to 32768 [ 64.580238][ T4265] usb 1-1: Using ep0 maxpacket: 16 [ 64.611334][ T4405] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.33 (4405) [ 64.647153][ T4405] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 64.678587][ T4405] BTRFS error (device loop3): superblock checksum mismatch [ 64.708207][ T4405] BTRFS error (device loop3): open_ctree failed: -22 [ 64.735153][ T4265] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.765901][ T4411] loop4: detected capacity change from 0 to 1024 [ 64.813081][ T4411] EXT4-fs (loop4): Ignoring removed orlov option [ 64.848382][ T4411] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 64.899542][ T4414] overlayfs: failed to resolve './file0': -2 [ 64.935340][ T4414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.36'. [ 65.026469][ T4411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 65.035393][ T4411] bridge: RTM_NEWNEIGH with invalid ether address [ 65.043377][ T4411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 65.052307][ T4411] bridge: RTM_NEWNEIGH with invalid ether address [ 65.059932][ T4265] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 65.070273][ T4265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.078617][ T4265] usb 1-1: Product: syz [ 65.084441][ T4265] usb 1-1: Manufacturer: syz [ 65.089224][ T4265] usb 1-1: SerialNumber: syz [ 65.089502][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 65.098794][ T4414] netlink: 'syz.3.36': attribute type 9 has an invalid length. [ 65.110702][ T4414] netlink: 'syz.3.36': attribute type 7 has an invalid length. [ 65.121186][ T4414] netlink: 'syz.3.36': attribute type 8 has an invalid length. [ 65.128748][ T4414] netlink: 'syz.3.36': attribute type 13 has an invalid length. [ 65.138063][ T4265] usb 1-1: config 0 descriptor?? [ 65.184183][ T4265] asix: probe of 1-1:0.0 failed with error -22 [ 65.264111][ T4418] device syzkaller0 entered promiscuous mode [ 65.488119][ T4426] FAULT_INJECTION: forcing a failure. [ 65.488119][ T4426] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 65.543458][ T4426] CPU: 0 PID: 4426 Comm: syz.4.40 Not tainted syzkaller #0 [ 65.550681][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 65.560752][ T4426] Call Trace: [ 65.564035][ T4426] [ 65.566961][ T4426] dump_stack_lvl+0x188/0x250 [ 65.571651][ T4426] ? show_regs_print_info+0x20/0x20 [ 65.576853][ T4426] ? load_image+0x410/0x410 [ 65.581360][ T4426] ? __lock_acquire+0x7b50/0x7b50 [ 65.586389][ T4426] should_fail+0x383/0x4b0 [ 65.590807][ T4426] prepare_alloc_pages+0x1e3/0x5b0 [ 65.595929][ T4426] __alloc_pages+0x11b/0x480 [ 65.600530][ T4426] ? zone_statistics+0x170/0x170 [ 65.605486][ T4426] ? alloc_pages+0x452/0x560 [ 65.610085][ T4426] pte_alloc_one+0x7b/0x310 [ 65.614587][ T4426] ? rcu_lock_release+0x20/0x20 [ 65.619438][ T4426] ? count_memcg_event_mm+0x324/0x370 [ 65.624820][ T4426] ? remove_device_exclusive_entry+0xac0/0xac0 [ 65.630971][ T4426] ? userfaultfd_unmap_complete+0x28f/0x310 [ 65.636861][ T4426] ? verify_lock_unused+0x140/0x140 [ 65.637988][ T4429] loop3: detected capacity change from 0 to 2368 [ 65.642060][ T4426] __pte_alloc+0x21/0x150 [ 65.642148][ T4426] handle_mm_fault+0x39d9/0x4440 [ 65.642178][ T4426] ? get_page+0xe0/0xe0 [ 65.661867][ T4426] ? vmacache_find+0x4f0/0x590 [ 65.666640][ T4426] ? vmacache_update+0xa0/0x100 [ 65.671501][ T4426] ? find_vma+0x1df/0x230 [ 65.675833][ T4426] do_user_addr_fault+0x494/0xc90 [ 65.680863][ T4426] exc_page_fault+0x60/0x100 [ 65.685457][ T4426] ? clear_bhb_loop+0x30/0x80 [ 65.690130][ T4426] asm_exc_page_fault+0x22/0x30 [ 65.694981][ T4426] RIP: 0033:0x7f2a2c0861ce [ 65.699380][ T4426] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 65.718964][ T4426] RSP: 002b:00007f2a2a427470 EFLAGS: 00010246 [ 65.725015][ T4426] RAX: 0000000000000001 RBX: 00007f2a2a427530 RCX: 0000000000000101 [ 65.732964][ T4426] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f2a2a4275d0 [ 65.740912][ T4426] RBP: 0000000000000102 R08: 00007f2a22008000 R09: 0000000000000000 [ 65.748862][ T4426] R10: 0000000000000000 R11: 00007f2a2a427540 R12: 0000000000000001 [ 65.756812][ T4426] R13: 00007f2a2c284aa0 R14: 0000000000000000 R15: 00007f2a2a4275d0 [ 65.764772][ T4426] [ 65.777881][ T4426] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 65.865145][ T4429] netlink: 40 bytes leftover after parsing attributes in process `syz.3.41'. [ 66.708033][ T13] usb 1-1: USB disconnect, device number 2 [ 66.802644][ T4442] loop2: detected capacity change from 0 to 64 [ 66.871564][ T4442] hfs: invalid gid -1 [ 66.879764][ T4442] hfs: unable to parse mount options [ 67.015321][ T4450] FAULT_INJECTION: forcing a failure. [ 67.015321][ T4450] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.028889][ T4450] CPU: 0 PID: 4450 Comm: syz.2.46 Not tainted syzkaller #0 [ 67.036084][ T4450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 67.046125][ T4450] Call Trace: [ 67.049402][ T4450] [ 67.050452][ T4426] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.40 (4426) [ 67.052326][ T4450] dump_stack_lvl+0x188/0x250 [ 67.068943][ T4450] ? show_regs_print_info+0x20/0x20 [ 67.074147][ T4450] ? load_image+0x410/0x410 [ 67.078657][ T4450] ? _raw_spin_lock_irq+0xb7/0xf0 [ 67.083684][ T4450] ? _raw_spin_lock_irqsave+0x100/0x100 [ 67.089237][ T4450] should_fail+0x383/0x4b0 [ 67.093664][ T4450] copy_page_from_iter_atomic+0x42e/0x14d0 [ 67.099485][ T4450] ? pipe_zero+0x380/0x380 [ 67.103917][ T4450] ? shmem_write_begin+0xcd/0x1a0 [ 67.108962][ T4450] generic_perform_write+0x30b/0x550 [ 67.114247][ T4450] ? atime_needs_update+0x770/0x770 [ 67.119447][ T4450] ? grab_cache_page_write_begin+0xa0/0xa0 [ 67.125235][ T4450] ? file_remove_privs+0x5d0/0x5d0 [ 67.130333][ T4450] ? rwsem_write_trylock+0x135/0x1c0 [ 67.135613][ T4450] ? clear_nonspinnable+0x60/0x60 [ 67.140639][ T4450] __generic_file_write_iter+0x261/0x4e0 [ 67.146264][ T4450] ? generic_write_checks+0x3be/0x460 [ 67.151621][ T4450] generic_file_write_iter+0xa6/0x1b0 [ 67.156985][ T4450] vfs_write+0x748/0xd70 [ 67.161212][ T4450] ? file_end_write+0x250/0x250 [ 67.166043][ T4450] ? __fget_files+0x402/0x470 [ 67.170710][ T4450] ? __fdget_pos+0x1e2/0x370 [ 67.175288][ T4450] ? ksys_write+0x70/0x260 [ 67.179683][ T4450] ksys_write+0x153/0x260 [ 67.183993][ T4450] ? __ia32_sys_read+0x80/0x80 [ 67.188739][ T4450] ? lockdep_hardirqs_on+0x94/0x140 [ 67.193931][ T4450] do_syscall_64+0x4c/0xa0 [ 67.198341][ T4450] ? clear_bhb_loop+0x30/0x80 [ 67.202995][ T4450] ? clear_bhb_loop+0x30/0x80 [ 67.207649][ T4450] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.213526][ T4450] RIP: 0033:0x7f02566f268e [ 67.217960][ T4450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 67.237547][ T4450] RSP: 002b:00007f025498ada8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.245946][ T4450] RAX: ffffffffffffffda RBX: 00007f025498b6c0 RCX: 00007f02566f268e [ 67.253906][ T4450] RDX: 0000000000040000 RSI: 00007f024c56b000 RDI: 0000000000000004 [ 67.261873][ T4450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.269825][ T4450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 67.277777][ T4450] R13: 00007f025498aee0 R14: 00007f025498aea0 R15: 00007f024c56b000 [ 67.285762][ T4450] [ 67.319340][ T4450] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 67.330916][ T4444] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 67.339813][ T4426] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 67.368513][ T4450] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.380637][ T4426] BTRFS info (device loop4): force zlib compression, level 3 [ 67.385906][ T4319] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 67.413133][ T4444] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 67.416774][ T4426] BTRFS info (device loop4): disabling log replay at mount time [ 67.456837][ T4450] EXT4-fs (loop2): can't mount with both data=journal and dax [ 67.470022][ T4444] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 67.470249][ T4426] BTRFS info (device loop4): turning off barriers [ 67.481600][ T4178] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 67.513000][ T4444] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 67.514554][ T4426] BTRFS info (device loop4): allowing degraded mounts [ 67.560392][ T4444] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 67.563259][ T4426] BTRFS info (device loop4): turning on flush-on-commit [ 67.595338][ T4426] BTRFS info (device loop4): allowing degraded mounts [ 67.607680][ T4444] ntfs: volume version 3.1. [ 67.625099][ T4426] BTRFS info (device loop4): turning on async discard [ 67.644440][ T4444] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 67.659745][ T4426] BTRFS info (device loop4): enabling disk space caching [ 67.669243][ T4444] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 67.683395][ T4426] BTRFS error (device loop4): cannot disable free space tree [ 67.691308][ T4444] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 67.707074][ T4426] BTRFS error (device loop4): open_ctree failed: -22 [ 67.744314][ T4182] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by udevd (4182) [ 67.782333][ T4178] usb 1-1: Using ep0 maxpacket: 16 [ 67.915125][ T4319] usb 4-1: not running at top speed; connect to a high speed hub [ 67.923102][ T4178] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.934355][ T4265] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 67.956804][ T4178] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.983914][ T4178] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 68.002104][ T4178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.061599][ T4319] usb 4-1: too many endpoints for config 1 interface 0 altsetting 1: 132, using maximum allowed: 30 [ 68.076201][ T4319] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 132 [ 68.114430][ T4319] usb 4-1: config 1 interface 0 has no altsetting 0 [ 68.172972][ T4469] device syzkaller0 entered promiscuous mode [ 68.230670][ T4265] usb 3-1: Using ep0 maxpacket: 32 [ 68.320608][ T4319] usb 4-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.40 [ 68.330161][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.338249][ T4319] usb 4-1: Product: syz [ 68.419696][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.610672][ T4265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.632321][ T4178] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 68.649159][ T4319] usb 4-1: Manufacturer: syz [ 68.653841][ T4319] usb 4-1: SerialNumber: syz [ 68.659216][ T4265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.661413][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 68.672998][ T4265] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 68.683884][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.694420][ T4265] usb 3-1: config 0 descriptor?? [ 68.734976][ T4448] udc-core: couldn't find an available UDC or it's busy [ 68.743639][ T4448] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 68.769567][ T4178] usb 1-1: USB disconnect, device number 3 [ 68.900317][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 62464, setting to 1024 [ 68.911651][ T21] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 69.081553][ T4232] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.160321][ T21] usb 5-1: string descriptor 0 read error: -22 [ 69.166577][ T21] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 69.176272][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.193353][ T4265] zydacron 0003:13EC:0006.0002: item fetching failed at offset 0/2 [ 69.200518][ T4466] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 69.207085][ T4265] zydacron 0003:13EC:0006.0002: parse failed [ 69.214438][ T4265] zydacron: probe of 0003:13EC:0006.0002 failed with error -22 [ 69.225738][ T21] usb 5-1: MIDIStreaming interface descriptor not found [ 69.320301][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 69.360393][ T4319] usbhid 4-1:1.0: can't add hid device: -71 [ 69.366371][ T4319] usbhid: probe of 4-1:1.0 failed with error -71 [ 69.377961][ T4319] usb 4-1: USB disconnect, device number 6 [ 69.402726][ T4178] usb 3-1: USB disconnect, device number 2 [ 69.444917][ T4232] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 69.465974][ T4232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.466610][ T4489] set_capacity_and_notify: 3 callbacks suppressed [ 69.466621][ T4489] loop2: detected capacity change from 0 to 512 [ 69.490583][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.509441][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.533593][ T4232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.549041][ T4489] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.577591][ T4232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 69.596319][ T25] kauditd_printk_skb: 6 callbacks suppressed [ 69.596331][ T25] audit: type=1800 audit(1782707381.186:5): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.55" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 69.602137][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.644999][ T4319] usb 5-1: USB disconnect, device number 2 [ 69.758677][ T4497] FAULT_INJECTION: forcing a failure. [ 69.758677][ T4497] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 69.772295][ T4497] CPU: 0 PID: 4497 Comm: syz.0.57 Not tainted syzkaller #0 [ 69.779501][ T4497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 69.789559][ T4497] Call Trace: [ 69.792838][ T4497] [ 69.795766][ T4497] dump_stack_lvl+0x188/0x250 [ 69.800454][ T4497] ? show_regs_print_info+0x20/0x20 [ 69.805653][ T4497] ? load_image+0x410/0x410 [ 69.810156][ T4497] ? __lock_acquire+0x7b50/0x7b50 [ 69.815182][ T4497] ? mark_lock+0x94/0x320 [ 69.819508][ T4497] should_fail+0x383/0x4b0 [ 69.823926][ T4497] prepare_alloc_pages+0x1e3/0x5b0 [ 69.829039][ T4497] __alloc_pages+0x11b/0x480 [ 69.833625][ T4497] ? zone_statistics+0x170/0x170 [ 69.838558][ T4497] ? mark_lock+0x94/0x320 [ 69.842895][ T4497] alloc_pages_vma+0x2bc/0x790 [ 69.847657][ T4497] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 69.853462][ T4497] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 69.859099][ T4497] ? shmem_swapin_page+0x22f0/0x22f0 [ 69.864399][ T4497] ? __lock_acquire+0x7b50/0x7b50 [ 69.869421][ T4497] ? xas_descend+0x210/0x3b0 [ 69.874015][ T4497] ? xas_load+0x127/0x140 [ 69.878346][ T4497] ? pagecache_get_page+0xc32/0xf20 [ 69.883546][ T4497] ? page_cache_prev_miss+0x380/0x380 [ 69.888917][ T4497] ? _raw_spin_lock_irq+0xb7/0xf0 [ 69.893946][ T4497] ? _raw_spin_lock_irqsave+0x100/0x100 [ 69.899493][ T4497] ? _raw_spin_unlock_irq+0x1f/0x40 [ 69.904689][ T4497] ? lockdep_hardirqs_on+0x94/0x140 [ 69.909898][ T4497] shmem_getpage_gfp+0x14be/0x2c10 [ 69.915048][ T4497] shmem_write_begin+0xcd/0x1a0 [ 69.919897][ T4497] generic_perform_write+0x2b6/0x550 [ 69.920300][ T4232] usb 2-1: GET_CAPABILITIES returned 0 [ 69.925172][ T4497] ? atime_needs_update+0x770/0x770 [ 69.925205][ T4497] ? grab_cache_page_write_begin+0xa0/0xa0 [ 69.935565][ T4232] usbtmc 2-1:16.0: can't read capabilities [ 69.935815][ T4497] ? file_remove_privs+0x5d0/0x5d0 [ 69.952469][ T4497] ? rwsem_write_trylock+0x135/0x1c0 [ 69.957754][ T4497] ? clear_nonspinnable+0x60/0x60 [ 69.962771][ T4497] __generic_file_write_iter+0x261/0x4e0 [ 69.968398][ T4497] ? generic_write_checks+0x3be/0x460 [ 69.973761][ T4497] generic_file_write_iter+0xa6/0x1b0 [ 69.979129][ T4497] vfs_write+0x748/0xd70 [ 69.983353][ T4497] ? file_end_write+0x250/0x250 [ 69.988185][ T4497] ? __fget_files+0x402/0x470 [ 69.992850][ T4497] ? __fdget_pos+0x1e2/0x370 [ 69.997435][ T4497] ? ksys_write+0x70/0x260 [ 70.001847][ T4497] ksys_write+0x153/0x260 [ 70.006157][ T4497] ? __ia32_sys_read+0x80/0x80 [ 70.010907][ T4497] ? lockdep_hardirqs_on+0x94/0x140 [ 70.016125][ T4497] do_syscall_64+0x4c/0xa0 [ 70.020536][ T4497] ? clear_bhb_loop+0x30/0x80 [ 70.025204][ T4497] ? clear_bhb_loop+0x30/0x80 [ 70.029859][ T4497] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.035735][ T4497] RIP: 0033:0x7f44df13068e [ 70.040149][ T4497] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 70.059749][ T4497] RSP: 002b:00007f44dd3c8da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.068144][ T4497] RAX: ffffffffffffffda RBX: 00007f44dd3c96c0 RCX: 00007f44df13068e [ 70.076103][ T4497] RDX: 0000000000040000 RSI: 00007f44d4fa9000 RDI: 0000000000000004 [ 70.084056][ T4497] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.092020][ T4497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 70.099969][ T4497] R13: 00007f44dd3c8ee0 R14: 00007f44dd3c8ea0 R15: 00007f44d4fa9000 [ 70.107949][ T4497] [ 70.146704][ T4499] FAULT_INJECTION: forcing a failure. [ 70.146704][ T4499] name failslab, interval 1, probability 0, space 0, times 1 [ 70.161701][ T4499] CPU: 0 PID: 4499 Comm: syz.0.58 Not tainted syzkaller #0 [ 70.164525][ T4480] fuse: Bad value for 'fd' [ 70.168916][ T4499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 70.183392][ T4499] Call Trace: [ 70.185889][ T4232] usb 2-1: USB disconnect, device number 2 [ 70.186668][ T4499] [ 70.186677][ T4499] dump_stack_lvl+0x188/0x250 [ 70.186701][ T4499] ? show_regs_print_info+0x20/0x20 [ 70.205239][ T4499] ? load_image+0x410/0x410 [ 70.209748][ T4499] ? __lock_acquire+0x7b50/0x7b50 [ 70.214776][ T4499] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 70.220670][ T4499] ? lockdep_hardirqs_on+0x94/0x140 [ 70.225867][ T4499] should_fail+0x383/0x4b0 [ 70.230275][ T4499] should_failslab+0x5/0x20 [ 70.234803][ T4499] slab_pre_alloc_hook+0x51/0xc0 [ 70.239721][ T4499] ? vm_area_alloc+0x20/0xe0 [ 70.244291][ T4499] kmem_cache_alloc+0x3d/0x280 [ 70.249049][ T4499] vm_area_alloc+0x20/0xe0 [ 70.253465][ T4499] mmap_region+0xbd2/0x1730 [ 70.257972][ T4499] ? get_unmapped_area+0x2f0/0x360 [ 70.263070][ T4499] do_mmap+0x801/0xe30 [ 70.267138][ T4499] ? vm_mmap_pgoff+0x16c/0x2d0 [ 70.271886][ T4499] vm_mmap_pgoff+0x1c1/0x2d0 [ 70.276473][ T4499] ? account_locked_vm+0xe0/0xe0 [ 70.281408][ T4499] ? __context_tracking_exit+0x4c/0x80 [ 70.286952][ T4499] ? __lock_acquire+0x7b50/0x7b50 [ 70.291973][ T4499] ksys_mmap_pgoff+0x140/0x790 [ 70.296753][ T4499] ? mmap_region+0x1730/0x1730 [ 70.301503][ T4499] ? lockdep_hardirqs_on+0x94/0x140 [ 70.306695][ T4499] do_syscall_64+0x4c/0xa0 [ 70.311094][ T4499] ? clear_bhb_loop+0x30/0x80 [ 70.315765][ T4499] ? clear_bhb_loop+0x30/0x80 [ 70.320423][ T4499] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.326326][ T4499] RIP: 0033:0x7f44df16fbc2 [ 70.330729][ T4499] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 70.350330][ T4499] RSP: 002b:00007f44dd3c8df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 70.358740][ T4499] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f44df16fbc2 [ 70.366700][ T4499] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 70.374668][ T4499] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 70.382620][ T4499] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 70.390580][ T4499] R13: 00007f44dd3c8ee0 R14: 00007f44dd3c8ea0 R15: 0000200000000080 [ 70.398559][ T4499] [ 70.464696][ T4501] loop3: detected capacity change from 0 to 16 [ 70.560300][ T4178] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 70.860462][ T4178] usb 3-1: Using ep0 maxpacket: 16 [ 70.990712][ T4178] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.013628][ T4501] erofs: (device loop3): mounted with root inode @ nid 36. [ 71.185639][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.194067][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.205105][ T4509] device syzkaller0 entered promiscuous mode [ 71.211524][ T4178] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 71.270866][ T4178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.301888][ T4178] usb 3-1: Product: syz [ 71.311065][ T4178] usb 3-1: Manufacturer: syz [ 71.318530][ T4178] usb 3-1: SerialNumber: syz [ 71.366016][ T4178] usb 3-1: config 0 descriptor?? [ 71.382356][ T4515] loop3: detected capacity change from 0 to 512 [ 71.401193][ T1325] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.407555][ T4517] loop0: detected capacity change from 0 to 512 [ 71.416538][ T4178] asix: probe of 3-1:0.0 failed with error -22 [ 71.488414][ T4515] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.662327][ T1325] usb 2-1: Using ep0 maxpacket: 8 [ 71.769177][ T4529] loop0: detected capacity change from 0 to 512 [ 72.286278][ T4529] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.360737][ T4529] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.421713][ T1325] usb 2-1: unable to get BOS descriptor or descriptor too short [ 72.463896][ T4540] netlink: 72 bytes leftover after parsing attributes in process `syz.3.72'. [ 72.501444][ T25] audit: type=1800 audit(1782707384.096:6): pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.69" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 72.520391][ T1325] usb 2-1: config 86 has an invalid interface number: 78 but max is 0 [ 72.539896][ T1325] usb 2-1: config 86 has no interface number 0 [ 72.556168][ T1325] usb 2-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024 [ 72.566681][ T1325] usb 2-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1023 [ 72.595330][ T4543] loop3: detected capacity change from 0 to 512 [ 72.604404][ T1325] usb 2-1: config 86 interface 78 has no altsetting 0 [ 72.650978][ T4543] EXT4-fs (loop3): Ignoring removed nobh option [ 72.739072][ T4543] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 72.756451][ T4543] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.770484][ T1325] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 72.785084][ T25] audit: type=1326 audit(1782707384.376:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4547 comm="syz.4.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a2c1c8bd7 code=0x7ffc0000 [ 72.790192][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.809938][ T25] audit: type=1326 audit(1782707384.376:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4547 comm="syz.4.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a2c1701d9 code=0x7ffc0000 [ 72.843378][ T25] audit: type=1326 audit(1782707384.376:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4547 comm="syz.4.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a2c1c8bd7 code=0x7ffc0000 [ 72.867929][ T25] audit: type=1326 audit(1782707384.376:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4547 comm="syz.4.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a2c1701d9 code=0x7ffc0000 [ 72.892576][ T25] audit: type=1326 audit(1782707384.376:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4547 comm="syz.4.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a2c1c8bd7 code=0x7ffc0000 [ 72.934290][ T1325] usb 2-1: Product: syz [ 72.941450][ T25] audit: type=1326 audit(1782707384.376:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4547 comm="syz.4.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a2c1701d9 code=0x7ffc0000 [ 72.959868][ T1325] usb 2-1: Manufacturer: syz [ 72.969893][ T1325] usb 2-1: SerialNumber: syz [ 73.003043][ T25] audit: type=1326 audit(1782707384.376:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4547 comm="syz.4.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a2c1c8bd7 code=0x7ffc0000 [ 73.020491][ T4507] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 73.055984][ T25] audit: type=1326 audit(1782707384.376:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4547 comm="syz.4.78" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a2c1701d9 code=0x7ffc0000 [ 73.080254][ T4507] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 73.309647][ T4563] loop3: detected capacity change from 0 to 512 [ 73.347745][ T4563] EXT4-fs (loop3): Ignoring removed bh option [ 73.388790][ T4563] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 73.403618][ T1325] kvaser_usb 2-1:86.78: Cannot get software info, error -71 [ 73.415758][ T1325] kvaser_usb: probe of 2-1:86.78 failed with error -71 [ 73.450937][ T4563] EXT4-fs (loop3): 1 truncate cleaned up [ 73.456603][ T4563] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,abort,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 73.465749][ T4236] usb 3-1: USB disconnect, device number 3 [ 73.521482][ T1325] usb 2-1: USB disconnect, device number 3 [ 73.915313][ T4579] loop2: detected capacity change from 0 to 512 [ 74.002982][ T4579] EXT4-fs (loop2): inline encryption not supported [ 74.037534][ T4579] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.127058][ T4579] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 74.127210][ T4579] EXT4-fs (loop2): 1 truncate cleaned up [ 74.127242][ T4579] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 74.255164][ T4597] loop1: detected capacity change from 0 to 512 [ 74.306479][ T4596] loop4: detected capacity change from 0 to 1764 [ 74.347218][ T4597] EXT4-fs (loop1): Ignoring removed nobh option [ 74.397948][ T4597] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #3: comm syz.1.96: corrupted inode contents [ 74.413016][ T4597] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #3: comm syz.1.96: mark_inode_dirty error [ 74.426182][ T4597] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #3: comm syz.1.96: corrupted inode contents [ 74.439220][ T4597] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.96: mark_inode_dirty error [ 74.453688][ T4597] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.96: Failed to acquire dquot type 0 [ 74.505380][ T4597] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.96: corrupted inode contents [ 74.665583][ T4597] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #16: comm syz.1.96: mark_inode_dirty error [ 74.740759][ T4597] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.96: corrupted inode contents [ 74.773556][ T4597] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.96: mark_inode_dirty error [ 74.817617][ T4597] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.96: corrupted inode contents [ 74.852747][ T4597] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 74.862265][ T4597] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #16: comm syz.1.96: corrupted inode contents [ 74.877981][ T4597] EXT4-fs error (device loop1): ext4_truncate:4286: inode #16: comm syz.1.96: mark_inode_dirty error [ 74.894027][ T4597] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 74.909305][ T4597] EXT4-fs (loop1): 1 truncate cleaned up [ 74.935468][ T4597] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nobh,,errors=continue. Quota mode: writeback. [ 74.950007][ T4597] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.300947][ T4611] set_capacity_and_notify: 1 callbacks suppressed [ 75.300976][ T4611] loop0: detected capacity change from 0 to 764 [ 75.361564][ T4611] rock: directory entry would overflow storage [ 75.367871][ T4611] rock: sig=0x4654, size=5, remaining=4 [ 75.663052][ T25] kauditd_printk_skb: 130 callbacks suppressed [ 75.663091][ T25] audit: type=1800 audit(1782707387.246:143): pid=4597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.96" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 76.325113][ T1109] cfg80211: failed to load regulatory.db [ 77.991440][ T4619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 78.209878][ T4631] capability: warning: `syz.2.110' uses 32-bit capabilities (legacy support in use) [ 78.220910][ T4631] program syz.2.110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.398968][ T4636] loop0: detected capacity change from 0 to 4096 [ 78.428859][ T4633] loop2: detected capacity change from 0 to 4096 [ 78.521591][ T4636] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.533456][ T4643] mmap: syz.3.114 (4643) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 78.563709][ T4633] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.602496][ T25] audit: type=1800 audit(1782707390.196:144): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.112" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 79.051924][ T4658] loop0: detected capacity change from 0 to 4096 [ 79.134994][ T4658] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 79.339012][ T4667] netlink: 'syz.2.123': attribute type 10 has an invalid length. [ 79.429993][ T4667] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 79.489046][ T4676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.541107][ T4677] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 79.620014][ T4684] loop0: detected capacity change from 0 to 512 [ 79.667092][ T4684] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.873281][ T4684] EXT4-fs (loop0): 1 truncate cleaned up [ 79.914892][ T4684] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.499102][ T4708] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.727521][ T4720] netem: incorrect gi model size [ 80.775624][ T4720] netem: change failed [ 80.886616][ T4733] netlink: 40 bytes leftover after parsing attributes in process `syz.0.152'. [ 81.311898][ T4746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 81.447722][ T4748] 8021q: VLANs not supported on ipvlan1 [ 81.562189][ T4757] loop0: detected capacity change from 0 to 512 [ 81.628681][ T4757] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 81.679345][ T4757] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 81.720485][ T4757] System zones: 0-1, 15-15, 18-18, 34-34 [ 81.727122][ T4757] EXT4-fs (loop0): orphan cleanup on readonly fs [ 81.736032][ T4757] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 81.745666][ T4757] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 81.760632][ T4757] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 81.767556][ T4757] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.162: bad orphan inode 16 [ 81.789467][ T4757] ext4_test_bit(bit=15, block=18) = 1 [ 81.801315][ T4757] is_bad_inode(inode)=0 [ 81.805488][ T4757] NEXT_ORPHAN(inode)=0 [ 81.809573][ T4757] max_ino=32 [ 81.813281][ T4757] i_nlink=2 [ 81.821463][ T4757] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 81.920909][ T4757] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 83.170116][ C0] sched: RT throttling activated [ 83.755574][ T4777] loop0: detected capacity change from 0 to 1024 [ 83.836169][ T4777] EXT4-fs (loop0): Ignoring removed bh option [ 83.908614][ T4779] loop4: detected capacity change from 0 to 1764 [ 84.056229][ T4777] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 84.566905][ T4814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.185'. [ 84.793351][ T4824] loop3: detected capacity change from 0 to 1024 [ 84.883280][ T4824] EXT4-fs (loop3): Ignoring removed bh option [ 84.973808][ T4824] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x000000000000000f,bh,init_itable,. Quota mode: none. [ 85.169987][ T4835] device syzkaller0 entered promiscuous mode [ 85.293059][ T4839] loop4: detected capacity change from 0 to 1024 [ 85.386732][ T4839] EXT4-fs (loop4): Ignoring removed bh option [ 85.427062][ T4839] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 85.479421][ T4839] EXT4-fs (loop4): resizing filesystem from 512 to 0 blocks [ 85.533918][ T4839] EXT4-fs warning (device loop4): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 85.823827][ T4861] loop3: detected capacity change from 0 to 512 [ 86.062784][ T4861] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.070400][ T4875] device macvlan1 entered promiscuous mode [ 86.113971][ T4861] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.510472][ T4891] netlink: 136 bytes leftover after parsing attributes in process `syz.1.215'. [ 86.608962][ T4897] loop4: detected capacity change from 0 to 164 [ 86.832212][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 86.889704][ T4911] loop4: detected capacity change from 0 to 512 [ 86.920548][ T4178] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 86.989302][ T4911] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 87.128807][ T4911] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.223: corrupted in-inode xattr [ 87.204708][ T4911] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.223: couldn't read orphan inode 15 (err -117) [ 87.250666][ T4911] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 87.565355][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 87.618577][ T4934] loop0: detected capacity change from 0 to 4096 [ 87.633792][ T4936] loop4: detected capacity change from 0 to 1024 [ 87.659328][ T4934] EXT4-fs (loop0): Ignoring removed orlov option [ 87.669387][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 87.694428][ T4936] EXT4-fs (loop4): Ignoring removed bh option [ 87.709090][ T4934] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 87.745459][ T4936] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,i_version,bh,init_itable,. Quota mode: none. [ 87.833560][ T4934] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 87.886608][ T4934] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,orlov,noload,jqfmt=vfsv0,data_err=ignore,mblk_io_submit,nodioread_nolock,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 87.935337][ T4945] loop2: detected capacity change from 0 to 128 [ 87.955941][ T4945] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.029230][ T4945] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.163829][ T4949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 88.180227][ T4949] netlink: 'syz.1.240': attribute type 5 has an invalid length. [ 88.221318][ T4949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 88.259002][ T532] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.293440][ T4949] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 88.340186][ T4949] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 88.353376][ T4958] xt_hashlimit: size too large, truncated to 1048576 [ 88.360338][ T4949] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 88.368961][ T4949] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 88.436421][ T4949] device geneve2 entered promiscuous mode [ 88.444592][ T4955] bridge0: port 3(bond0) entered blocking state [ 88.482785][ T4955] bridge0: port 3(bond0) entered disabled state [ 88.514635][ T4955] device bond0 entered promiscuous mode [ 88.527017][ T4955] device bond_slave_0 entered promiscuous mode [ 88.541381][ T4955] device bond_slave_1 entered promiscuous mode [ 88.548528][ T4967] loop2: detected capacity change from 0 to 2048 [ 88.559075][ T4955] bridge0: port 3(bond0) entered blocking state [ 88.565666][ T4955] bridge0: port 3(bond0) entered forwarding state [ 88.587154][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 88.652432][ T4967] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.669839][ T4967] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.718706][ T4964] syz.4.248 (4964) used greatest stack depth: 20816 bytes left [ 88.755790][ T4178] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 88.799572][ T4178] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 88.833920][ T4972] loop0: detected capacity change from 0 to 8192 [ 89.252762][ T1109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 89.746466][ T4978] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 90.125803][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.172998][ T5013] net_ratelimit: 336 callbacks suppressed [ 90.173007][ T5013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.305585][ T5020] [ 90.307943][ T5020] ============================= [ 90.348289][ T5020] WARNING: suspicious RCU usage [ 90.361709][ T5020] syzkaller #0 Not tainted [ 90.377434][ T5020] ----------------------------- [ 90.409687][ T5020] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 90.424637][ T5020] [ 90.424637][ T5020] other info that might help us debug this: [ 90.424637][ T5020] [ 90.450374][ T5020] [ 90.450374][ T5020] rcu_scheduler_active = 2, debug_locks = 1 [ 90.479372][ T5020] 1 lock held by syz.2.266/5020: [ 90.481167][ T5027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.269'. [ 90.484620][ T5020] #0: ffffffff8d43c1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 90.520409][ T5020] [ 90.520409][ T5020] stack backtrace: [ 90.531506][ T5020] CPU: 1 PID: 5020 Comm: syz.2.266 Not tainted syzkaller #0 [ 90.538813][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 90.548867][ T5020] Call Trace: [ 90.552139][ T5020] [ 90.555077][ T5020] dump_stack_lvl+0x188/0x250 [ 90.559766][ T5020] ? load_image+0x410/0x410 [ 90.564284][ T5020] ? show_regs_print_info+0x20/0x20 [ 90.569515][ T5020] ? lockdep_rcu_suspicious+0x110/0x180 [ 90.575079][ T5020] ? local_bh_enable+0x20/0x20 [ 90.579852][ T5020] rhltable_lookup+0x787/0x7a0 [ 90.584623][ T5020] ? mark_lock+0x94/0x320 [ 90.588949][ T5020] ? mr_mfc_find_parent+0x190/0x190 [ 90.594141][ T5020] ? local_bh_enable+0x20/0x20 [ 90.598913][ T5020] ? lock_chain_count+0x20/0x20 [ 90.603773][ T5020] mr_mfc_find_any_parent+0xb7/0x1d0 [ 90.609056][ T5020] ? local_bh_enable+0x20/0x20 [ 90.613824][ T5020] ip_mr_forward+0x247/0xf60 [ 90.618427][ T5020] ipmr_mfc_add+0x2273/0x2bd0 [ 90.623116][ T5020] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 90.628050][ T5020] ? __lock_acquire+0x7b50/0x7b50 [ 90.633090][ T5020] ip_mroute_setsockopt+0xecd/0x1230 [ 90.638380][ T5020] ? ipmr_rule_default+0x70/0x70 [ 90.643329][ T5020] ? __might_sleep+0xf0/0xf0 [ 90.647920][ T5020] ip_setsockopt+0x568/0x31e0 [ 90.652609][ T5020] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 90.657993][ T5020] ? aa_sk_perm+0x7dc/0x910 [ 90.662504][ T5020] ? aa_af_perm+0x340/0x340 [ 90.667005][ T5020] ? __fget_files+0x402/0x470 [ 90.671688][ T5020] ? aa_sock_opt_perm+0x74/0x100 [ 90.676632][ T5020] ? sock_common_setsockopt+0x32/0xb0 [ 90.682005][ T5020] ? raw_setsockopt+0xc2/0x170 [ 90.686768][ T5020] ? sock_common_recvmsg+0x1c0/0x1c0 [ 90.692052][ T5020] __sys_setsockopt+0x2bf/0x3d0 [ 90.696905][ T5020] __x64_sys_setsockopt+0xb1/0xc0 [ 90.701934][ T5020] do_syscall_64+0x4c/0xa0 [ 90.706356][ T5020] ? clear_bhb_loop+0x30/0x80 [ 90.711035][ T5020] ? clear_bhb_loop+0x30/0x80 [ 90.715709][ T5020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.721605][ T5020] RIP: 0033:0x7f0256731e59 [ 90.726022][ T5020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.745629][ T5020] RSP: 002b:00007f025498b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.754048][ T5020] RAX: ffffffffffffffda RBX: 00007f02569aafa0 RCX: 00007f0256731e59 [ 90.762022][ T5020] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 90.769989][ T5020] RBP: 00007f02567c7e6f R08: 000000000000003c R09: 0000000000000000 [ 90.777954][ T5020] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 90.785921][ T5020] R13: 00007f02569ab038 R14: 00007f02569aafa0 R15: 00007ffd71139dc8 [ 90.793904][ T5020] [ 90.803781][ T5020] [ 90.806234][ T5020] ============================= [ 90.811448][ T5020] WARNING: suspicious RCU usage [ 90.816429][ T5020] syzkaller #0 Not tainted [ 90.821256][ T5020] ----------------------------- [ 90.826209][ T5020] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 90.835212][ T5020] [ 90.835212][ T5020] other info that might help us debug this: [ 90.835212][ T5020] [ 90.846224][ T5020] [ 90.846224][ T5020] rcu_scheduler_active = 2, debug_locks = 1 [ 90.854724][ T5020] 1 lock held by syz.2.266/5020: [ 90.859807][ T5020] #0: ffffffff8d43c1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 90.870184][ T5020] [ 90.870184][ T5020] stack backtrace: [ 90.876205][ T5020] CPU: 1 PID: 5020 Comm: syz.2.266 Not tainted syzkaller #0 [ 90.883488][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 90.893660][ T5020] Call Trace: [ 90.896947][ T5020] [ 90.899875][ T5020] dump_stack_lvl+0x188/0x250 [ 90.904556][ T5020] ? load_image+0x410/0x410 [ 90.909057][ T5020] ? show_regs_print_info+0x20/0x20 [ 90.914260][ T5020] ? lockdep_rcu_suspicious+0x110/0x180 [ 90.919802][ T5020] ? local_bh_enable+0x20/0x20 [ 90.924570][ T5020] rhltable_lookup+0x512/0x7a0 [ 90.929338][ T5020] ? local_bh_enable+0x20/0x20 [ 90.934096][ T5020] ? mr_mfc_find_parent+0x190/0x190 [ 90.939288][ T5020] ? local_bh_enable+0x20/0x20 [ 90.944060][ T5020] ? lock_chain_count+0x20/0x20 [ 90.948911][ T5020] mr_mfc_find_any_parent+0xb7/0x1d0 [ 90.954197][ T5020] ? local_bh_enable+0x20/0x20 [ 90.958962][ T5020] ip_mr_forward+0x247/0xf60 [ 90.963562][ T5020] ipmr_mfc_add+0x2273/0x2bd0 [ 90.968250][ T5020] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 90.973186][ T5020] ? __lock_acquire+0x7b50/0x7b50 [ 90.978227][ T5020] ip_mroute_setsockopt+0xecd/0x1230 [ 90.983516][ T5020] ? ipmr_rule_default+0x70/0x70 [ 90.988466][ T5020] ? __might_sleep+0xf0/0xf0 [ 90.993052][ T5020] ip_setsockopt+0x568/0x31e0 [ 90.997736][ T5020] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 91.003102][ T5020] ? aa_sk_perm+0x7dc/0x910 [ 91.007611][ T5020] ? aa_af_perm+0x340/0x340 [ 91.012115][ T5020] ? __fget_files+0x402/0x470 [ 91.016796][ T5020] ? aa_sock_opt_perm+0x74/0x100 [ 91.021730][ T5020] ? sock_common_setsockopt+0x32/0xb0 [ 91.027103][ T5020] ? raw_setsockopt+0xc2/0x170 [ 91.031861][ T5020] ? sock_common_recvmsg+0x1c0/0x1c0 [ 91.037146][ T5020] __sys_setsockopt+0x2bf/0x3d0 [ 91.041997][ T5020] __x64_sys_setsockopt+0xb1/0xc0 [ 91.047020][ T5020] do_syscall_64+0x4c/0xa0 [ 91.051432][ T5020] ? clear_bhb_loop+0x30/0x80 [ 91.056106][ T5020] ? clear_bhb_loop+0x30/0x80 [ 91.060786][ T5020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.066674][ T5020] RIP: 0033:0x7f0256731e59 [ 91.071083][ T5020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.090682][ T5020] RSP: 002b:00007f025498b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 91.099100][ T5020] RAX: ffffffffffffffda RBX: 00007f02569aafa0 RCX: 00007f0256731e59 [ 91.107069][ T5020] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 91.115038][ T5020] RBP: 00007f02567c7e6f R08: 000000000000003c R09: 0000000000000000 [ 91.123007][ T5020] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 91.130972][ T5020] R13: 00007f02569ab038 R14: 00007f02569aafa0 R15: 00007ffd71139dc8 [ 91.138953][ T5020] [ 91.161208][ T5020] [ 91.163759][ T5020] ============================= [ 91.168735][ T5020] WARNING: suspicious RCU usage [ 91.174976][ T5020] syzkaller #0 Not tainted [ 91.179501][ T5020] ----------------------------- [ 91.184711][ T5020] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 91.193635][ T5020] [ 91.193635][ T5020] other info that might help us debug this: [ 91.193635][ T5020] [ 91.204352][ T5020] [ 91.204352][ T5020] rcu_scheduler_active = 2, debug_locks = 1 [ 91.212759][ T5020] 1 lock held by syz.2.266/5020: [ 91.217810][ T5020] #0: ffffffff8d43c1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x139/0x1230 [ 91.227992][ T5020] [ 91.227992][ T5020] stack backtrace: [ 91.234202][ T5020] CPU: 1 PID: 5020 Comm: syz.2.266 Not tainted syzkaller #0 [ 91.241486][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.251547][ T5020] Call Trace: [ 91.254824][ T5020] [ 91.257749][ T5020] dump_stack_lvl+0x188/0x250 [ 91.262429][ T5020] ? load_image+0x410/0x410 [ 91.266930][ T5020] ? show_regs_print_info+0x20/0x20 [ 91.272136][ T5020] ? lockdep_rcu_suspicious+0x110/0x180 [ 91.277678][ T5020] ? local_bh_enable+0x20/0x20 [ 91.282447][ T5020] rhltable_lookup+0x5fc/0x7a0 [ 91.287211][ T5020] ? local_bh_enable+0x20/0x20 [ 91.291970][ T5020] ? mr_mfc_find_parent+0x190/0x190 [ 91.297164][ T5020] ? local_bh_enable+0x20/0x20 [ 91.301935][ T5020] ? lock_chain_count+0x20/0x20 [ 91.306784][ T5020] mr_mfc_find_any_parent+0xb7/0x1d0 [ 91.312066][ T5020] ? local_bh_enable+0x20/0x20 [ 91.316828][ T5020] ip_mr_forward+0x247/0xf60 [ 91.321431][ T5020] ipmr_mfc_add+0x2273/0x2bd0 [ 91.326115][ T5020] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 91.331048][ T5020] ? __lock_acquire+0x7b50/0x7b50 [ 91.336085][ T5020] ip_mroute_setsockopt+0xecd/0x1230 [ 91.341376][ T5020] ? ipmr_rule_default+0x70/0x70 [ 91.346329][ T5020] ? __might_sleep+0xf0/0xf0 [ 91.350920][ T5020] ip_setsockopt+0x568/0x31e0 [ 91.355603][ T5020] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 91.360974][ T5020] ? aa_sk_perm+0x7dc/0x910 [ 91.365479][ T5020] ? aa_af_perm+0x340/0x340 [ 91.369974][ T5020] ? __fget_files+0x402/0x470 [ 91.374651][ T5020] ? aa_sock_opt_perm+0x74/0x100 [ 91.379588][ T5020] ? sock_common_setsockopt+0x32/0xb0 [ 91.384959][ T5020] ? raw_setsockopt+0xc2/0x170 [ 91.389714][ T5020] ? sock_common_recvmsg+0x1c0/0x1c0 [ 91.394997][ T5020] __sys_setsockopt+0x2bf/0x3d0 [ 91.399850][ T5020] __x64_sys_setsockopt+0xb1/0xc0 [ 91.404873][ T5020] do_syscall_64+0x4c/0xa0 [ 91.409283][ T5020] ? clear_bhb_loop+0x30/0x80 [ 91.413959][ T5020] ? clear_bhb_loop+0x30/0x80 [ 91.418637][ T5020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.424544][ T5020] RIP: 0033:0x7f0256731e59 [ 91.428960][ T5020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.448572][ T5020] RSP: 002b:00007f025498b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 91.456991][ T5020] RAX: ffffffffffffffda RBX: 00007f02569aafa0 RCX: 00007f0256731e59 [ 91.464963][ T5020] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 91.472933][ T5020] RBP: 00007f02567c7e6f R08: 000000000000003c R09: 0000000000000000 [ 91.480908][ T5020] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 91.488892][ T5020] R13: 00007f02569ab038 R14: 00007f02569aafa0 R15: 00007ffd71139dc8 [ 91.496887][ T5020] [ 92.700288][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!