last executing test programs: 31.029756524s ago: executing program 4 (id=5): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, 0x0, &(0x7f0000000280)) 31.029298214s ago: executing program 4 (id=21): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 29.696114216s ago: executing program 4 (id=25): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@cgroup, 0xffffffffffffffff, 0x8, 0x4}, 0x20) 25.607658882s ago: executing program 4 (id=46): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r1) memfd_create(0x0, 0x7) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="710502"], 0x25) 25.489722615s ago: executing program 32 (id=46): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r1) memfd_create(0x0, 0x7) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="710502"], 0x25) 7.353760595s ago: executing program 3 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) 6.339983739s ago: executing program 3 (id=136): syz_emit_ethernet(0x7e, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x86, 0x4, "c045"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x11}}, {@empty}, {@broadcast}, {@private}, {@multicast2, 0x9}]}]}}}}}}}, 0x0) 6.152546304s ago: executing program 3 (id=140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x3, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x8810) 5.971933678s ago: executing program 3 (id=141): socket$inet(0x2, 0x3, 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 4.963986732s ago: executing program 5 (id=146): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) semctl$SEM_STAT(0x0, 0x0, 0x12, 0xfffffffffffffffe) 4.851117665s ago: executing program 3 (id=149): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)={0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_audit(0x10, 0x3, 0x9) pipe2$watch_queue(0x0, 0x80) syz_io_uring_setup(0x37c1, &(0x7f00000004c0)={0x0, 0x364d, 0x800, 0x1, 0x133}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x1, r5, 0x3, 0x80000}) 4.673412669s ago: executing program 0 (id=151): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x21c0, 0x103) pipe2$9p(&(0x7f0000005e40)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000005e80)='./file0\x00', &(0x7f0000005ec0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) close_range(r1, 0xffffffffffffffff, 0x0) 4.20683877s ago: executing program 0 (id=152): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000001c0)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000280)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000013c0)={0x0, 0x7, 0x8}, 0x8) 3.984038575s ago: executing program 0 (id=155): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000380), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000840)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000900)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r1}) 3.77766089s ago: executing program 0 (id=156): socket(0x2a, 0x2, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='wlan0\x00', 0x10) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2.52562647s ago: executing program 0 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.437180882s ago: executing program 2 (id=159): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x20000000}, 0x50) 2.230826117s ago: executing program 2 (id=160): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004f0000500000000000059078ac1414006401010244140503e000000200000000e000000100000009890face00000027f000001ac1414320700000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000002cc0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d40)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002dc0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000002e00), 0x0) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000002e40)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r3, &(0x7f0000002e80)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000002ec0)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r4, &(0x7f0000002f00)='8', 0x1) close(r4) close(0xffffffffffffffff) symlinkat(&(0x7f0000002f40)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000002f80)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000b40)={{0x0, 0x7, 0xcc, 0xac7f, 0x8000, 0x100000000, 0x5, 0xa6, 0xa, 0x6, 0xfffffbf7, 0x3, 0x7, 0x100000000, 0x6}}) 1.992327243s ago: executing program 1 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x4, 0x1, {0x0, 0x0, 0x4}, {0x2, 0xff, 0x1}, 0xfe, 0xfc}, {0x0, 0x1, {0x0, 0xf0, 0x2}, {0x2, 0xff, 0x4}, 0xfe, 0xfd}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xe}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) 1.930713984s ago: executing program 2 (id=162): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x4d2, 0x3c}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x3, 0xbf, 0x4c}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}, 0x1c, 0x0}, 0xc4) 1.831027776s ago: executing program 5 (id=163): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x440c1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000004021dff0010000000e8fe55a1180015000600144003600e1205875d000008000000000000000001402000", 0x2f}], 0x1}, 0x8800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.609475912s ago: executing program 5 (id=164): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) mount$9p_unix(&(0x7f0000000400)='./proc/file0\x00', &(0x7f0000000440)='./proc\x00', &(0x7f0000000480), 0x48, &(0x7f00000004c0)=ANY=[@ANYBLOB="10"]) 1.529157194s ago: executing program 1 (id=165): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x8841) 1.482182845s ago: executing program 5 (id=166): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001780), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001840)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f00000018c0)=[{0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000001900)=0xfff) write$ppp(r0, &(0x7f0000001940)="1829", 0x2) 1.383925857s ago: executing program 1 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000017c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001800)=0x6) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000001840)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001880)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000018c0)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.2491908s ago: executing program 0 (id=168): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2004800, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f0000003040)="$eJzs3cGLG2UUAPC32e3uttrNgiKoiB8FD17Cdv0HukgL4oJSG6kehKmb1ZA0KUlYSREtXrz6H3gvHr0J4j/Qg969eevFYw+lI8kku8k2bV3rbqj+frDMy3zfm3wzQ4a3h+Hdvfrd9cZut7Kb9aJ0IUUpIkr3ItaHUWFhtC0N4+WYdCveLF/9/bUPPvr43a3t7YuXU7q0deWtzZTS2us/f/HlD+d+6T334Y9rP63EnfVP7v65+cedl+68fPfBlc/r3VTvpqV2L2XpWrvdy641a2mn3m1UUnq/Wcu6tVRvdWudqfHdZvvGjX7KWjtnz9zo1LrdlLX6qVHrp1479db6Kfssq7dSpVJJZ88ET1K9fflytlXEq4+Zd+GkFsQx6HS2ssFveOWhkertuSwIAJirp63/l5+u/m9N1/+notuovPBGcegj1/8d9f8RTdb//FcN6v/l0e83IvKD/wPU/wAAAAAAAAAAAAAA8Cy4l+flPM/L4+3+ywGjz3NeHsfsoft/6G/e6+N4Tby4txrR/HavulcttsX41m7Uoxm12Ihy3B88FsaK+NI72xc30tB6nL3+9TD/3K8R1cXp/PNRjvXZ+eeL/LSfH4PtqTgzmb8Z5Xhxdv7mfn6+cJC/HBvfT+RXohy/fRrtaMbO8PF2kP/V+ZTefm/70PevDOcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P9QSWOvRtH3fq8acTr2Rv37KwcT1qf74xf5o/76pdiIctyf3Z9/Y2Z//6V4ZWm+5w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY93+zUbWbNY6JxWMe/4P9yyPg0dnLRTTbx0aOh3Tk1eedJy/H+R5nj/I83xqqHSk45weneSMocGRv1kthos9O61/6/KuLpzorXya4FREPGZOPrqAk0OL8U++6/n96zxzzkpEHOuZrg2C0tHTyzHn23TijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MPC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTi8J2suxiMmPyqY9zkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//31oB3w=") r0 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./file1\x00', 0x42, 0x98) r1 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file1\x00', 0xc41, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./file1\x00', 0x8a141, 0x59) pwrite64(r2, &(0x7f0000001880)="f6", 0x1, 0xe32d) fallocate(r1, 0x0, 0x2000, 0x18003) write$P9_RREADLINK(r0, &(0x7f0000001940)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.24612069s ago: executing program 5 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) 435.913329ms ago: executing program 5 (id=170): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x19f, &(0x7f00000007c0)={[{@sysvgroups}, {@noblock_validity}, {@grpjquota}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x55e, &(0x7f0000000180)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 406.290431ms ago: executing program 1 (id=171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000000000001a0100000700210030420000300022"], 0x4c}}, 0x0) 391.98166ms ago: executing program 2 (id=172): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 207.816805ms ago: executing program 1 (id=173): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004f0000500000000000059078ac1414006401010244140503e000000200000000e000000100000009890face00000027f000001ac1414320700000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000002cc0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002d00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d40)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002d80)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002dc0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000002e00), 0x0) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000002e40)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r3, &(0x7f0000002e80)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000002ec0)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r4, &(0x7f0000002f00)='8', 0x1) close(r4) close(0xffffffffffffffff) symlinkat(&(0x7f0000002f40)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000002f80)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000b40)={{0x0, 0x7, 0xcc, 0xac7f, 0x8000, 0x100000000, 0x5, 0xa6, 0xa, 0x6, 0xfffffbf7, 0x3, 0x7, 0x100000000, 0x6}}) 207.478845ms ago: executing program 2 (id=174): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'gre0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000780)=0x8, 0x4) sendto$packet(r0, &(0x7f00000007c0)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000800)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 124.519087ms ago: executing program 3 (id=175): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='sys/class/net/bridge_slave_0/brport/multicast_to_unicast\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) 80.869558ms ago: executing program 1 (id=176): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0x15) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000600), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) 0s ago: executing program 2 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1e, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. [ 51.675402][ T4171] cgroup: Unknown subsys name 'net' [ 51.776483][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.011302][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.716510][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 54.768428][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 54.781988][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 54.848862][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 54.885303][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 54.902943][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.910222][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.918262][ T4189] device bridge_slave_0 entered promiscuous mode [ 54.932297][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.939374][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.947270][ T4189] device bridge_slave_1 entered promiscuous mode [ 54.984838][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.992047][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.000220][ T4184] device bridge_slave_0 entered promiscuous mode [ 55.025645][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.034861][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.042196][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.050165][ T4184] device bridge_slave_1 entered promiscuous mode [ 55.076391][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.094815][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.101946][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.110252][ T4183] device bridge_slave_0 entered promiscuous mode [ 55.131577][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.145350][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.152839][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.160823][ T4183] device bridge_slave_1 entered promiscuous mode [ 55.186056][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.195357][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.202520][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.210179][ T4186] device bridge_slave_0 entered promiscuous mode [ 55.224168][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.231514][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.239036][ T4192] device bridge_slave_0 entered promiscuous mode [ 55.249637][ T4189] team0: Port device team_slave_0 added [ 55.255597][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.262992][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.271666][ T4192] device bridge_slave_1 entered promiscuous mode [ 55.282690][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.289972][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.297777][ T4186] device bridge_slave_1 entered promiscuous mode [ 55.311377][ T4189] team0: Port device team_slave_1 added [ 55.318651][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.334641][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.371280][ T4184] team0: Port device team_slave_0 added [ 55.389372][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.399637][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.406578][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.432547][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.450295][ T4184] team0: Port device team_slave_1 added [ 55.458116][ T4183] team0: Port device team_slave_0 added [ 55.465508][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.475954][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.485688][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.492998][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.519798][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.540628][ T4183] team0: Port device team_slave_1 added [ 55.548618][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.596232][ T4192] team0: Port device team_slave_0 added [ 55.602529][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.609769][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.635789][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.647238][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.654457][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.680420][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.697285][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.704311][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.730308][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.749079][ T4192] team0: Port device team_slave_1 added [ 55.755218][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.762189][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.788138][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.804083][ T4189] device hsr_slave_0 entered promiscuous mode [ 55.810708][ T4189] device hsr_slave_1 entered promiscuous mode [ 55.830387][ T4186] team0: Port device team_slave_0 added [ 55.843650][ T4186] team0: Port device team_slave_1 added [ 55.905214][ T4183] device hsr_slave_0 entered promiscuous mode [ 55.912304][ T4183] device hsr_slave_1 entered promiscuous mode [ 55.919682][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.927399][ T4183] Cannot create hsr debugfs directory [ 55.945163][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.952423][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.978431][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.993990][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.001086][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.027356][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.039978][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.046932][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.072935][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.088213][ T4184] device hsr_slave_0 entered promiscuous mode [ 56.095829][ T4184] device hsr_slave_1 entered promiscuous mode [ 56.102549][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.110167][ T4184] Cannot create hsr debugfs directory [ 56.122345][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.129330][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.155335][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.237912][ T4192] device hsr_slave_0 entered promiscuous mode [ 56.244564][ T4192] device hsr_slave_1 entered promiscuous mode [ 56.251400][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.258957][ T4192] Cannot create hsr debugfs directory [ 56.278875][ T4186] device hsr_slave_0 entered promiscuous mode [ 56.285505][ T4186] device hsr_slave_1 entered promiscuous mode [ 56.292319][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.300014][ T4186] Cannot create hsr debugfs directory [ 56.502784][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.510260][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 56.510579][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 56.516443][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 56.528829][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 56.530256][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 56.563775][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.575228][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.587319][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.616685][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.629828][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.638563][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.654537][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.678829][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.695737][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.707816][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.722647][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.797272][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.818682][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.833636][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.845010][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.894699][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.910694][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.932858][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.942645][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.958364][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.968115][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.977881][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.995700][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.008959][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.017626][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.040200][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.050990][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.060612][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.067749][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.078958][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.087110][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.095371][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.112125][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.131524][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.139678][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.147373][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.157776][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.166608][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.173655][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.185089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.194039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.203097][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.210181][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.234142][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.242662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.251478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.262144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.271821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.280698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.288941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.298799][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.308998][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.326870][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.345202][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.354033][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.365077][ T630] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.372161][ T630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.381265][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.389620][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.397694][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.406876][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.415745][ T630] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.422804][ T630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.432046][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.440719][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.453046][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.462481][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.471547][ T630] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.478584][ T630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.488647][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.497363][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.516168][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.524562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.532911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.544163][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.567679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.584491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.595618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.607793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.617580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.626558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.655366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.666393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.680479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.696380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.704996][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.712076][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.720820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.729653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.737842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.747205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.755759][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.762822][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.771203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.779566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.787690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.796503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.805090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.813921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.822514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.831319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.840749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.848596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.859911][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.882833][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.896445][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.918086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.932912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.944808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.954044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.962598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.971180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.980844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.989731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.998013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.006008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.017703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.025439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.076039][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.084508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.094126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.106742][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.118445][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.131849][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.151324][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.158760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.168590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.177170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.184889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.198126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.206190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.226458][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.262129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.281044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.293326][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.300435][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.308504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.319067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.327944][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.335048][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.343036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.353077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.409334][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.417983][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.427450][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.437969][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.446777][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.457938][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.467004][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.475365][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.483941][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.492752][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.501272][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.514468][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.522839][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.531389][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.539742][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.548296][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.561673][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.569965][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.580403][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.589774][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 58.597468][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.604781][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 58.607760][ T4184] device veth0_vlan entered promiscuous mode [ 58.619295][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.621975][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 58.627069][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.634892][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 58.644225][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.646155][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 58.654886][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.669101][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.678802][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.689246][ T4189] device veth0_vlan entered promiscuous mode [ 58.714158][ T4184] device veth1_vlan entered promiscuous mode [ 58.734726][ T4189] device veth1_vlan entered promiscuous mode [ 58.752333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.762659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.771123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.778568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.788384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.797021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.811559][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.838552][ T4183] device veth0_vlan entered promiscuous mode [ 58.855402][ T4189] device veth0_macvtap entered promiscuous mode [ 58.871123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.885989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.894676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.903977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.912907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.921923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.931213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.939823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.947565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.975234][ T4183] device veth1_vlan entered promiscuous mode [ 58.988764][ T4189] device veth1_macvtap entered promiscuous mode [ 58.998952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.014636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.036323][ T4184] device veth0_macvtap entered promiscuous mode [ 59.044088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.052343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.062131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.086576][ T4183] device veth0_macvtap entered promiscuous mode [ 59.096967][ T4184] device veth1_macvtap entered promiscuous mode [ 59.105609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.116678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.125313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.134093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.142635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.151867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.160292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.167919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.176318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.184074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.192362][ T4186] device veth0_vlan entered promiscuous mode [ 59.200844][ T4183] device veth1_macvtap entered promiscuous mode [ 59.218819][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.240724][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.262253][ T4186] device veth1_vlan entered promiscuous mode [ 59.273400][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.284827][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.297011][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.304852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.313262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.321678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.330650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.339163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.347890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.363374][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.377963][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.389559][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.402573][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.412097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.423308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.435018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.444067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.454326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.469546][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.478326][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.487289][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.496200][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.510111][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.518810][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.527675][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.536910][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.553317][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.568237][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.583664][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.594238][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.606080][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.616176][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.627531][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.638953][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.650151][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.661313][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.689963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.698430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.707498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.718427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.739988][ T4186] device veth0_macvtap entered promiscuous mode [ 59.749395][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.758181][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.767172][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.776590][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.800219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.811798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.820354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.831824][ T4186] device veth1_macvtap entered promiscuous mode [ 59.877236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.888626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.900693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.918221][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.929852][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.940139][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.950793][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.960795][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.971547][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.983351][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.993375][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.004698][ T630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.009939][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.013474][ T630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.026615][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.041274][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.051666][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.062337][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.073736][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.084248][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.095108][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.104131][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.113871][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.124176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.133541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.142399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.150864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.159503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.211389][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.222878][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.232766][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.240872][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.268833][ T4192] device veth0_vlan entered promiscuous mode [ 60.269987][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.287691][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.307260][ T4192] device veth1_vlan entered promiscuous mode [ 60.321209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.333989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.342980][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.368082][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.394574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.403755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.411906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.421013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.450526][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.461918][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.481458][ T4192] device veth0_macvtap entered promiscuous mode [ 60.492467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.503413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.516397][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.525308][ T4192] device veth1_macvtap entered promiscuous mode [ 60.539899][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.545830][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.548899][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.599956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.614755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.622738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.645916][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.659217][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.669663][ T1111] Bluetooth: hci1: command 0x040f tx timeout [ 60.676630][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.679206][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 60.704871][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.708604][ T4268] loop2: detected capacity change from 0 to 2048 [ 60.721729][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 60.726133][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.729391][ T1111] Bluetooth: hci2: command 0x040f tx timeout [ 60.744207][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.754118][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 60.763512][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.775106][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.788439][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.811001][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.818825][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.825054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.842662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.852279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.858001][ T4268] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.867387][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.883089][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.893109][ T4268] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.893229][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.916365][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.923701][ T4268] fs-verity: sha512 using implementation "sha512-avx2" [ 60.926242][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.943784][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.953917][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.965357][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.966651][ T4268] syz.2.6 (4268) used greatest stack depth: 20272 bytes left [ 60.978062][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.014341][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.030349][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.057921][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.061656][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.068463][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.077950][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.119899][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.138712][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.159623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.216987][ T4284] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 61.355340][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.393539][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.419970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.446322][ T4299] loop2: detected capacity change from 0 to 128 [ 61.461081][ T4298] Zero length message leads to an empty skb [ 61.467134][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.479833][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.497577][ T4299] EXT4-fs (loop2): inline encryption not supported [ 61.506915][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.514850][ T4299] EXT4-fs (loop2): Unrecognized mount option "func=POLICY_CHECK" or missing value [ 61.526585][ T4200] Bluetooth: Wrong link type (-22) [ 61.775963][ T4312] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 62.784669][ T4314] loop4: detected capacity change from 0 to 1024 [ 62.861481][ T4314] EXT4-fs (loop4): Ignoring removed bh option [ 62.867631][ T4314] EXT4-fs (loop4): Ignoring removed bh option [ 62.938946][ T4314] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 63.008692][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 63.042728][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 63.075226][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 63.085108][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 63.097277][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 63.125423][ T4192] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /1/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 63.127091][ T4192] EXT4-fs (loop4): Remounting filesystem read-only [ 63.128765][ T4192] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /1/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 63.133690][ T4192] EXT4-fs (loop4): Remounting filesystem read-only [ 63.133895][ T4192] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 63.135134][ T4192] EXT4-fs (loop4): Remounting filesystem read-only [ 63.135151][ T4192] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 63.135421][ T4192] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /1/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 63.135737][ T4192] EXT4-fs (loop4): Remounting filesystem read-only [ 63.135785][ T4192] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /1/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 63.136070][ T4192] EXT4-fs (loop4): Remounting filesystem read-only [ 63.136237][ T4192] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 63.136568][ T4192] EXT4-fs (loop4): Remounting filesystem read-only [ 63.136583][ T4192] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 63.136839][ T4192] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /1/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 63.137150][ T4192] EXT4-fs (loop4): Remounting filesystem read-only [ 63.137200][ T4192] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /1/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 63.137520][ T4192] EXT4-fs (loop4): Remounting filesystem read-only [ 63.137742][ T4192] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 63.138059][ T4192] EXT4-fs (loop4): Remounting filesystem read-only [ 63.138075][ T4192] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 63.138376][ T4192] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /1/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 63.138693][ T4192] EXT4-fs (loop4): Remounting filesystem read-only [ 63.143039][ T4192] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 63.144440][ T4192] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 63.145685][ T4192] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 63.146916][ T4192] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 63.156041][ T4192] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 63.157311][ T4192] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 63.158588][ T4192] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 63.173763][ T4333] loop2: detected capacity change from 0 to 4096 [ 63.295866][ C1] vkms_vblank_simulate: vblank timer overrun [ 63.304541][ T4333] EXT4-fs (loop2): Test dummy encryption mode enabled [ 63.304570][ T4333] EXT4-fs (loop2): inline encryption not supported [ 63.304605][ T4333] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 63.329797][ T4333] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 63.329893][ T4333] System zones: 0-5 [ 63.332706][ T4333] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,user_xattr,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 63.506471][ T4349] loop1: detected capacity change from 0 to 512 [ 63.579492][ T4349] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 63.615115][ T4349] EXT4-fs (loop1): 1 truncate cleaned up [ 63.615140][ T4349] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 63.718719][ T4333] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 64.216944][ T4357] loop2: detected capacity change from 0 to 2048 [ 64.413934][ C1] vkms_vblank_simulate: vblank timer overrun [ 64.552290][ T4357] EXT4-fs (loop2): Unrecognized mount option "smackfstransmute=?" or missing value [ 66.911669][ T630] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.935399][ T4389] FAULT_INJECTION: forcing a failure. [ 66.935399][ T4389] name failslab, interval 1, probability 0, space 0, times 1 [ 66.989325][ T4389] CPU: 1 PID: 4389 Comm: syz.0.44 Not tainted syzkaller #0 [ 66.996561][ T4389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 67.006738][ T4389] Call Trace: [ 67.010029][ T4389] [ 67.012976][ T4389] dump_stack_lvl+0x188/0x250 [ 67.017688][ T4389] ? show_regs_print_info+0x20/0x20 [ 67.022896][ T4389] ? load_image+0x410/0x410 [ 67.027400][ T4389] ? __might_sleep+0xf0/0xf0 [ 67.031990][ T4389] ? __lock_acquire+0x7d40/0x7d40 [ 67.037031][ T4389] should_fail+0x383/0x4b0 [ 67.041469][ T4389] should_failslab+0x5/0x20 [ 67.045977][ T4389] slab_pre_alloc_hook+0x51/0xc0 [ 67.050921][ T4389] kmem_cache_alloc_node+0x47/0x2c0 [ 67.056126][ T4389] ? __alloc_skb+0xf4/0x750 [ 67.060642][ T4389] __alloc_skb+0xf4/0x750 [ 67.064987][ T4389] ctrl_getfamily+0x3cd/0x5b0 [ 67.069680][ T4389] ? nla_put_string+0x30/0x30 [ 67.074364][ T4389] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 67.080708][ T4389] genl_rcv_msg+0xd0b/0xfa0 [ 67.085229][ T4389] ? genl_bind+0x370/0x370 [ 67.089654][ T4389] ? __dev_queue_xmit+0x1b64/0x2e50 [ 67.094859][ T4389] ? verify_lock_unused+0x140/0x140 [ 67.100079][ T4389] ? dev_queue_xmit+0x20/0x20 [ 67.104764][ T4389] ? nla_put_string+0x30/0x30 [ 67.109441][ T4389] ? ctrl_getfamily+0x5b0/0x5b0 [ 67.114312][ T4389] netlink_rcv_skb+0x1e9/0x430 [ 67.119079][ T4389] ? genl_bind+0x370/0x370 [ 67.123502][ T4389] ? netlink_ack+0xb10/0xb10 [ 67.128114][ T4389] ? down_read+0x1aa/0x2e0 [ 67.132540][ T4389] genl_rcv+0x24/0x40 [ 67.136526][ T4389] netlink_unicast+0x78f/0x940 [ 67.141306][ T4389] netlink_sendmsg+0x8ba/0xbe0 [ 67.146084][ T4389] ? netlink_getsockopt+0x570/0x570 [ 67.151291][ T4389] ? aa_sock_msg_perm+0x94/0x150 [ 67.156845][ T4389] ? apparmor_socket_sendmsg+0x88/0x230 [ 67.162400][ T4389] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 67.167694][ T4389] ? security_socket_sendmsg+0x7c/0xa0 [ 67.173161][ T4389] __sys_sendto+0x46d/0x620 [ 67.177673][ T4389] ? __ia32_sys_getpeername+0x80/0x80 [ 67.183081][ T4389] ? lock_chain_count+0x20/0x20 [ 67.187957][ T4389] __x64_sys_sendto+0xda/0xf0 [ 67.192647][ T4389] do_syscall_64+0x4c/0xa0 [ 67.197072][ T4389] ? clear_bhb_loop+0x30/0x80 [ 67.201760][ T4389] ? clear_bhb_loop+0x30/0x80 [ 67.206445][ T4389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.212359][ T4389] RIP: 0033:0x7fd9a315cb0e [ 67.216779][ T4389] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 67.236384][ T4389] RSP: 002b:00007fd9a13f2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 67.244815][ T4389] RAX: ffffffffffffffda RBX: 00007fd9a13f46c0 RCX: 00007fd9a315cb0e [ 67.252790][ T4389] RDX: 0000000000000020 RSI: 00007fd9a13f3000 RDI: 0000000000000006 [ 67.260768][ T4389] RBP: 0000000000000000 R08: 00007fd9a13f2f04 R09: 000000000000000c [ 67.268745][ T4389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 67.276719][ T4389] R13: 00007fd9a13f2f58 R14: 00007fd9a13f3000 R15: 0000000000000000 [ 67.284710][ T4389] [ 67.287760][ C1] vkms_vblank_simulate: vblank timer overrun [ 67.333380][ T630] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.417959][ T4396] loop2: detected capacity change from 0 to 512 [ 67.438995][ T630] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.532803][ T4396] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 67.574545][ T4396] ext4 filesystem being mounted at /10/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.608328][ T630] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.713966][ T4406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.52'. [ 67.743781][ T4410] loop1: detected capacity change from 0 to 512 [ 67.865289][ T4410] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.898891][ T4410] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.921301][ T4413] FAULT_INJECTION: forcing a failure. [ 67.921301][ T4413] name failslab, interval 1, probability 0, space 0, times 0 [ 67.936472][ T4413] CPU: 0 PID: 4413 Comm: syz.0.55 Not tainted syzkaller #0 [ 67.943706][ T4413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 67.953758][ T4413] Call Trace: [ 67.957046][ T4413] [ 67.960018][ T4413] dump_stack_lvl+0x188/0x250 [ 67.964716][ T4413] ? show_regs_print_info+0x20/0x20 [ 67.969932][ T4413] ? load_image+0x410/0x410 [ 67.974451][ T4413] ? __might_sleep+0xf0/0xf0 [ 67.979045][ T4413] ? __lock_acquire+0x7d40/0x7d40 [ 67.984089][ T4413] should_fail+0x383/0x4b0 [ 67.988536][ T4413] should_failslab+0x5/0x20 [ 67.993054][ T4413] slab_pre_alloc_hook+0x51/0xc0 [ 67.998014][ T4413] kmem_cache_alloc_node+0x47/0x2c0 [ 68.003223][ T4413] ? __alloc_skb+0xf4/0x750 [ 68.007730][ T4413] __alloc_skb+0xf4/0x750 [ 68.012070][ T4413] alloc_uevent_skb+0x7d/0x230 [ 68.016856][ T4413] kobject_uevent_net_broadcast+0x2e6/0x530 [ 68.022764][ T4413] kobject_uevent_env+0x550/0x890 [ 68.027930][ T4413] ? dummy_udc_set_speed+0xd0/0xd0 [ 68.033065][ T4413] udc_bind_to_driver+0x4d5/0x5f0 [ 68.038113][ T4413] usb_gadget_probe_driver+0x1fb/0x380 [ 68.043591][ T4413] raw_ioctl+0x115e/0x3750 [ 68.048028][ T4413] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 68.053685][ T4413] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 68.059153][ T4413] ? make_qualifier+0x3b0/0x3b0 [ 68.064073][ T4413] ? bpf_lsm_file_ioctl+0x5/0x10 [ 68.069023][ T4413] ? security_file_ioctl+0x7c/0xa0 [ 68.074147][ T4413] ? make_qualifier+0x3b0/0x3b0 [ 68.079012][ T4413] __se_sys_ioctl+0xfa/0x170 [ 68.083622][ T4413] do_syscall_64+0x4c/0xa0 [ 68.088051][ T4413] ? clear_bhb_loop+0x30/0x80 [ 68.092742][ T4413] ? clear_bhb_loop+0x30/0x80 [ 68.097430][ T4413] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.103329][ T4413] RIP: 0033:0x7fd9a319bf6b [ 68.107754][ T4413] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 68.127451][ T4413] RSP: 002b:00007fd9a13f1f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.135878][ T4413] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd9a319bf6b [ 68.143860][ T4413] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 68.151838][ T4413] RBP: 00007fd9a13f2fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 68.159813][ T4413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.167792][ T4413] R13: 0000200000000200 R14: 0000000000000003 R15: 0000000000000000 [ 68.175789][ T4413] [ 68.219262][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.273559][ T4431] loop2: detected capacity change from 0 to 512 [ 68.347860][ T4431] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.54: bg 0: block 5: invalid block bitmap [ 68.409952][ T4407] chnl_net:caif_netlink_parms(): no params data found [ 68.443908][ T4431] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 68.480951][ T4431] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.54: invalid indirect mapped block 3 (level 2) [ 68.494742][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 68.501308][ T4431] EXT4-fs (loop2): 1 orphan inode deleted [ 68.507112][ T4431] EXT4-fs (loop2): 1 truncate cleaned up [ 68.515478][ T4431] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.531160][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 68.638242][ T4194] Bluetooth: Wrong link type (-22) [ 68.652163][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 68.688149][ T4407] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.739605][ T26] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 68.759281][ T26] usb 1-1: can't read configurations, error -71 [ 68.766596][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.795041][ T4407] device bridge_slave_0 entered promiscuous mode [ 68.825997][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.839298][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.868022][ T4407] device bridge_slave_1 entered promiscuous mode [ 68.935017][ T4407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.946567][ T4407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.678400][ T4407] team0: Port device team_slave_0 added [ 69.718076][ T4407] team0: Port device team_slave_1 added [ 69.732697][ T4465] loop3: detected capacity change from 0 to 512 [ 69.789245][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 69.830416][ T4407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.880988][ T4407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.907549][ T4407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.938585][ T4407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.948642][ T4478] binder: 4477:4478 ioctl c0306201 0 returned -14 [ 69.956005][ T4407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.007825][ T4407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.033534][ T4482] syz.0.67 uses obsolete (PF_INET,SOCK_PACKET) [ 70.066191][ T4465] EXT4-fs (loop3): Test dummy encryption mode enabled [ 70.079307][ T4465] EXT4-fs (loop3): can't mount with commit=7, fs mounted w/o journal [ 70.340452][ T4407] device hsr_slave_0 entered promiscuous mode [ 70.349843][ T4407] device hsr_slave_1 entered promiscuous mode [ 70.373292][ T4407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.404615][ T4407] Cannot create hsr debugfs directory [ 70.664180][ T25] audit: type=1800 audit(1791952440.485:2): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.70" name="protocol" dev="configfs" ino=34150 res=0 errno=0 [ 70.719313][ T25] audit: type=1800 audit(1791952440.515:3): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.70" name="report_length" dev="configfs" ino=34151 res=0 errno=0 [ 70.765507][ T4499] netlink: 'syz.0.69': attribute type 1 has an invalid length. [ 70.859324][ T4504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 70.940793][ T4504] team0: Port device team_slave_1 removed [ 70.984300][ T4518] loop3: detected capacity change from 0 to 2048 [ 71.086151][ T4518] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.140626][ T4407] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.148411][ T4518] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.156077][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.168800][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.181669][ T4407] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.212849][ T4407] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.263559][ T4407] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.302968][ T4534] usb3503 0-0008: unknown mode is requested [ 71.310513][ T4534] usb3503 0-0008: usb3503_probe: probed in standby mode [ 71.319160][ T4534] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 71.355354][ T630] device hsr_slave_0 left promiscuous mode [ 71.364555][ T630] device hsr_slave_1 left promiscuous mode [ 71.376632][ T630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.401566][ T630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.434914][ T630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.457621][ T4543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 71.464868][ T630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.485032][ T630] device bridge_slave_1 left promiscuous mode [ 71.503040][ T630] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.549005][ T630] device bridge_slave_0 left promiscuous mode [ 71.558167][ T630] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.608501][ T630] device veth1_macvtap left promiscuous mode [ 71.620992][ T630] device veth0_macvtap left promiscuous mode [ 71.627536][ T630] device veth1_vlan left promiscuous mode [ 71.634411][ T630] device veth0_vlan left promiscuous mode [ 71.869947][ T4194] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.892097][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 72.314838][ T630] team0 (unregistering): Port device team_slave_1 removed [ 72.348477][ T630] team0 (unregistering): Port device team_slave_0 removed [ 72.383690][ T630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.411211][ T630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.567721][ T630] bond0 (unregistering): Released all slaves [ 72.624444][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.646229][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.746846][ T4589] FAULT_INJECTION: forcing a failure. [ 72.746846][ T4589] name failslab, interval 1, probability 0, space 0, times 0 [ 72.805426][ T4589] CPU: 1 PID: 4589 Comm: syz.3.85 Not tainted syzkaller #0 [ 72.812664][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.822728][ T4589] Call Trace: [ 72.826017][ T4589] [ 72.828953][ T4589] dump_stack_lvl+0x188/0x250 [ 72.833651][ T4589] ? show_regs_print_info+0x20/0x20 [ 72.838860][ T4589] ? load_image+0x410/0x410 [ 72.843379][ T4589] ? __might_sleep+0xf0/0xf0 [ 72.847979][ T4589] ? __lock_acquire+0x7d40/0x7d40 [ 72.853022][ T4589] should_fail+0x383/0x4b0 [ 72.857454][ T4589] should_failslab+0x5/0x20 [ 72.861966][ T4589] slab_pre_alloc_hook+0x51/0xc0 [ 72.866909][ T4589] ? __kernfs_new_node+0xe3/0x6b0 [ 72.871949][ T4589] kmem_cache_alloc+0x3d/0x280 [ 72.876724][ T4589] __kernfs_new_node+0xe3/0x6b0 [ 72.881588][ T4589] ? __lock_acquire+0x7d40/0x7d40 [ 72.886622][ T4589] ? kernfs_new_node+0x250/0x250 [ 72.891584][ T4589] ? kernfs_activate+0x1eb/0x210 [ 72.896547][ T4589] kernfs_new_node+0x148/0x250 [ 72.901329][ T4589] __kernfs_create_file+0x47/0x2e0 [ 72.906458][ T4589] sysfs_add_file_mode_ns+0x2d2/0x390 [ 72.911843][ T4589] sysfs_merge_group+0x182/0x320 [ 72.916790][ T4589] ? sysfs_remove_groups+0xa0/0xa0 [ 72.921903][ T4589] ? kernfs_add_one+0x564/0x6c0 [ 72.926767][ T4589] ? sysfs_create_groups+0xf6/0x120 [ 72.931976][ T4589] dpm_sysfs_add+0xce/0x270 [ 72.936494][ T4589] device_add+0x745/0x1050 [ 72.940922][ T4589] netdev_register_kobject+0x184/0x320 [ 72.946391][ T4589] register_netdevice+0x10e8/0x1720 [ 72.951609][ T4589] ? netif_stacked_transfer_operstate+0x200/0x200 [ 72.958033][ T4589] ? validate_linkmsg+0x3db/0x4c0 [ 72.963071][ T4589] ? rtnl_create_link+0x85f/0xa90 [ 72.968106][ T4589] vxcan_newlink+0x41c/0x650 [ 72.972700][ T4589] ? __kasan_kmalloc+0xaf/0xe0 [ 72.977469][ T4589] ? kvmalloc_node+0x84/0x130 [ 72.982158][ T4589] ? vxcan_setup+0x350/0x350 [ 72.986751][ T4589] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 72.991835][ T4589] ? validate_linkmsg+0x3db/0x4c0 [ 72.996892][ T4589] ? rtnl_create_link+0x85f/0xa90 [ 73.001928][ T4589] ? vxcan_setup+0x350/0x350 [ 73.006525][ T4589] rtnl_newlink+0x139e/0x1920 [ 73.011223][ T4589] ? rtnl_setlink+0x500/0x500 [ 73.015913][ T4589] ? __lock_acquire+0x13b3/0x7d40 [ 73.020945][ T4589] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 73.026930][ T4589] ? lock_chain_count+0x20/0x20 [ 73.031870][ T4589] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 73.037008][ T4589] ? rtnl_setlink+0x500/0x500 [ 73.041692][ T4589] rtnetlink_rcv_msg+0x7f1/0xf10 [ 73.046644][ T4589] ? lock_chain_count+0x20/0x20 [ 73.051506][ T4589] ? rtnetlink_bind+0x80/0x80 [ 73.056193][ T4589] ? __local_bh_enable_ip+0x136/0x1c0 [ 73.061570][ T4589] ? lockdep_hardirqs_on+0x94/0x140 [ 73.066775][ T4589] ? __local_bh_enable_ip+0x136/0x1c0 [ 73.072150][ T4589] ? _local_bh_enable+0xa0/0xa0 [ 73.077017][ T4589] ? __dev_queue_xmit+0x1b64/0x2e50 [ 73.082235][ T4589] ? dev_queue_xmit+0x20/0x20 [ 73.086925][ T4589] ? memcpy+0x3c/0x60 [ 73.090911][ T4589] ? __copy_skb_header+0x3ba/0x4f0 [ 73.096035][ T4589] netlink_rcv_skb+0x1e9/0x430 [ 73.100801][ T4589] ? rtnetlink_bind+0x80/0x80 [ 73.105484][ T4589] ? netlink_ack+0xb10/0xb10 [ 73.110088][ T4589] netlink_unicast+0x78f/0x940 [ 73.114875][ T4589] netlink_sendmsg+0x8ba/0xbe0 [ 73.119649][ T4589] ? netlink_getsockopt+0x570/0x570 [ 73.124848][ T4589] ? aa_sock_msg_perm+0x94/0x150 [ 73.129792][ T4589] ? apparmor_socket_sendmsg+0x88/0x230 [ 73.135340][ T4589] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 73.140630][ T4589] ? security_socket_sendmsg+0x7c/0xa0 [ 73.146093][ T4589] ? netlink_getsockopt+0x570/0x570 [ 73.151299][ T4589] ____sys_sendmsg+0x5be/0x8f0 [ 73.156077][ T4589] ? __sys_sendmsg_sock+0x30/0x30 [ 73.161115][ T4589] ? import_iovec+0x6f/0xa0 [ 73.165626][ T4589] ___sys_sendmsg+0x236/0x2e0 [ 73.170316][ T4589] ? __sys_sendmsg+0x290/0x290 [ 73.175120][ T4589] __se_sys_sendmsg+0x1b7/0x2a0 [ 73.179982][ T4589] ? __x64_sys_sendmsg+0x80/0x80 [ 73.184934][ T4589] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 73.190931][ T4589] ? lockdep_hardirqs_on+0x94/0x140 [ 73.196134][ T4589] do_syscall_64+0x4c/0xa0 [ 73.200549][ T4589] ? clear_bhb_loop+0x30/0x80 [ 73.205236][ T4589] ? clear_bhb_loop+0x30/0x80 [ 73.209916][ T4589] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.215812][ T4589] RIP: 0033:0x7f38a48e92d9 [ 73.220228][ T4589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.239837][ T4589] RSP: 002b:00007f38a2b41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.248259][ T4589] RAX: ffffffffffffffda RBX: 00007f38a4b70fa0 RCX: 00007f38a48e92d9 [ 73.256243][ T4589] RDX: 0000000000004010 RSI: 0000200000000200 RDI: 0000000000000004 [ 73.264224][ T4589] RBP: 00007f38a4980888 R08: 0000000000000000 R09: 0000000000000000 [ 73.272196][ T4589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.280169][ T4589] R13: 00007f38a4b71038 R14: 00007f38a4b70fa0 R15: 00007ffec46e1768 [ 73.288161][ T4589] [ 73.442568][ T4599] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.495511][ T4407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.638755][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.710606][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.959232][ T26] Bluetooth: hci4: command 0x040f tx timeout [ 73.981216][ T4407] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.159508][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.172323][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.207977][ T4609] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.215155][ T4609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.232911][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.257566][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.269642][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.438309][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.445501][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.656179][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.707513][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.720303][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.758466][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.838939][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.866106][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.906103][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.946464][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.973861][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.988405][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.001339][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.020697][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.905976][ T4646] loop3: detected capacity change from 0 to 1024 [ 75.985827][ T4646] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 75.999027][ T4646] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 76.044815][ T4646] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.97: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 76.111173][ T26] Bluetooth: hci4: command 0x0419 tx timeout [ 76.154723][ T4646] EXT4-fs (loop3): no journal found [ 76.160355][ T4646] EXT4-fs (loop3): can't get journal size [ 76.191190][ T4646] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,journal_dev=0x0000000000000003,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 76.273770][ T4662] loop1: detected capacity change from 0 to 8 [ 76.358496][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.368701][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.428406][ T4662] SQUASHFS error: zlib decompression failed, data probably corrupt [ 76.451033][ T4407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.470118][ T4662] SQUASHFS error: Failed to read block 0x9b: -5 [ 76.488674][ T25] audit: type=1800 audit(1791952446.305:4): pid=4666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.103" name="protocol" dev="configfs" ino=34343 res=0 errno=0 [ 76.567360][ T4662] SQUASHFS error: Unable to read metadata cache entry [99] [ 76.705213][ T25] audit: type=1800 audit(1791952446.345:5): pid=4666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.103" name="report_length" dev="configfs" ino=34345 res=0 errno=0 [ 76.727388][ T4662] SQUASHFS error: Unable to read inode 0x127 [ 77.326573][ T4674] FAULT_INJECTION: forcing a failure. [ 77.326573][ T4674] name failslab, interval 1, probability 0, space 0, times 0 [ 77.349305][ T4674] CPU: 1 PID: 4674 Comm: syz.2.106 Not tainted syzkaller #0 [ 77.356654][ T4674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.366719][ T4674] Call Trace: [ 77.370006][ T4674] [ 77.372939][ T4674] dump_stack_lvl+0x188/0x250 [ 77.377620][ T4674] ? show_regs_print_info+0x20/0x20 [ 77.382818][ T4674] ? load_image+0x410/0x410 [ 77.387343][ T4674] ? __might_sleep+0xf0/0xf0 [ 77.391942][ T4674] ? __lock_acquire+0x7d40/0x7d40 [ 77.396987][ T4674] should_fail+0x383/0x4b0 [ 77.401421][ T4674] should_failslab+0x5/0x20 [ 77.405930][ T4674] slab_pre_alloc_hook+0x51/0xc0 [ 77.410876][ T4674] ? sockfs_init_fs_context+0xa0/0xa0 [ 77.416258][ T4674] ? sock_alloc_inode+0x17/0xb0 [ 77.421124][ T4674] kmem_cache_alloc+0x3d/0x280 [ 77.425897][ T4674] ? sockfs_init_fs_context+0xa0/0xa0 [ 77.431283][ T4674] sock_alloc_inode+0x17/0xb0 [ 77.435979][ T4674] ? sockfs_init_fs_context+0xa0/0xa0 [ 77.441364][ T4674] new_inode_pseudo+0x5f/0x210 [ 77.446147][ T4674] __sock_create+0x128/0x910 [ 77.450765][ T4674] __sys_socket+0xe2/0x170 [ 77.455193][ T4674] __x64_sys_socket+0x76/0x80 [ 77.459882][ T4674] do_syscall_64+0x4c/0xa0 [ 77.464307][ T4674] ? clear_bhb_loop+0x30/0x80 [ 77.469000][ T4674] ? clear_bhb_loop+0x30/0x80 [ 77.473688][ T4674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.479589][ T4674] RIP: 0033:0x7fde276d72d9 [ 77.484019][ T4674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.503633][ T4674] RSP: 002b:00007fde2592f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 77.512060][ T4674] RAX: ffffffffffffffda RBX: 00007fde2795efa0 RCX: 00007fde276d72d9 [ 77.520044][ T4674] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 77.528024][ T4674] RBP: 00007fde2776e888 R08: 0000000000000000 R09: 0000000000000000 [ 77.536004][ T4674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.543985][ T4674] R13: 00007fde2795f038 R14: 00007fde2795efa0 R15: 00007ffeafad72b8 [ 77.551981][ T4674] [ 77.846825][ T4681] loop3: detected capacity change from 0 to 4096 [ 78.021252][ T4674] socket: no more sockets [ 78.251659][ T4693] ======================================================= [ 78.251659][ T4693] WARNING: The mand mount option has been deprecated and [ 78.251659][ T4693] and is ignored by this kernel. Remove the mand [ 78.251659][ T4693] option from the mount to silence this warning. [ 78.251659][ T4693] ======================================================= [ 78.287317][ T4693] 9pnet_virtio: no channels available for device ./proc/file0 [ 78.298452][ T4693] FAULT_INJECTION: forcing a failure. [ 78.298452][ T4693] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.311589][ T4693] CPU: 0 PID: 4693 Comm: syz.0.107 Not tainted syzkaller #0 [ 78.318880][ T4693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.328940][ T4693] Call Trace: [ 78.332219][ T4693] [ 78.335152][ T4693] dump_stack_lvl+0x188/0x250 [ 78.339839][ T4693] ? show_regs_print_info+0x20/0x20 [ 78.345039][ T4693] ? load_image+0x410/0x410 [ 78.349548][ T4693] ? __lock_acquire+0x7d40/0x7d40 [ 78.354589][ T4693] should_fail+0x383/0x4b0 [ 78.359013][ T4693] _copy_from_iter+0x234/0x1160 [ 78.363869][ T4693] ? __lock_acquire+0x7d40/0x7d40 [ 78.368924][ T4693] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 78.374308][ T4693] ? __virt_addr_valid+0x3c6/0x470 [ 78.379425][ T4693] ? __phys_addr_symbol+0x2b/0x70 [ 78.384451][ T4693] ? __check_object_size+0x30c/0x410 [ 78.389740][ T4693] pfkey_sendmsg+0x1fc/0x1130 [ 78.394425][ T4693] ? pfkey_release+0x340/0x340 [ 78.399182][ T4693] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 78.405170][ T4693] ? aa_sk_perm+0x7dc/0x910 [ 78.409685][ T4693] ? aa_af_perm+0x340/0x340 [ 78.414188][ T4693] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 78.420606][ T4693] ? aa_sock_msg_perm+0x94/0x150 [ 78.425552][ T4693] ? apparmor_socket_sendmsg+0x88/0x230 [ 78.431100][ T4693] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 78.436390][ T4693] ? security_socket_sendmsg+0x7c/0xa0 [ 78.441850][ T4693] ? pfkey_release+0x340/0x340 [ 78.446622][ T4693] ____sys_sendmsg+0x5be/0x8f0 [ 78.451393][ T4693] ? __sys_sendmsg_sock+0x30/0x30 [ 78.456430][ T4693] ? import_iovec+0x6f/0xa0 [ 78.460935][ T4693] ___sys_sendmsg+0x236/0x2e0 [ 78.465623][ T4693] ? __sys_sendmsg+0x290/0x290 [ 78.470382][ T4693] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 78.476379][ T4693] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 78.482021][ T4693] ? lockdep_hardirqs_on+0x94/0x140 [ 78.487233][ T4693] ? __se_sys_sendmsg+0xe2/0x2a0 [ 78.492178][ T4693] ? kasan_check_range+0x84/0x290 [ 78.497215][ T4693] __se_sys_sendmsg+0x1b7/0x2a0 [ 78.502071][ T4693] ? __x64_sys_sendmsg+0x80/0x80 [ 78.507008][ T4693] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 78.513008][ T4693] ? lockdep_hardirqs_on+0x94/0x140 [ 78.518224][ T4693] do_syscall_64+0x4c/0xa0 [ 78.522651][ T4693] ? clear_bhb_loop+0x30/0x80 [ 78.527339][ T4693] ? clear_bhb_loop+0x30/0x80 [ 78.532027][ T4693] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.537921][ T4693] RIP: 0033:0x7fd9a319c2d9 [ 78.542337][ T4693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.561944][ T4693] RSP: 002b:00007fd9a13b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.570369][ T4693] RAX: ffffffffffffffda RBX: 00007fd9a3424180 RCX: 00007fd9a319c2d9 [ 78.578353][ T4693] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 78.586328][ T4693] RBP: 00007fd9a3233888 R08: 0000000000000000 R09: 0000000000000000 [ 78.594296][ T4693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.602263][ T4693] R13: 00007fd9a3424218 R14: 00007fd9a3424180 R15: 00007ffff01f4588 [ 78.610238][ T4693] [ 78.818357][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.832253][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.949344][ T25] audit: type=1326 audit(1791952448.745:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde276d72d9 code=0x7ffc0000 [ 79.135558][ T4681] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 79.402438][ T25] audit: type=1326 audit(1791952448.745:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde276d72d9 code=0x7ffc0000 [ 79.437219][ T4407] device veth0_vlan entered promiscuous mode [ 79.480678][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.490001][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.530676][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.548360][ T25] audit: type=1326 audit(1791952448.745:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde276d72d9 code=0x7ffc0000 [ 79.576792][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.634629][ T4407] device veth1_vlan entered promiscuous mode [ 79.694012][ T4681] EXT4-fs (loop3): shut down requested (0) [ 79.726509][ T25] audit: type=1326 audit(1791952448.755:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde276d72d9 code=0x7ffc0000 [ 79.770162][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.780867][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.814737][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.850083][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.874234][ T25] audit: type=1326 audit(1791952448.755:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde276d72d9 code=0x7ffc0000 [ 79.877277][ T4407] device veth0_macvtap entered promiscuous mode [ 79.946016][ T25] audit: type=1326 audit(1791952448.755:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde276d72d9 code=0x7ffc0000 [ 79.977397][ T25] audit: type=1326 audit(1791952448.755:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde276d72d9 code=0x7ffc0000 [ 80.027034][ T25] audit: type=1326 audit(1791952448.755:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.2.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde276d72d9 code=0x7ffc0000 [ 80.147505][ T4407] device veth1_macvtap entered promiscuous mode [ 80.316736][ T4407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.605351][ T4407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.723620][ T4407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.746417][ T4407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.764719][ T4407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.777319][ T4407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.797624][ T4407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.838175][ T4737] loop1: detected capacity change from 0 to 128 [ 80.854823][ T4407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.902850][ T4407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.927236][ T4737] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.945385][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.945982][ T4737] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.954103][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.995487][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.004656][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.053526][ T4407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.064335][ T4407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.074619][ T4407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.085790][ T4407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.096102][ T4407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.108694][ T4407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.118631][ T4407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.129144][ T4407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.140543][ T4407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.166785][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.181477][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.210371][ T4407] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.237995][ T4407] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.279165][ T4407] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.308362][ T4407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.392015][ T7] cfg80211: failed to load regulatory.db [ 82.689137][ C1] sched: RT throttling activated [ 82.734828][ T4746] tipc: Can't bind to reserved service type 2 [ 83.344472][ T4752] syz.3.123 (4752): /proc/4751/oom_adj is deprecated, please use /proc/4751/oom_score_adj instead. [ 83.768688][ T4765] loop1: detected capacity change from 0 to 2048 [ 83.785009][ T4767] loop3: detected capacity change from 0 to 512 [ 83.882537][ T4765] EXT4-fs (loop1): Unrecognized mount option "smackfstransmute=?" or missing value [ 83.899652][ T4767] EXT4-fs (loop3): Test dummy encryption mode enabled [ 83.981119][ T4767] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.126: inode has both inline data and extents flags [ 83.996113][ T4462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.004122][ T4767] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.126: couldn't read orphan inode 15 (err -117) [ 84.023034][ T4462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.049336][ T4767] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 84.238071][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.098486][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.131744][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.194059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.208867][ T4786] loop2: detected capacity change from 0 to 128 [ 85.379903][ T4786] EXT4-fs (loop2): inline encryption not supported [ 85.386538][ T4786] EXT4-fs (loop2): Unrecognized mount option "func=POLICY_CHECK" or missing value [ 85.439013][ T4793] capability: warning: `syz.5.47' uses deprecated v2 capabilities in a way that may be insecure [ 85.478731][ T4791] loop1: detected capacity change from 0 to 4096 [ 86.265981][ T4791] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.424713][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.135'. [ 87.727050][ T4842] loop2: detected capacity change from 0 to 512 [ 87.792202][ T4835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 88.093735][ T4848] loop1: detected capacity change from 0 to 2048 [ 88.194839][ T4858] overlayfs: unrecognized mount option "verity=on" or missing value [ 88.453993][ T4848] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.631157][ T4848] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 88.719783][ T4848] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.789365][ T4848] EXT4-fs (loop1): This should not happen!! Data will be lost [ 88.789365][ T4848] [ 88.799048][ T4848] EXT4-fs (loop1): Total free blocks count 0 [ 88.835089][ T4848] EXT4-fs (loop1): Free/Dirty block details [ 88.859565][ T4848] EXT4-fs (loop1): free_blocks=4096 [ 88.901344][ T4848] EXT4-fs (loop1): dirty_blocks=64 [ 88.906505][ T4848] EXT4-fs (loop1): Block reservation details [ 88.962418][ T4848] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 89.026438][ T4847] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 89.687261][ T4883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 89.689386][ T4847] EXT4-fs (loop1): This should not happen!! Data will be lost [ 89.689386][ T4847] [ 89.696117][ T4883] netlink: 14 bytes leftover after parsing attributes in process `syz.2.154'. [ 90.322488][ T4897] FAULT_INJECTION: forcing a failure. [ 90.322488][ T4897] name failslab, interval 1, probability 0, space 0, times 0 [ 90.429241][ T4897] CPU: 0 PID: 4897 Comm: syz.0.158 Not tainted syzkaller #0 [ 90.436573][ T4897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 90.446639][ T4897] Call Trace: [ 90.449924][ T4897] [ 90.452862][ T4897] dump_stack_lvl+0x188/0x250 [ 90.457572][ T4897] ? __netlink_deliver_tap+0x522/0x7c0 [ 90.463045][ T4897] ? netlink_unicast+0x759/0x940 [ 90.468002][ T4897] ? show_regs_print_info+0x20/0x20 [ 90.473211][ T4897] ? load_image+0x410/0x410 [ 90.477721][ T4897] ? register_lock_class+0xc0/0x880 [ 90.482947][ T4897] should_fail+0x383/0x4b0 [ 90.487379][ T4897] should_failslab+0x5/0x20 [ 90.491891][ T4897] slab_pre_alloc_hook+0x51/0xc0 [ 90.496841][ T4897] ? xfrm_state_alloc+0x1e/0x2a0 [ 90.501787][ T4897] kmem_cache_alloc+0x3d/0x280 [ 90.506560][ T4897] ? aa_get_newest_label+0xf5/0x5a0 [ 90.511780][ T4897] xfrm_state_alloc+0x1e/0x2a0 [ 90.516556][ T4897] xfrm_add_sa+0xfc9/0x30d0 [ 90.521072][ T4897] ? xfrm_net_nlsk+0x120/0x120 [ 90.525840][ T4897] ? apparmor_capable+0x12c/0x190 [ 90.530878][ T4897] ? __nla_parse+0x3c/0x50 [ 90.535462][ T4897] xfrm_user_rcv_msg+0x7fc/0xaa0 [ 90.540424][ T4897] ? xfrm_netlink_rcv+0x90/0x90 [ 90.545323][ T4897] ? __mutex_lock_common+0x435/0x2400 [ 90.550718][ T4897] netlink_rcv_skb+0x1e9/0x430 [ 90.555491][ T4897] ? xfrm_netlink_rcv+0x66/0x90 [ 90.560355][ T4897] ? xfrm_netlink_rcv+0x90/0x90 [ 90.565222][ T4897] ? netlink_ack+0xb10/0xb10 [ 90.569827][ T4897] ? __lock_acquire+0x7d40/0x7d40 [ 90.574877][ T4897] xfrm_netlink_rcv+0x75/0x90 [ 90.579565][ T4897] netlink_unicast+0x78f/0x940 [ 90.584355][ T4897] netlink_sendmsg+0x8ba/0xbe0 [ 90.589132][ T4897] ? netlink_getsockopt+0x570/0x570 [ 90.594356][ T4897] ? aa_sock_msg_perm+0x94/0x150 [ 90.599288][ T4897] ? apparmor_socket_sendmsg+0x88/0x230 [ 90.604825][ T4897] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 90.610100][ T4897] ? security_socket_sendmsg+0x7c/0xa0 [ 90.615548][ T4897] ? netlink_getsockopt+0x570/0x570 [ 90.620739][ T4897] ____sys_sendmsg+0x5be/0x8f0 [ 90.625501][ T4897] ? __sys_sendmsg_sock+0x30/0x30 [ 90.630523][ T4897] ? import_iovec+0x6f/0xa0 [ 90.635017][ T4897] ___sys_sendmsg+0x236/0x2e0 [ 90.639686][ T4897] ? __sys_sendmsg+0x290/0x290 [ 90.644464][ T4897] __se_sys_sendmsg+0x1b7/0x2a0 [ 90.649326][ T4897] ? __x64_sys_sendmsg+0x80/0x80 [ 90.654251][ T4897] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.660231][ T4897] ? lockdep_hardirqs_on+0x94/0x140 [ 90.665431][ T4897] do_syscall_64+0x4c/0xa0 [ 90.669834][ T4897] ? clear_bhb_loop+0x30/0x80 [ 90.674503][ T4897] ? clear_bhb_loop+0x30/0x80 [ 90.679170][ T4897] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.685066][ T4897] RIP: 0033:0x7fd9a319c2d9 [ 90.689469][ T4897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.709060][ T4897] RSP: 002b:00007fd9a13f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.717466][ T4897] RAX: ffffffffffffffda RBX: 00007fd9a3423fa0 RCX: 00007fd9a319c2d9 [ 90.725426][ T4897] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 90.733386][ T4897] RBP: 00007fd9a3233888 R08: 0000000000000000 R09: 0000000000000000 [ 90.741372][ T4897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.749432][ T4897] R13: 00007fd9a3424038 R14: 00007fd9a3423fa0 R15: 00007ffff01f4588 [ 90.757415][ T4897] [ 90.760439][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.834212][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 91.068358][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079402c00: rx timeout, send abort [ 91.218880][ T4928] 9pnet_virtio: no channels available for device ./proc/file0 [ 91.653695][ T4947] loop0: detected capacity change from 0 to 512 [ 91.974609][ T4947] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.417796][ T4955] loop5: detected capacity change from 0 to 512 [ 92.433394][ T4947] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 92.462750][ T4947] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 92.480504][ T4947] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 92.607707][ T4955] EXT4-fs (loop5): Ignoring removed oldalloc option [ 92.636084][ T4955] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 92.662187][ T4955] EXT4-fs (loop5): orphan cleanup on readonly fs [ 92.689765][ T4947] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 92.733829][ T4968] INFO: trying to register non-static key. [ 92.739660][ T4968] The code is fine but needs lockdep annotation, or maybe [ 92.740911][ T4955] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 92.746756][ T4968] you didn't initialize this object before use? [ 92.746762][ T4968] turning off the locking correctness validator. [ 92.773772][ T4968] CPU: 0 PID: 4968 Comm: syz.1.176 Not tainted syzkaller #0 [ 92.781059][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.791188][ T4968] Call Trace: [ 92.794470][ T4968] [ 92.797403][ T4968] dump_stack_lvl+0x188/0x250 [ 92.802088][ T4968] ? show_regs_print_info+0x20/0x20 [ 92.807309][ T4968] ? load_image+0x410/0x410 [ 92.811823][ T4968] ? cpumask_next+0xb3/0xd0 [ 92.816337][ T4968] assign_lock_key+0x1ec/0x200 [ 92.821105][ T4968] ? SOFTIRQ_verbose+0x10/0x10 [ 92.825882][ T4968] ? verify_lock_unused+0x140/0x140 [ 92.831092][ T4968] register_lock_class+0x21d/0x880 [ 92.831489][ T4947] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 92.836211][ T4968] ? is_dynamic_key+0x1f0/0x1f0 [ 92.836233][ T4968] ? rcu_lock_release+0x5/0x20 [ 92.854455][ T4968] __lock_acquire+0x265/0x7d40 [ 92.855116][ T4955] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 92.859252][ T4968] ? __lock_acquire+0x12df/0x7d40 [ 92.859276][ T4968] ? __rwlock_init+0x140/0x140 [ 92.859293][ T4968] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 92.879194][ T4955] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #13: comm syz.5.170: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 92.881470][ T4968] ? verify_lock_unused+0x140/0x140 [ 92.904340][ T4968] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 92.910238][ T4968] ? _raw_spin_unlock+0x40/0x40 [ 92.915092][ T4968] ? verify_lock_unused+0x140/0x140 [ 92.920304][ T4968] ? stack_trace_save+0xa6/0xf0 [ 92.925281][ T4968] ? stack_depot_save+0x41b/0x460 [ 92.927117][ T4962] FAT-fs (loop0): error, clusters badly computed (1 != 2) [ 92.930311][ T4968] lock_acquire+0x19f/0x400 [ 92.930334][ T4968] ? gsmld_write+0x57/0x120 [ 92.930353][ T4968] ? memcpy+0x3c/0x60 [ 92.947586][ T4955] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.170: couldn't read orphan inode 13 (err -117) [ 92.950370][ T4968] ? read_lock_is_recursive+0x10/0x10 [ 92.950392][ T4968] ? _copy_from_iter+0x8f9/0x1160 [ 92.950410][ T4968] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 92.977901][ T4968] ? lockdep_hardirqs_off+0x70/0x100 [ 92.983199][ T4968] _raw_spin_lock_irqsave+0xb0/0x100 [ 92.988496][ T4968] ? gsmld_write+0x57/0x120 [ 92.992762][ T4955] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,grpjquota=,debug,oldalloc,journal_ioprio=0x0000000000000006,grpid,,errors=continue. Quota mode: writeback. [ 92.993005][ T4968] ? _raw_spin_lock+0x40/0x40 [ 93.016736][ T4968] ? __virt_addr_valid+0x3c6/0x470 [ 93.021852][ T4968] gsmld_write+0x57/0x120 [ 93.026189][ T4968] file_tty_write+0x50c/0x8a0 [ 93.030872][ T4968] ? gsmld_read+0x10/0x10 [ 93.035201][ T4968] do_iter_readv_writev+0x47d/0x5f0 [ 93.040396][ T4968] ? aa_path_link+0x8a0/0x8a0 [ 93.045075][ T4968] ? generic_file_rw_checks+0x280/0x280 [ 93.050628][ T4968] ? common_file_perm+0x171/0x1c0 [ 93.055656][ T4968] ? fsnotify_perm+0x5d/0x560 [ 93.060331][ T4968] ? security_file_permission+0x75/0xa0 [ 93.065877][ T4968] do_iter_write+0x1f8/0x7a0 [ 93.068431][ T4962] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 93.070465][ T4968] ? memset+0x1e/0x40 [ 93.070480][ T4968] ? iov_iter_bvec+0xb4/0x170 [ 93.070497][ T4968] iter_file_splice_write+0x6be/0xcf0 [ 93.070519][ T4968] ? splice_from_pipe+0x180/0x180 [ 93.070531][ T4968] ? generic_file_splice_read+0x483/0x5f0 [ 93.070549][ T4968] ? splice_shrink_spd+0xc0/0xc0 [ 93.070566][ T4968] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 93.070587][ T4968] ? splice_from_pipe+0x180/0x180 [ 93.070601][ T4968] direct_splice_actor+0xe1/0x130 [ 93.070617][ T4968] splice_direct_to_actor+0x4e8/0xc00 [ 93.131706][ T4968] ? direct_file_splice_eof+0xa0/0xa0 [ 93.137095][ T4968] ? pipe_to_sendpage+0x320/0x320 [ 93.142141][ T4968] ? common_file_perm+0x171/0x1c0 [ 93.147163][ T4968] ? fsnotify_perm+0x5d/0x560 [ 93.151818][ T4968] ? security_file_permission+0x75/0xa0 [ 93.157344][ T4968] do_splice_direct+0x1d4/0x2f0 [ 93.162209][ T4968] ? splice_direct_to_actor+0xc00/0xc00 [ 93.167747][ T4968] ? do_splice_direct+0x2f0/0x2f0 [ 93.172767][ T4968] ? common_file_perm+0x171/0x1c0 [ 93.177783][ T4968] ? fsnotify_perm+0x5d/0x560 [ 93.182443][ T4968] ? security_file_permission+0x75/0xa0 [ 93.187973][ T4968] do_sendfile+0x524/0xe30 [ 93.192389][ T4968] ? do_pwritev+0x3a0/0x3a0 [ 93.196879][ T4968] ? __lock_acquire+0x7d40/0x7d40 [ 93.201887][ T4968] __se_sys_sendfile64+0x141/0x1a0 [ 93.206986][ T4968] ? lock_chain_count+0x20/0x20 [ 93.211821][ T4968] ? __x64_sys_sendfile64+0xa0/0xa0 [ 93.216998][ T4968] ? lockdep_hardirqs_on+0x94/0x140 [ 93.222180][ T4968] do_syscall_64+0x4c/0xa0 [ 93.226577][ T4968] ? clear_bhb_loop+0x30/0x80 [ 93.231237][ T4968] ? clear_bhb_loop+0x30/0x80 [ 93.235896][ T4968] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.241771][ T4968] RIP: 0033:0x7efff6e492d9 [ 93.246179][ T4968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.265766][ T4968] RSP: 002b:00007efff50a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 93.274157][ T4968] RAX: ffffffffffffffda RBX: 00007efff70d0fa0 RCX: 00007efff6e492d9 [ 93.282110][ T4968] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 93.290064][ T4968] RBP: 00007efff6ee0888 R08: 0000000000000000 R09: 0000000000000000 [ 93.298015][ T4968] R10: 00000000002000fb R11: 0000000000000246 R12: 0000000000000000 [ 93.305968][ T4968] R13: 00007efff70d1038 R14: 00007efff70d0fa0 R15: 00007ffcd505afb8 [ 93.313927][ T4968] [ 93.317015][ C0] vkms_vblank_simulate: vblank timer overrun