last executing test programs: 29.253891122s ago: executing program 1 (id=6): pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f0000000ac0)="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"/472, 0x1d8}, {&(0x7f0000000e40)="09ec8b684fbd9f0a18960e84defd08b28dc2f98b5aad5cfeb075441d6d15233b802af831523479391b7297416ddff60a6500da9864b042a3105e6ff295aaff14d9077735f34eaec042e8252a6456999297ed02a01da56a3809f0c58184192ebf4bead7e8618412536273bf08e0f6847e436dc74f9afe55639834dc4c941dfb330a7b92b049700cb67e0f14337d8390091514253c2f2d4499d89b5f04759319e2c7b6856f03c69029b689f0be37093c79e8ff2405eb93cbfe5487143a294c3e61b0c9be8323cd4d01c37e5f5d4bf94546d02d4dc988dbb47ee61e5be16f4c7701cc671d25000000000000aeebbef22d7f2d931c963877fead2ab06279afc4ae478a7078a7bbdac4c800a22f128ee9bc899bfd5deb66020573afcc8defb54a535ea2b58349463561392e0524203e7be632e162559fc3b538b8338b4bf1e6de1bc735612bb2fc209ba7eb2dbdd06fed65af89e8b314b5a6b309e10c4a50d56fafac82f33c79cd5b0d4324fd65e76f059f29ab898eeacc72ff0299a6c434fda16e04721b0a4b6ff9698edda863d6511e6b5a531197b508318d6ccaaac93baed37b29d42ba4f7bcec7bf73b01f307ce317774f78b245f53a1b2a746c2af0357c3adcd2c1a25e14bb3b4262c66becae48d37d8cb602cc911341c71d3b2011215cd29f5844a277d9f48f3096366405f32fd866ee6a6eaaba51628919f78374a13baeb3c64efe1b36845e4ef44c545fcb86bf851289081cef3a358f10e49b5c923d729315ac0e6ad", 0x224}, {&(0x7f0000000840)="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", 0x13f}, {&(0x7f00000001c0)="f39a9e8346ddfd46f5ba7fbc251c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec00"/66, 0x42}, {&(0x7f0000000240)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f600262371ef8dae091786d7f9a5d7ca234f8852df8f05000f02b5258ec56ec5fdd5f3c2", 0x44}], 0x5, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) 29.100465412s ago: executing program 1 (id=8): setresgid(0xee00, 0xee01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) fsetxattr$system_posix_acl(r0, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x6, r1}], {0x10, 0x3}, {0x20, 0x6}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 28.910070204s ago: executing program 1 (id=10): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x9ffa, @empty}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 28.749380383s ago: executing program 1 (id=13): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x408, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x2000, 0x2dd8806920477201, 0x0) 27.950194476s ago: executing program 1 (id=19): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x12000021) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 27.177092844s ago: executing program 1 (id=28): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000300)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12141, 0x0) 27.013397832s ago: executing program 32 (id=28): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000300)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12141, 0x0) 4.372151938s ago: executing program 3 (id=199): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) read$char_usb(r3, &(0x7f0000000340)=""/170, 0xaa) 3.814197838s ago: executing program 0 (id=205): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.373666482s ago: executing program 3 (id=208): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0xfe, 0x10f4, &(0x7f00000022c0)="$eJzs2LGK1FAUBuD/JqNgNXK3DwtaKMjiMr7AFgrTWFjbDVZ2TqXM4/g4spX9sg+wxYK9ksToCoIsGxwYvg9Ccn9ycnLLcwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9RXI/yVGT1ClrkpSk687Xl0m6KX/4pW1S8ubdevvyw+rVdnwtfdak9FXDup4+qnVVV/W0vjg6e1y3Hz+9b2+0LOlycb3bPHh9NetW+t7trF8EAACAw/D9zpZ77g8AAAD8y2wHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzqNNDk6QkXXe+vkzS7fe3AAAAgDsqafJ2+bd8PAb47Vm+LsuQT74Ni+f5PNY/vX33e7cvAQAAgANVbszjT7L4NZf32XEWOTkZ1z9vuTpL2mEy/9PF9W4zXMe7TfmfGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH6wA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAgKkCAAD//4CP0SQ=") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x28200, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3.373114672s ago: executing program 4 (id=209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x60, r4, 0x1, 0x1000000, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x0) 3.169172771s ago: executing program 4 (id=211): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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") bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close_range(r0, 0xffffffffffffffff, 0x0) 3.168817772s ago: executing program 2 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) 3.015298181s ago: executing program 0 (id=214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffff2834) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1}, 0x66e}], 0x2, 0x21, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) 2.759403271s ago: executing program 2 (id=216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100"], 0x80}}, 0x2000c080) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.679385085s ago: executing program 0 (id=217): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002d80)={0x3, 0x0, [{0x2, 0xfffffffffffffcde, &(0x7f0000001a40)=""/125}, {0xdddd0000, 0x1e, &(0x7f0000001c00)=""/30}, {0x5000, 0xff3, &(0x7f0000001c40)=""/4083}]}) 2.593837078s ago: executing program 4 (id=218): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_open_procfs(0x0, 0x0) syz_clone3(&(0x7f0000000580)={0x111840000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.462744773s ago: executing program 0 (id=220): syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80242, 0x1d3) 2.313441834s ago: executing program 2 (id=221): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4d) lseek(r2, 0x1, 0x1) getdents64(r2, 0x0, 0x4f) 2.221918546s ago: executing program 5 (id=222): socket$kcm(0xa, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.209561253s ago: executing program 0 (id=223): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8fffb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x60) write$cgroup_int(r1, &(0x7f0000000240), 0x12) 2.127384377s ago: executing program 2 (id=224): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.841114541s ago: executing program 2 (id=225): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000480)=0x7) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xffffffbe, 0x1004, 0x80d1, 0xa, 0x5, "0c631be01fbcd2b7cb366b000000fbf6433500", 0x6, 0x9}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xf) 1.677251669s ago: executing program 3 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2e, 0x10, 0x1}}}}}}, 0x0) 1.644343402s ago: executing program 5 (id=227): syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000440)={r3, 0xdf, 0x20007, 0x6, 0x1, [], [0x7, 0x7, 0x2, 0x3], [0x1, 0x4, 0x6, 0x3abb], [0x7, 0x7, 0x3, 0x2]}) 1.63207577s ago: executing program 2 (id=228): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004200)=@newtaction={0x14, 0x30, 0x200, 0xf0bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close_range(r0, 0xffffffffffffffff, 0x0) 1.591861712s ago: executing program 4 (id=229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000740)="89", 0x1}], 0x1}}], 0x1, 0x4000010) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvfrom$inet(r0, &(0x7f00000005c0)=""/128, 0x80, 0x0, 0x0, 0x0) 1.420257539s ago: executing program 5 (id=230): unshare(0x400) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a34f124708900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r3, 0xffffffffffffffff}) poll(&(0x7f00000001c0)=[{r4}], 0x1, 0x0) 1.207587297s ago: executing program 3 (id=231): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.206538487s ago: executing program 5 (id=241): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)="c4", 0xffffffffffffff95, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 1.100452305s ago: executing program 5 (id=232): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 541.266136ms ago: executing program 4 (id=233): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fchdir(r0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000ac0)='syscall\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007) 535.508075ms ago: executing program 5 (id=234): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) mount$nfs4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10090ce, 0x0) open$dir(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80d00, 0x0) mknod$loop(&(0x7f0000003e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20, 0x1) creat(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) 172.569413ms ago: executing program 3 (id=235): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x10010) 101.71951ms ago: executing program 4 (id=236): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file0\x00', 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESDEC, @ANYRES32], 0x1, 0xa1b, &(0x7f0000001540)="$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") r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x2) 54.91263ms ago: executing program 3 (id=237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1_to_batadv\x00', 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1ff}, 0x8) close(r0) 0s ago: executing program 0 (id=238): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x67, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 55.207490][ T4172] cgroup: Unknown subsys name 'net' [ 55.350557][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.875521][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.278298][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 58.357041][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 58.388568][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 58.471876][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 58.504338][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.511663][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.520448][ T4190] device bridge_slave_0 entered promiscuous mode [ 58.529835][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 58.566213][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.573641][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.583860][ T4190] device bridge_slave_1 entered promiscuous mode [ 58.596319][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.603827][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.612497][ T4185] device bridge_slave_0 entered promiscuous mode [ 58.644551][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.652088][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.660694][ T4185] device bridge_slave_1 entered promiscuous mode [ 58.668602][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.676027][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.684026][ T4186] device bridge_slave_0 entered promiscuous mode [ 58.720132][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.727679][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.736120][ T4186] device bridge_slave_1 entered promiscuous mode [ 58.744990][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.767187][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.810601][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.823413][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.841889][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.853859][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.870000][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.877350][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.885656][ T4193] device bridge_slave_0 entered promiscuous mode [ 58.902581][ T4190] team0: Port device team_slave_0 added [ 58.920215][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.927956][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.936166][ T4193] device bridge_slave_1 entered promiscuous mode [ 58.952441][ T4190] team0: Port device team_slave_1 added [ 58.960157][ T4185] team0: Port device team_slave_0 added [ 58.975429][ T4185] team0: Port device team_slave_1 added [ 58.981843][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.989342][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.997702][ T4195] device bridge_slave_0 entered promiscuous mode [ 59.012014][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.019266][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.027598][ T4195] device bridge_slave_1 entered promiscuous mode [ 59.043026][ T4186] team0: Port device team_slave_0 added [ 59.079113][ T4186] team0: Port device team_slave_1 added [ 59.093254][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.100790][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.127759][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.142589][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.157760][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.165519][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.191834][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.210587][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.218208][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.245341][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.258577][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.270104][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.279790][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.287384][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.314077][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.329999][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.337200][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.363596][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.389565][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.405413][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.412560][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.439715][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.487283][ T4195] team0: Port device team_slave_0 added [ 59.496006][ T4193] team0: Port device team_slave_0 added [ 59.526765][ T4185] device hsr_slave_0 entered promiscuous mode [ 59.533526][ T4185] device hsr_slave_1 entered promiscuous mode [ 59.542475][ T4195] team0: Port device team_slave_1 added [ 59.549862][ T4193] team0: Port device team_slave_1 added [ 59.585322][ T4190] device hsr_slave_0 entered promiscuous mode [ 59.592443][ T4190] device hsr_slave_1 entered promiscuous mode [ 59.599210][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.607772][ T4190] Cannot create hsr debugfs directory [ 59.619063][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.626791][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.653777][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.671309][ T4186] device hsr_slave_0 entered promiscuous mode [ 59.678880][ T4186] device hsr_slave_1 entered promiscuous mode [ 59.688485][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.696245][ T4186] Cannot create hsr debugfs directory [ 59.713267][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.720327][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.746543][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.774391][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.781628][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.808195][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.826072][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.833140][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.860011][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.928776][ T4193] device hsr_slave_0 entered promiscuous mode [ 59.936134][ T4193] device hsr_slave_1 entered promiscuous mode [ 59.942678][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.950766][ T4193] Cannot create hsr debugfs directory [ 60.015746][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 60.021169][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 60.022546][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 60.029403][ T4195] device hsr_slave_0 entered promiscuous mode [ 60.034923][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 60.047323][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 60.047897][ T4195] device hsr_slave_1 entered promiscuous mode [ 60.060974][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.068929][ T4195] Cannot create hsr debugfs directory [ 60.312910][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.324224][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.334017][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.355022][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.413379][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.422322][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.432050][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.445159][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.540037][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.554373][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.578255][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.588366][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.611504][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.622682][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.632689][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.653522][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.677707][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.689515][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.697597][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.710232][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.722764][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.742422][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.751832][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.763692][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.771177][ T1204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.804084][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.812345][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.822506][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.832342][ T1204] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.839452][ T1204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.847481][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.857723][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.867714][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.879865][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.891258][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.899721][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.920487][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.931594][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.952547][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.963203][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.973641][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.985327][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.009087][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.019081][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.028307][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.035855][ T1204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.077663][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.086154][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.095135][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.105032][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.113515][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.123565][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.133607][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.143835][ T1204] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.151868][ T1204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.161069][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.170323][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.209334][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.226687][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.236632][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.250323][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.263141][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.274437][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.284499][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.303135][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.314929][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.346111][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.353375][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.364285][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.383572][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.392726][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.404103][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.413232][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.423053][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.431533][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.439845][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.449040][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.458118][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.466909][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.487593][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.512720][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.525500][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.557125][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.564429][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.601036][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.610116][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.620080][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.637962][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.645630][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.655303][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.663986][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.673848][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.681040][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.688846][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.698689][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.708659][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.716183][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.723770][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.733357][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.763930][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.790500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.800649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.817038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.830423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.843311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.853915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.865226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.877307][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.898143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.915922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.931424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.941920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.953822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.962910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.973128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.983202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.992416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.000992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.019469][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.028666][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.044285][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.057022][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.070474][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.089185][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.097256][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 62.103786][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 62.122711][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.136112][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 62.142608][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 62.143622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.149520][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 62.163818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.173569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.183819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.192669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.200531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.208211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.217877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.234495][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.286881][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.300224][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.309181][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.316623][ T4237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.338385][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.347531][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.356704][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.363760][ T4237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.371946][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.382199][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.408600][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.441371][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.467110][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.478950][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.536523][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.545833][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.554516][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.564012][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.573117][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.588788][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.597569][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.607016][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.616164][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.623686][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.634728][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.644607][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.655379][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.671686][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.692400][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.700265][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.709232][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.717837][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.727902][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.738183][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.758699][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.778825][ T4193] device veth0_vlan entered promiscuous mode [ 62.797260][ T4185] device veth0_vlan entered promiscuous mode [ 62.832634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.841416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.853561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.861796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.882844][ T4193] device veth1_vlan entered promiscuous mode [ 62.892008][ T4185] device veth1_vlan entered promiscuous mode [ 62.920356][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.936878][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.953250][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.964218][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.975557][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.987305][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.026263][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.039281][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.049363][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.058463][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.071053][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.079653][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.096752][ T4190] device veth0_vlan entered promiscuous mode [ 63.114690][ T4185] device veth0_macvtap entered promiscuous mode [ 63.123270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.132341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.143007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.152762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.163555][ T4195] device veth0_vlan entered promiscuous mode [ 63.181850][ T4190] device veth1_vlan entered promiscuous mode [ 63.191835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.200294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.209931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.218462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.233252][ T4193] device veth0_macvtap entered promiscuous mode [ 63.242521][ T4185] device veth1_macvtap entered promiscuous mode [ 63.255655][ T4195] device veth1_vlan entered promiscuous mode [ 63.267470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.276704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.285805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.295298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.304213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.317192][ T4193] device veth1_macvtap entered promiscuous mode [ 63.334553][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.355179][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.363589][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.377821][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.386565][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.395814][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.415709][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.434646][ T4190] device veth0_macvtap entered promiscuous mode [ 63.446431][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.462108][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.471799][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.483093][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.492557][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.501840][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.510827][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.520183][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.539928][ T4190] device veth1_macvtap entered promiscuous mode [ 63.561568][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.570882][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.580193][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.589974][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.602229][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.616408][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.630549][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.639997][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.648658][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.658851][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.667965][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.677370][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.690191][ T4195] device veth0_macvtap entered promiscuous mode [ 63.708060][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.720851][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.732622][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.754978][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.763230][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.773069][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.783897][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.800853][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.811838][ T4195] device veth1_macvtap entered promiscuous mode [ 63.831413][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.840635][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.850123][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.860187][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.892145][ T4186] device veth0_vlan entered promiscuous mode [ 63.903829][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.916438][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.926980][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.938607][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.950833][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.960283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.968746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.977944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.988169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.997457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.030996][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.044635][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.056979][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.068720][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.079417][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.091318][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.103325][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.114922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.124039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.133141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.142194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.160192][ T4186] device veth1_vlan entered promiscuous mode [ 64.174332][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.175500][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 64.185590][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 64.192059][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 64.203062][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 64.204497][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 64.210015][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.210056][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.239126][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.251244][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.272735][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.284020][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.296350][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.307698][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.318607][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.329716][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.341468][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.354544][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.363154][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.371726][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.381039][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.390332][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.399706][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.414274][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.424617][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.433664][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.442749][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.465770][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.474601][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.486977][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.496955][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.534348][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.548637][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.566076][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.575015][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.595429][ T4186] device veth0_macvtap entered promiscuous mode [ 64.632396][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.637980][ T4186] device veth1_macvtap entered promiscuous mode [ 64.647362][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.654117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.664297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.673820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.682490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.729712][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.748837][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.760753][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.771723][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.781639][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.792513][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.802890][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.813995][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.826939][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.851920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.865325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.885550][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.897673][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.909189][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.920169][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.931171][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.942372][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.952937][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.963685][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.977191][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.987534][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.997097][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.024587][ T1204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.029738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.046348][ T1204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.048091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.063773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.073794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.107519][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.114286][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.123740][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.134680][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.135918][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.146945][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.229726][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.257634][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.267995][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.280588][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.302807][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.340177][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.352083][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.381343][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.412874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.429558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.462851][ T4270] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.503656][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.523852][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.552637][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.640679][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.674931][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.682800][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.013321][ T4290] loop0: detected capacity change from 0 to 1024 [ 66.050734][ T4293] loop1: detected capacity change from 0 to 512 [ 66.069960][ T4290] ======================================================= [ 66.069960][ T4290] WARNING: The mand mount option has been deprecated and [ 66.069960][ T4290] and is ignored by this kernel. Remove the mand [ 66.069960][ T4290] option from the mount to silence this warning. [ 66.069960][ T4290] ======================================================= [ 66.154180][ T4293] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.191234][ T4293] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.219468][ T4298] loop3: detected capacity change from 0 to 1024 [ 66.238027][ T4290] EXT4-fs (loop0): Ignoring removed orlov option [ 66.249805][ T4293] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 66.255987][ T1326] Bluetooth: hci2: command 0x0419 tx timeout [ 66.266060][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 66.271757][ T4293] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.277100][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 66.294318][ T4290] EXT4-fs (loop0): inline encryption not supported [ 66.296011][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 66.317342][ T4301] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 66.327842][ T4301] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 66.343935][ T4301] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 66.359976][ T4293] EXT4-fs (loop1): 1 truncate cleaned up [ 66.370436][ T4293] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 66.409711][ T1326] Bluetooth: hci3: command 0x0419 tx timeout [ 66.468116][ T4290] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,noauto_da_alloc,inlinecrypt,dioread_lock,data_err=ignore,barrier=0x0000000000000007,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: writeback. [ 66.586529][ T4293] EXT4-fs (loop1): shut down requested (1) [ 66.628008][ T4293] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only [ 66.692891][ T4293] overlayfs: failed to get metacopy (-5) [ 67.079626][ T4322] device batadv_slave_0 entered promiscuous mode [ 67.161442][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.178753][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.193369][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.206273][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 67.206468][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.234036][ T4329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.237791][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.251115][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.271541][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.303557][ T4327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.372565][ T4325] device batadv_slave_0 left promiscuous mode [ 67.381848][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.405361][ T4334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 67.414942][ T4334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 67.424628][ T4334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 67.443766][ T4334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 67.471015][ T4334] Zero length message leads to an empty skb [ 67.535476][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.586651][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.615496][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.723239][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.854065][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.897617][ T4348] netlink: 260 bytes leftover after parsing attributes in process `syz.3.32'. [ 67.934535][ T4352] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.977345][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.396455][ T4363] loop2: detected capacity change from 0 to 4096 [ 68.478368][ T4363] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 68.499124][ T4363] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 68.941522][ T4354] chnl_net:caif_netlink_parms(): no params data found [ 68.951006][ T4363] EXT4-fs (loop2): Test dummy encryption mode enabled [ 68.999107][ T4363] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.37: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 69.055230][ T4363] EXT4-fs error (device loop2): ext4_quota_enable:6445: comm syz.2.37: Bad quota inode: 4, type: 1 [ 69.125393][ T4363] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.188368][ T4363] EXT4-fs (loop2): mount failed [ 69.210301][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.234802][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.243886][ T4354] device bridge_slave_0 entered promiscuous mode [ 69.288555][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.304578][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.327037][ T4354] device bridge_slave_1 entered promiscuous mode [ 69.418729][ T4354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.460942][ T4354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.584582][ T4354] team0: Port device team_slave_0 added [ 69.604419][ T4354] team0: Port device team_slave_1 added [ 69.710699][ T4354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.728230][ T4354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.740913][ T4370] loop3: detected capacity change from 0 to 32768 [ 69.842805][ T4354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.856710][ T4370] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.39 (4370) [ 69.889408][ T4401] loop4: detected capacity change from 0 to 40427 [ 69.894665][ T4354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.923475][ T4354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.971942][ T4401] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 70.022754][ T4401] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 70.034221][ T4370] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 70.047984][ T4354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.077360][ T4370] BTRFS info (device loop3): disabling free space tree [ 70.124919][ T4370] BTRFS info (device loop3): setting nodatacow, compression disabled [ 70.127155][ T4401] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.167479][ T4370] BTRFS info (device loop3): turning off barriers [ 70.174156][ T4370] BTRFS info (device loop3): use no compression [ 70.185177][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 70.302579][ T4370] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 70.382633][ T4370] BTRFS info (device loop3): trying to use backup root at mount time [ 70.466447][ T4370] BTRFS error (device loop3): cannot disable free space tree [ 70.477065][ T4401] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 70.489488][ T4354] device hsr_slave_0 entered promiscuous mode [ 70.517225][ T4401] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.529180][ T4370] BTRFS error (device loop3): open_ctree failed: -22 [ 70.540363][ T4354] device hsr_slave_1 entered promiscuous mode [ 70.586131][ T4354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.630681][ T4354] Cannot create hsr debugfs directory [ 70.966631][ T144] device hsr_slave_0 left promiscuous mode [ 71.006510][ T144] device hsr_slave_1 left promiscuous mode [ 71.026144][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.033818][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.058448][ T4370] loop3: detected capacity change from 0 to 4096 [ 71.085766][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.093315][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.135275][ T144] device bridge_slave_1 left promiscuous mode [ 71.142992][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.205550][ T144] device bridge_slave_0 left promiscuous mode [ 71.212104][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.299961][ T144] device veth1_macvtap left promiscuous mode [ 71.317937][ T144] device veth0_macvtap left promiscuous mode [ 71.338356][ T144] device veth1_vlan left promiscuous mode [ 71.344534][ T144] device veth0_vlan left promiscuous mode [ 71.461883][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.468886][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.886624][ T144] team0 (unregistering): Port device team_slave_1 removed [ 71.896691][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.910132][ T144] team0 (unregistering): Port device team_slave_0 removed [ 71.929352][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.963099][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.033963][ T144] bond0 (unregistering): Released all slaves [ 72.114943][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.186002][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 72.255259][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 72.320125][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.341982][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.359868][ T1107] usb 5-1: Using ep0 maxpacket: 8 [ 72.364617][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.389381][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.430127][ T4354] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.444669][ T21] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 72.454693][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.471462][ T21] usb 4-1: config 0 descriptor?? [ 72.485269][ T1107] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.506277][ T4354] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.513803][ T1107] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.544197][ T1107] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.546111][ T4354] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.571459][ T1107] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.598312][ T1107] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 72.608198][ T4354] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.615345][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.673277][ T4260] net_ratelimit: 83 callbacks suppressed [ 72.673297][ T4260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.816377][ T4227] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.881439][ T4354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.905241][ T1107] usb 5-1: GET_CAPABILITIES returned 0 [ 72.913398][ T1107] usbtmc 5-1:16.0: can't read capabilities [ 72.953239][ T4354] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.969790][ T21] hid-u2fzero 0003:10C4:8ACF.0001: unknown main item tag 0x0 [ 72.976154][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.996421][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.003512][ T21] hid-u2fzero 0003:10C4:8ACF.0001: unknown main item tag 0x0 [ 73.034344][ T21] hid-u2fzero 0003:10C4:8ACF.0001: collection stack underflow [ 73.035807][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.054433][ T21] hid-u2fzero 0003:10C4:8ACF.0001: item 0 0 0 12 parsing failed [ 73.072776][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.081266][ T21] hid-u2fzero: probe of 0003:10C4:8ACF.0001 failed with error -22 [ 73.095006][ T4227] usb 1-1: Using ep0 maxpacket: 16 [ 73.103231][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.110802][ T4267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.170119][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.202911][ T4262] usb 5-1: USB disconnect, device number 2 [ 73.217806][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.237913][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.260479][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.262483][ T4229] usb 4-1: USB disconnect, device number 2 [ 73.290031][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.298365][ T4227] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.298417][ T4227] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.298442][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.318980][ T4227] usb 1-1: config 0 descriptor?? [ 73.426334][ T4481] rm (4481) used greatest stack depth: 20784 bytes left [ 73.427626][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.440999][ T4267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.452365][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.491140][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.505022][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.516889][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.527537][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.547948][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.583650][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.599088][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.644312][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.665663][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.695994][ T4354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.705173][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.713344][ T4487] loop2: detected capacity change from 0 to 2048 [ 73.723971][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.743653][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.766401][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.861973][ T4487] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.872401][ T4495] netlink: 'syz.4.67': attribute type 12 has an invalid length. [ 73.876773][ T4227] HID 045e:07da: Invalid code 65791 type 1 [ 73.881038][ T4495] netlink: 'syz.4.67': attribute type 29 has an invalid length. [ 73.894894][ T4495] netlink: 148 bytes leftover after parsing attributes in process `syz.4.67'. [ 73.911183][ T4495] netlink: 'syz.4.67': attribute type 2 has an invalid length. [ 73.948247][ T4495] netlink: 23 bytes leftover after parsing attributes in process `syz.4.67'. [ 73.978607][ T4227] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input5 [ 74.123327][ T4227] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 74.225004][ T4227] usb 1-1: USB disconnect, device number 2 [ 74.335093][ T4174] Bluetooth: hci3: command 0x040f tx timeout [ 74.335261][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.341670][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.403032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.425995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.450663][ T4516] loop4: detected capacity change from 0 to 256 [ 74.497030][ T4354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.552572][ T4514] fido_id[4514]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 74.653614][ T4516] FAT-fs (loop4): Directory bread(block 64) failed [ 74.666518][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.717762][ T4516] FAT-fs (loop4): Directory bread(block 65) failed [ 74.724456][ T4516] FAT-fs (loop4): Directory bread(block 66) failed [ 74.737210][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.782043][ T4513] loop3: detected capacity change from 0 to 8192 [ 74.794202][ T4516] FAT-fs (loop4): Directory bread(block 67) failed [ 74.842692][ T4516] FAT-fs (loop4): Directory bread(block 68) failed [ 74.882427][ T4516] FAT-fs (loop4): Directory bread(block 69) failed [ 74.955642][ T4516] FAT-fs (loop4): Directory bread(block 70) failed [ 74.976100][ T4516] FAT-fs (loop4): Directory bread(block 71) failed [ 74.982860][ T4516] FAT-fs (loop4): Directory bread(block 72) failed [ 75.052660][ T4516] FAT-fs (loop4): Directory bread(block 73) failed [ 75.060867][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.296982][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.314024][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.339102][ T4538] loop3: detected capacity change from 0 to 128 [ 75.351907][ T4540] loop2: detected capacity change from 0 to 128 [ 75.429546][ T26] audit: type=1804 audit(1773119531.085:2): pid=4540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.78" name="/newroot/17/bus/bus" dev="loop2" ino=1048592 res=1 errno=0 [ 75.450502][ T4544] capability: warning: `syz.0.79' uses 32-bit capabilities (legacy support in use) [ 75.482748][ T4538] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 75.531950][ T4538] hpfs: filesystem error: improperly stopped [ 75.593382][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.602487][ T4538] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 75.617125][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.639425][ T4538] hpfs: You really don't want any checks? You are crazy... [ 75.680770][ T4538] hpfs: hpfs_map_sector(): read error [ 75.700366][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.703188][ T4538] hpfs: code page support is disabled [ 75.743376][ T4538] hpfs: hpfs_map_4sectors(): unaligned read [ 75.751257][ T4540] attempt to access beyond end of device [ 75.751257][ T4540] loop2: rw=2049, want=129, limit=128 [ 75.752489][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.776915][ T4538] hpfs: hpfs_map_4sectors(): unaligned read [ 75.795015][ T1107] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.798872][ T4538] hpfs: filesystem error: unable to find root dir [ 75.839490][ T4354] device veth0_vlan entered promiscuous mode [ 75.850453][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.876287][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.900388][ T4540] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 75.933031][ T4354] device veth1_vlan entered promiscuous mode [ 76.080666][ T4354] device veth0_macvtap entered promiscuous mode [ 76.117978][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.127295][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.151141][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.155261][ T1107] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 76.184986][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.205514][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.224259][ T4354] device veth1_macvtap entered promiscuous mode [ 76.242434][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.245611][ T1107] usb 1-1: config 0 descriptor?? [ 76.266798][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.313571][ T4564] syz.3.81 uses obsolete (PF_INET,SOCK_PACKET) [ 76.322052][ T1107] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 76.329772][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.368094][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.415064][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 76.447685][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.493524][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.520243][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.554831][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.582757][ T4354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.618483][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.636441][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.660474][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.672820][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.683716][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.694632][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.706532][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.717592][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.728815][ T4354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.739718][ T4354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.750014][ T1107] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 76.759027][ T4354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.769630][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.794491][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.833945][ T4354] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.874875][ T4354] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.884319][ T4354] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.914799][ T4354] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.155417][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.166898][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.208135][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.264426][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.281771][ T21] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 77.300614][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.342917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.405030][ T1107] gspca_cpia1: usb_control_msg 05, error -71 [ 77.420731][ T1107] cpia1 1-1:0.0: unexpected systemstate: 00 [ 77.495895][ T1107] usb 1-1: USB disconnect, device number 3 [ 77.735160][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.786933][ T21] usb 4-1: not running at top speed; connect to a high speed hub [ 77.858746][ T1107] net_ratelimit: 17 callbacks suppressed [ 77.858765][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.875398][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.883808][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.900368][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.920797][ T21] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 77.983822][ T4585] loop2: detected capacity change from 0 to 32768 [ 78.091476][ T4619] loop0: detected capacity change from 0 to 1024 [ 78.145271][ T21] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 78.183667][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.250095][ T21] usb 4-1: Product: syz [ 78.254465][ T21] usb 4-1: Manufacturer: syz [ 78.260289][ T4619] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 78.331487][ T21] usb 4-1: SerialNumber: syz [ 78.393519][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.393652][ T4585] XFS (loop2): Mounting V5 Filesystem [ 78.433429][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.505751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.589072][ T4585] XFS (loop2): Ending clean mount [ 78.640068][ T4649] loop4: detected capacity change from 0 to 256 [ 78.652877][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.659375][ T4585] XFS (loop2): Quotacheck needed: Please wait. [ 78.776096][ T21] usb 4-1: 0:2 : does not exist [ 78.823582][ T4649] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 78.883108][ T21] usb 4-1: USB disconnect, device number 3 [ 78.910769][ T4585] XFS (loop2): Quotacheck: Done. [ 79.136893][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.159460][ T4585] XFS (loop2): User initiated shutdown received. [ 79.162375][ T4662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.183993][ T4662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.219996][ T4585] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 79.238775][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.268291][ T4228] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 79.320609][ T4585] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 79.423339][ T4186] XFS (loop2): Unmounting Filesystem [ 79.567475][ T4675] loop4: detected capacity change from 0 to 256 [ 79.592089][ T4674] loop0: detected capacity change from 0 to 1024 [ 79.653953][ T4675] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb85330b9, utbl_chksum : 0xe619d30d) [ 79.696222][ T4228] usb 6-1: config 0 has no interfaces? [ 79.878707][ T4228] usb 6-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 79.916743][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.951837][ T4228] usb 6-1: Product: syz [ 79.977877][ T4228] usb 6-1: Manufacturer: syz [ 79.982913][ T4228] usb 6-1: SerialNumber: syz [ 80.020180][ T4228] usb 6-1: config 0 descriptor?? [ 80.036451][ T1239] hfsplus: b-tree write err: -5, ino 3 [ 80.468235][ T1326] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.487612][ T21] usb 6-1: USB disconnect, device number 2 [ 80.866395][ T1326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.882960][ T1326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.893730][ T1326] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.907832][ T1326] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.918830][ T1326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.941583][ T1326] usb 5-1: config 0 descriptor?? [ 81.099436][ T4717] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 81.426987][ T1326] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.434646][ T1326] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.442540][ T1326] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.450248][ T1326] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.458085][ T1326] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 81.465010][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 81.466558][ T1326] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 81.496403][ T1326] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 81.554975][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.700688][ T1110] cfg80211: failed to load regulatory.db [ 81.716206][ T1326] usb 5-1: USB disconnect, device number 3 [ 81.815006][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 81.890288][ T21] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.911609][ T21] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.932998][ T21] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.096087][ T4230] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 82.107553][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.116993][ T4230] usb 1-1: Product: syz [ 82.121427][ T4230] usb 1-1: Manufacturer: syz [ 82.126516][ T4230] usb 1-1: SerialNumber: syz [ 82.159897][ T21] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 82.174894][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 82.193713][ T21] usb 6-1: Product: syz [ 82.203064][ T21] usb 6-1: Manufacturer: syz [ 82.224848][ T21] usb 6-1: SerialNumber: syz [ 82.420880][ T4230] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 82.465391][ T4230] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 82.496358][ T4230] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 82.506281][ T4230] usb 1-1: media controller created [ 82.519048][ T21] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 82.527335][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.816659][ T4230] zl10353_read_register: readreg error (reg=127, ret==-110) [ 82.850521][ T21] usb 6-1: USB disconnect, device number 3 [ 82.884014][ T4720] usblp0: removed [ 82.912852][ T4228] net_ratelimit: 23 callbacks suppressed [ 82.912882][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.968075][ T4230] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 82.996730][ T4230] usb 1-1: USB disconnect, device number 4 [ 83.283340][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.300400][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.310981][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.345866][ T4773] device bridge1 entered promiscuous mode [ 83.352353][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.361748][ T4771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.372360][ T4773] team0: Port device bridge1 added [ 83.388160][ T4776] bridge0: port 3(team0) entered blocking state [ 83.453493][ T4776] bridge0: port 3(team0) entered disabled state [ 83.554228][ T4776] device team0 entered promiscuous mode [ 83.579374][ T4776] device team_slave_0 entered promiscuous mode [ 83.599027][ T4776] device team_slave_1 entered promiscuous mode [ 83.616135][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.647184][ T4776] bridge0: port 3(team0) entered blocking state [ 83.654079][ T4776] bridge0: port 3(team0) entered forwarding state [ 83.674915][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 83.936921][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.972941][ T4801] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 1, id = 0 [ 84.015305][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.017653][ T4802] loop0: detected capacity change from 0 to 1024 [ 84.220677][ T4802] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 84.496061][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.578330][ T4818] bridge0: port 3(team0) entered disabled state [ 84.608068][ T4824] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.067012][ T4845] netlink: 'syz.0.165': attribute type 1 has an invalid length. [ 85.088752][ T26] audit: type=1326 audit(1773119540.745:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.5.164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83e8d00799 code=0x0 [ 85.120861][ T4845] bond1: (slave ip6gretap1): making interface the new active one [ 85.130370][ T4845] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 85.140874][ T4845] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 85.149088][ T4845] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 85.803906][ T4841] loop2: detected capacity change from 0 to 32768 [ 85.877089][ T4841] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.163 (4841) [ 85.988373][ T4841] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 86.029429][ T4838] loop3: detected capacity change from 0 to 40427 [ 86.034813][ T4841] BTRFS info (device loop2): using free space tree [ 86.042752][ T4841] BTRFS info (device loop2): has skinny extents [ 86.143023][ T4838] F2FS-fs (loop3): invalid crc value [ 86.214955][ T4838] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.516080][ T4838] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.541625][ T4841] BTRFS info (device loop2): enabling ssd optimizations [ 86.613650][ T4854] loop4: detected capacity change from 0 to 40427 [ 86.651832][ T4854] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 86.701717][ T4854] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 86.758193][ T4854] F2FS-fs (loop4): inline encryption not supported [ 86.801809][ T4854] F2FS-fs (loop4): invalid crc value [ 86.806009][ T4905] loop0: detected capacity change from 0 to 1024 [ 86.830641][ T4854] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.897807][ T4872] tls_set_device_offload: netdev not found [ 86.961003][ T4905] EXT4-fs (loop0): inline encryption not supported [ 87.065881][ T4905] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.120218][ T4854] F2FS-fs (loop4): Start checkpoint disabled! [ 87.173412][ T4854] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 87.323555][ T4905] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 87.450795][ T4854] F2FS-fs (loop4) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x185/0x8f0 [ 87.505665][ T4393] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 87.530995][ T4854] overlayfs: failed to resolve './file2': -2 [ 87.655582][ T1110] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 87.746417][ T4393] attempt to access beyond end of device [ 87.746417][ T4393] loop4: rw=2049, want=41000, limit=40427 [ 87.788103][ T4926] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.914900][ T1110] usb 6-1: Using ep0 maxpacket: 8 [ 88.110973][ T21] net_ratelimit: 16 callbacks suppressed [ 88.110992][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.205833][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.210508][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.221933][ T4941] tipc: Can't bind to reserved service type 1 [ 88.248718][ T4195] attempt to access beyond end of device [ 88.248718][ T4195] loop3: rw=2049, want=45104, limit=40427 [ 88.285241][ T1110] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 88.294338][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.323231][ T1110] usb 6-1: Product: syz [ 88.327579][ T1110] usb 6-1: Manufacturer: syz [ 88.332279][ T1110] usb 6-1: SerialNumber: syz [ 88.387113][ T1110] usb 6-1: config 0 descriptor?? [ 88.432465][ T4943] netlink: 232 bytes leftover after parsing attributes in process `syz.4.180'. [ 88.451384][ T1110] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 88.583830][ T4938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.753371][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.027557][ T4938] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.135116][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.284984][ T4938] usb 5-1: Using ep0 maxpacket: 32 [ 89.377216][ T4230] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.406044][ T4938] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 89.416925][ T4938] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.426120][ T4938] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.436970][ T4938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.446514][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805fd7c400: rx timeout, send abort [ 89.448921][ T4938] usb 5-1: config 0 descriptor?? [ 89.634954][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 89.723353][ T21] usb 5-1: USB disconnect, device number 4 [ 89.755344][ T4230] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 89.765495][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.781102][ T4230] usb 1-1: config 0 descriptor?? [ 89.855468][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.947807][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888060774c00: rx timeout, send abort [ 89.956618][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805fd7c400: abort rx timeout. Force session deactivation [ 90.045017][ T4230] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 90.054846][ T1110] gspca_sonixj: i2c_w8 err -71 [ 90.062417][ T4230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 90.105245][ T4230] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 90.113078][ T4230] usb 1-1: media controller created [ 90.125622][ T1110] sonixj: probe of 6-1:0.0 failed with error -71 [ 90.130556][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.157713][ T1110] usb 6-1: USB disconnect, device number 4 [ 90.191371][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.263487][ T4230] az6027: usb out operation failed. (-71) [ 90.304908][ T4230] az6027: usb out operation failed. (-71) [ 90.310869][ T4230] stb0899_attach: Driver disabled by Kconfig [ 90.342602][ T4230] az6027: no front-end attached [ 90.342602][ T4230] [ 90.375043][ T4230] az6027: usb out operation failed. (-71) [ 90.382907][ T4230] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 90.413431][ T4230] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 90.456336][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888060774c00: abort rx timeout. Force session deactivation [ 90.483696][ T4230] dvb-usb: schedule remote query interval to 400 msecs. [ 90.495238][ T4230] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 90.526223][ T4230] usb 1-1: USB disconnect, device number 5 [ 90.658080][ T4230] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 90.754147][ T4990] loop4: detected capacity change from 0 to 4096 [ 91.066473][ T4185] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 91.088126][ T4185] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 91.235159][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.307195][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.660741][ T5016] loop4: detected capacity change from 0 to 512 [ 91.703277][ T5019] tipc: Started in network mode [ 91.722617][ T5019] tipc: Node identity ac14142f, cluster identity 4711 [ 91.726371][ T5007] loop3: detected capacity change from 0 to 8192 [ 91.746955][ T5019] tipc: New replicast peer: 0.0.0.0 [ 91.766987][ T5016] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.801184][ T5016] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 91.806497][ T5019] tipc: Enabled bearer , priority 10 [ 91.821956][ T5007] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 91.898662][ T5007] REISERFS (device loop3): using ordered data mode [ 91.908309][ T5007] reiserfs: using flush barriers [ 91.959208][ T5007] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.205493][ T5007] REISERFS (device loop3): checking transaction log (loop3) [ 92.244617][ T5045] process 'syz.5.219' launched './file2' with NULL argv: empty string added [ 92.531568][ T5007] REISERFS (device loop3): Using tea hash to sort names [ 92.571169][ T5007] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 92.598152][ T5057] netlink: 'syz.5.222': attribute type 10 has an invalid length. [ 92.636591][ T5057] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.646041][ T5057] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.675257][ T5007] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 92.704259][ T5061] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 92.762180][ T5057] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.769576][ T5057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.777307][ T5057] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.784603][ T5057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.835030][ T5007] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 92.892705][ T5057] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 92.917675][ T5007] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 92.938051][ T4232] tipc: Node number set to 2886997039 [ 93.402016][ T21] net_ratelimit: 1 callbacks suppressed [ 93.402033][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.611120][ T5059] loop0: detected capacity change from 0 to 32768 [ 93.754345][ T5059] JBD2: Ignoring recovery information on journal [ 93.783936][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 93.794151][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 93.802000][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.812096][ T4196] Workqueue: hci3 hci_rx_work [ 93.817042][ T4196] Call Trace: [ 93.820441][ T4196] [ 93.823426][ T4196] dump_stack_lvl+0x188/0x250 [ 93.828148][ T4196] ? show_regs_print_info+0x20/0x20 [ 93.833385][ T4196] ? load_image+0x400/0x400 [ 93.837941][ T4196] sysfs_create_dir_ns+0x26a/0x290 [ 93.843199][ T4196] ? sysfs_warn_dup+0xa0/0xa0 [ 93.848059][ T4196] ? process_one_work+0x85f/0x1010 [ 93.853216][ T4196] ? do_raw_spin_unlock+0x11d/0x230 [ 93.858577][ T4196] kobject_add_internal+0x6e0/0xd90 [ 93.863818][ T4196] kobject_add+0x160/0x230 [ 93.868274][ T4196] ? kobject_init+0x1d0/0x1d0 [ 93.872993][ T4196] ? klist_children_get+0x50/0x50 [ 93.878069][ T4196] ? get_device_parent+0x121/0x3f0 [ 93.883339][ T4196] device_add+0x483/0xfb0 [ 93.887733][ T4196] hci_conn_add_sysfs+0xd1/0x1e0 [ 93.892741][ T4196] le_conn_complete_evt+0xc48/0x15c0 [ 93.898079][ T4196] ? cs_le_create_conn+0x5e0/0x5e0 [ 93.903249][ T4196] ? __mutex_trylock_common+0x155/0x260 [ 93.908838][ T4196] hci_le_meta_evt+0x285/0x3c90 [ 93.913834][ T4196] ? hci_event_packet+0x37b/0x1370 [ 93.918998][ T4196] ? __lock_acquire+0x7d10/0x7d10 [ 93.924069][ T4196] ? hci_remote_host_features_evt+0x280/0x280 [ 93.930346][ T4196] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 93.936024][ T4196] ? mark_lock+0x94/0x320 [ 93.938126][ T5059] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 93.940479][ T4196] ? mutex_unlock+0x10/0x10 [ 93.940534][ T4196] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 93.960257][ T4196] ? lock_chain_count+0x20/0x20 [ 93.965152][ T4196] ? __rwlock_init+0x140/0x140 [ 93.969954][ T4196] hci_event_packet+0xe48/0x1370 [ 93.975070][ T4196] ? lockdep_hardirqs_on+0x94/0x140 [ 93.980417][ T4196] ? rcu_lock_release+0x20/0x20 [ 93.985480][ T4196] ? hci_send_to_monitor+0x9c/0x4a0 [ 93.990731][ T4196] hci_rx_work+0x255/0xa10 [ 93.995266][ T4196] process_one_work+0x85f/0x1010 [ 94.000329][ T4196] ? worker_detach_from_pool+0x240/0x240 [ 94.006067][ T4196] ? lockdep_hardirqs_off+0x70/0x100 [ 94.011480][ T4196] ? _raw_spin_lock_irq+0xb7/0xf0 [ 94.016550][ T4196] ? _raw_spin_lock_irqsave+0x100/0x100 [ 94.022414][ T4196] ? wq_worker_running+0x97/0x170 [ 94.027624][ T4196] worker_thread+0xaa6/0x1290 [ 94.032629][ T4196] kthread+0x436/0x520 [ 94.038506][ T4196] ? rcu_lock_release+0x20/0x20 [ 94.043600][ T4196] ? kthread_blkcg+0xd0/0xd0 [ 94.048230][ T4196] ret_from_fork+0x1f/0x30 [ 94.052764][ T4196] [ 94.055872][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.069183][ T4196] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 94.085107][ T4196] Bluetooth: hci3: failed to register connection device [ 94.319879][ T5111] loop5: detected capacity change from 0 to 512 [ 94.336959][ T4938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.442274][ T5111] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 94.506895][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.521783][ T5111] EXT4-fs warning (device loop5): dx_probe:869: inode #2: comm syz.5.234: Unimplemented hash flags: 0x0001 [ 94.529236][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.535490][ T5111] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.234: Corrupt directory, running e2fsck is recommended [ 94.661708][ T5111] EXT4-fs warning (device loop5): dx_probe:869: inode #2: comm syz.5.234: Unimplemented hash flags: 0x0001 [ 94.704330][ T5111] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.234: Corrupt directory, running e2fsck is recommended [ 94.755395][ T5125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.762468][ T5124] loop4: detected capacity change from 0 to 1024 [ 94.764053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.778998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.787460][ C1] ================================================================== [ 94.795893][ C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 94.803559][ C1] Read of size 2 at addr ffff8880236e0300 by task syz.3.237/5125 [ 94.811475][ C1] [ 94.813928][ C1] CPU: 1 PID: 5125 Comm: syz.3.237 Not tainted syzkaller #0 [ 94.821317][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.831561][ C1] Call Trace: [ 94.834848][ C1] [ 94.837697][ C1] dump_stack_lvl+0x188/0x250 [ 94.842392][ C1] ? show_regs_print_info+0x20/0x20 [ 94.847857][ C1] ? _printk+0xda/0x130 [ 94.852112][ C1] ? __nft_trace_packet+0x135/0x150 [ 94.857448][ C1] ? load_image+0x400/0x400 [ 94.862061][ C1] ? nft_synproxy_do_eval+0x3c9/0x570 [ 94.867613][ C1] print_address_description+0x60/0x2d0 [ 94.873287][ C1] ? __nft_trace_packet+0x135/0x150 [ 94.878576][ C1] kasan_report+0xdf/0x130 [ 94.882996][ C1] ? __nft_trace_packet+0x135/0x150 [ 94.888200][ C1] __nft_trace_packet+0x135/0x150 [ 94.893331][ C1] nft_do_chain+0x12a5/0x14f0 [ 94.898129][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 94.904337][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 94.909658][ C1] ? ipv6_find_tlv+0x270/0x270 [ 94.914452][ C1] nft_do_chain_inet+0x25c/0x340 [ 94.919752][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 94.924710][ C1] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 94.929571][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 94.934947][ C1] ? ip6table_mangle_hook+0x23c/0x7a0 [ 94.940321][ C1] ? lock_downgrade+0x770/0x830 [ 94.945183][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 94.950564][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 94.955593][ C1] nf_hook_slow+0xb9/0x200 [ 94.960017][ C1] ? ip6_input+0xa0/0xa0 [ 94.964256][ C1] NF_HOOK+0x1f2/0x390 [ 94.968508][ C1] ? ip6_input+0xa0/0xa0 [ 94.972751][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 94.978091][ C1] ? ip6_input+0xa0/0xa0 [ 94.982357][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 94.987679][ C1] ? ip6_rcv_finish+0x16b/0x240 [ 94.992527][ C1] ? refcount_add+0x80/0x80 [ 94.997039][ C1] NF_HOOK+0x303/0x390 [ 95.001114][ C1] ? refcount_add+0x80/0x80 [ 95.005619][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 95.010477][ C1] ? refcount_add+0x80/0x80 [ 95.014985][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 95.020269][ C1] __netif_receive_skb+0xcc/0x290 [ 95.025322][ C1] process_backlog+0x370/0x790 [ 95.030098][ C1] ? rps_trigger_softirq+0x210/0x210 [ 95.035473][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 95.041566][ C1] ? lock_chain_count+0x20/0x20 [ 95.046769][ C1] __napi_poll+0xc0/0x430 [ 95.051099][ C1] ? net_rx_action+0x307/0xa10 [ 95.055908][ C1] net_rx_action+0x4d4/0xa10 [ 95.060696][ C1] ? net_tx_action+0x880/0x880 [ 95.065568][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 95.071640][ C1] ? lock_chain_count+0x20/0x20 [ 95.076705][ C1] handle_softirqs+0x339/0x830 [ 95.081649][ C1] ? do_softirq+0x142/0x210 [ 95.086161][ C1] ? do_softirq+0x210/0x210 [ 95.090671][ C1] do_softirq+0x142/0x210 [ 95.095005][ C1] [ 95.097982][ C1] [ 95.101069][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 95.106844][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 95.113186][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 95.118581][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 95.124067][ C1] ? local_bh_enable+0x5/0x20 [ 95.128837][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 95.134387][ C1] ? _local_bh_enable+0xa0/0xa0 [ 95.139329][ C1] ? ip6_finish_output2+0xcb6/0x1510 [ 95.144856][ C1] ip6_finish_output2+0x1127/0x1510 [ 95.150155][ C1] ? nf_hook+0x360/0x360 [ 95.154633][ C1] ip6_xmit+0x109b/0x16d0 [ 95.158982][ C1] ? ip6_autoflowlabel+0xd0/0xd0 [ 95.164013][ C1] ? inet6_csk_route_socket+0x5f4/0xe60 [ 95.169571][ C1] ? read_lock_is_recursive+0x10/0x10 [ 95.175146][ C1] inet6_csk_xmit+0x405/0x680 [ 95.179853][ C1] ? inet6_csk_addr2sockaddr+0x1d0/0x1d0 [ 95.185641][ C1] ? tcp_v6_send_check+0x195/0x410 [ 95.190768][ C1] __tcp_transmit_skb+0x1d11/0x3200 [ 95.196071][ C1] ? __tcp_send_ack+0x5d0/0x5d0 [ 95.200935][ C1] ? tcp_fastopen_cookie_check+0x269/0x3c0 [ 95.206756][ C1] tcp_connect+0x2d71/0x4970 [ 95.211383][ C1] tcp_v6_connect+0x1224/0x1a30 [ 95.216358][ C1] ? tcp_v6_pre_connect+0xf0/0xf0 [ 95.221473][ C1] ? finish_lock_switch+0x12f/0x280 [ 95.226862][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 95.232092][ C1] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 95.237635][ C1] ? tcp_sendmsg_locked+0x2efa/0x3320 [ 95.243171][ C1] ? tcp_sendmsg+0x2b/0x40 [ 95.247614][ C1] ? __sys_sendto+0x46d/0x620 [ 95.252488][ C1] ? __x64_sys_sendto+0xda/0xf0 [ 95.257347][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.263531][ C1] __inet_stream_connect+0x244/0xd70 [ 95.268855][ C1] ? inet_dgram_connect+0x360/0x360 [ 95.274071][ C1] tcp_sendmsg_fastopen+0x38f/0x600 [ 95.279372][ C1] tcp_sendmsg_locked+0x2efa/0x3320 [ 95.284682][ C1] ? aa_sk_perm+0x910/0x910 [ 95.289203][ C1] ? mark_lock+0x94/0x320 [ 95.293621][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 95.299608][ C1] ? lock_chain_count+0x20/0x20 [ 95.304733][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 95.311055][ C1] ? tcp_free_fastopen_req+0x70/0x70 [ 95.316445][ C1] tcp_sendmsg+0x2b/0x40 [ 95.320933][ C1] __sys_sendto+0x46d/0x620 [ 95.325559][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 95.330966][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 95.336306][ C1] ? lock_chain_count+0x20/0x20 [ 95.341271][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 95.346516][ C1] __x64_sys_sendto+0xda/0xf0 [ 95.351310][ C1] do_syscall_64+0x4c/0xa0 [ 95.355734][ C1] ? clear_bhb_loop+0x30/0x80 [ 95.360507][ C1] ? clear_bhb_loop+0x30/0x80 [ 95.365275][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.371259][ C1] RIP: 0033:0x7f80c1260799 [ 95.375678][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.395896][ C1] RSP: 002b:00007f80bf4ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 95.404358][ C1] RAX: ffffffffffffffda RBX: 00007f80c14d9fa0 RCX: 00007f80c1260799 [ 95.412517][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 95.420663][ C1] RBP: 00007f80c12f6bd9 R08: 0000200000000200 R09: 000000000000001c [ 95.428644][ C1] R10: 00000000240540c7 R11: 0000000000000246 R12: 0000000000000000 [ 95.436787][ C1] R13: 00007f80c14da038 R14: 00007f80c14d9fa0 R15: 00007ffdb82c1978 [ 95.444955][ C1] [ 95.447978][ C1] [ 95.450302][ C1] Allocated by task 5125: [ 95.454621][ C1] __kasan_slab_alloc+0x9c/0xd0 [ 95.459652][ C1] slab_post_alloc_hook+0x4c/0x380 [ 95.464847][ C1] kmem_cache_alloc_node+0x12d/0x2d0 [ 95.470143][ C1] __alloc_skb+0xf4/0x750 [ 95.474474][ C1] synproxy_send_client_synack_ipv6+0x161/0xc60 [ 95.481057][ C1] nft_synproxy_eval_v6+0x347/0x4e0 [ 95.486340][ C1] nft_synproxy_do_eval+0x3c9/0x570 [ 95.491539][ C1] nft_do_chain+0x48c/0x14f0 [ 95.496128][ C1] nft_do_chain_inet+0x25c/0x340 [ 95.501064][ C1] nf_hook_slow+0xb9/0x200 [ 95.505561][ C1] NF_HOOK+0x1f2/0x390 [ 95.509628][ C1] NF_HOOK+0x303/0x390 [ 95.513693][ C1] __netif_receive_skb+0xcc/0x290 [ 95.518714][ C1] process_backlog+0x370/0x790 [ 95.523474][ C1] __napi_poll+0xc0/0x430 [ 95.527798][ C1] net_rx_action+0x4d4/0xa10 [ 95.532388][ C1] handle_softirqs+0x339/0x830 [ 95.537149][ C1] do_softirq+0x142/0x210 [ 95.541473][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 95.547237][ C1] ip6_finish_output2+0x1127/0x1510 [ 95.552526][ C1] ip6_xmit+0x109b/0x16d0 [ 95.556918][ C1] inet6_csk_xmit+0x405/0x680 [ 95.561677][ C1] __tcp_transmit_skb+0x1d11/0x3200 [ 95.567046][ C1] tcp_connect+0x2d71/0x4970 [ 95.571731][ C1] tcp_v6_connect+0x1224/0x1a30 [ 95.576762][ C1] __inet_stream_connect+0x244/0xd70 [ 95.582075][ C1] tcp_sendmsg_fastopen+0x38f/0x600 [ 95.587608][ C1] tcp_sendmsg_locked+0x2efa/0x3320 [ 95.592851][ C1] tcp_sendmsg+0x2b/0x40 [ 95.597388][ C1] __sys_sendto+0x46d/0x620 [ 95.602072][ C1] __x64_sys_sendto+0xda/0xf0 [ 95.606992][ C1] do_syscall_64+0x4c/0xa0 [ 95.611416][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.617669][ C1] [ 95.620091][ C1] Freed by task 5125: [ 95.624205][ C1] kasan_set_track+0x4b/0x70 [ 95.629124][ C1] kasan_set_free_info+0x1f/0x40 [ 95.634425][ C1] ____kasan_slab_free+0xd5/0x110 [ 95.639579][ C1] slab_free_freelist_hook+0xea/0x170 [ 95.644949][ C1] kmem_cache_free+0x8f/0x210 [ 95.649621][ C1] nft_synproxy_eval_v6+0x34f/0x4e0 [ 95.654952][ C1] nft_synproxy_do_eval+0x3c9/0x570 [ 95.660151][ C1] nft_do_chain+0x48c/0x14f0 [ 95.664838][ C1] nft_do_chain_inet+0x25c/0x340 [ 95.670119][ C1] nf_hook_slow+0xb9/0x200 [ 95.674790][ C1] NF_HOOK+0x1f2/0x390 [ 95.678894][ C1] NF_HOOK+0x303/0x390 [ 95.683230][ C1] __netif_receive_skb+0xcc/0x290 [ 95.688254][ C1] process_backlog+0x370/0x790 [ 95.693105][ C1] __napi_poll+0xc0/0x430 [ 95.697520][ C1] net_rx_action+0x4d4/0xa10 [ 95.702108][ C1] handle_softirqs+0x339/0x830 [ 95.706870][ C1] do_softirq+0x142/0x210 [ 95.711296][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 95.716578][ C1] ip6_finish_output2+0x1127/0x1510 [ 95.721777][ C1] ip6_xmit+0x109b/0x16d0 [ 95.726216][ C1] inet6_csk_xmit+0x405/0x680 [ 95.731057][ C1] __tcp_transmit_skb+0x1d11/0x3200 [ 95.736342][ C1] tcp_connect+0x2d71/0x4970 [ 95.741058][ C1] tcp_v6_connect+0x1224/0x1a30 [ 95.745996][ C1] __inet_stream_connect+0x244/0xd70 [ 95.752063][ C1] tcp_sendmsg_fastopen+0x38f/0x600 [ 95.757352][ C1] tcp_sendmsg_locked+0x2efa/0x3320 [ 95.762630][ C1] tcp_sendmsg+0x2b/0x40 [ 95.767087][ C1] __sys_sendto+0x46d/0x620 [ 95.771734][ C1] __x64_sys_sendto+0xda/0xf0 [ 95.776439][ C1] do_syscall_64+0x4c/0xa0 [ 95.781122][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.787102][ C1] [ 95.789424][ C1] The buggy address belongs to the object at ffff8880236e0280 [ 95.789424][ C1] which belongs to the cache skbuff_head_cache of size 232 [ 95.804747][ C1] The buggy address is located 128 bytes inside of [ 95.804747][ C1] 232-byte region [ffff8880236e0280, ffff8880236e0368) [ 95.818544][ C1] The buggy address belongs to the page: [ 95.824464][ C1] page:ffffea00008db800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880236e0500 pfn:0x236e0 [ 95.836050][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 95.843689][ C1] raw: 00fff00000000200 ffffea00008b9900 0000000b00000004 ffff888144bf0140 [ 95.852287][ C1] raw: ffff8880236e0500 00000000800c0006 00000001ffffffff 0000000000000000 [ 95.861151][ C1] page dumped because: kasan: bad access detected [ 95.867566][ C1] page_owner tracks the page as allocated [ 95.873274][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x132a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_MEMALLOC|__GFP_HARDWALL), pid 4262, ts 65918857996, free_ts 65772321316 [ 95.892218][ C1] get_page_from_freelist+0x1bbd/0x1ca0 [ 95.898003][ C1] __alloc_pages+0x1ee/0x480 [ 95.903039][ C1] new_slab+0xc0/0x4b0 [ 95.907194][ C1] ___slab_alloc+0x80a/0xdd0 [ 95.911789][ C1] kmem_cache_alloc_node+0x1c3/0x2d0 [ 95.917255][ C1] __alloc_skb+0xf4/0x750 [ 95.921706][ C1] __netdev_alloc_skb+0x110/0x4c0 [ 95.926727][ C1] __ieee80211_beacon_get+0xaa1/0x2000 [ 95.932278][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 95.937754][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 95.943302][ C1] __iterate_interfaces+0x243/0x500 [ 95.948682][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 95.955923][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 95.961232][ C1] __hrtimer_run_queues+0x4f2/0xb70 [ 95.966527][ C1] hrtimer_run_softirq+0x176/0x240 [ 95.971832][ C1] handle_softirqs+0x339/0x830 [ 95.976836][ C1] page last free stack trace: [ 95.981507][ C1] free_unref_page_prepare+0x637/0x6c0 [ 95.987487][ C1] free_unref_page+0x8f/0x2a0 [ 95.992564][ C1] __unfreeze_partials+0x1a5/0x200 [ 95.997674][ C1] put_cpu_partial+0x12d/0x190 [ 96.002694][ C1] qlist_free_all+0x35/0x90 [ 96.007195][ C1] kasan_quarantine_reduce+0x150/0x160 [ 96.012763][ C1] __kasan_slab_alloc+0x2f/0xd0 [ 96.018007][ C1] slab_post_alloc_hook+0x4c/0x380 [ 96.023221][ C1] kmem_cache_alloc_trace+0x103/0x2a0 [ 96.028597][ C1] memcg_update_all_list_lrus+0x2cc/0xba0 [ 96.034505][ C1] mem_cgroup_css_alloc+0xb25/0x1640 [ 96.039877][ C1] cgroup_apply_control_enable+0x3cc/0xb00 [ 96.045769][ C1] cgroup_mkdir+0xcc0/0xec0 [ 96.050275][ C1] kernfs_iop_mkdir+0x24c/0x3d0 [ 96.055385][ C1] vfs_mkdir+0x387/0x570 [ 96.059822][ C1] do_mkdirat+0x1df/0x5b0 [ 96.064423][ C1] [ 96.066901][ C1] Memory state around the buggy address: [ 96.072677][ C1] ffff8880236e0200: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 96.080752][ C1] ffff8880236e0280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.088820][ C1] >ffff8880236e0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 96.096993][ C1] ^ [ 96.101292][ C1] ffff8880236e0380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 96.109545][ C1] ffff8880236e0400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.118042][ C1] ================================================================== [ 96.126124][ C1] Disabling lock debugging due to kernel taint [ 96.132623][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.138955][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.146637][ C1] CPU: 1 PID: 5125 Comm: syz.3.237 Tainted: G B syzkaller #0 [ 96.155421][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 96.165697][ C1] Call Trace: [ 96.169099][ C1] [ 96.172075][ C1] dump_stack_lvl+0x188/0x250 [ 96.176778][ C1] ? show_regs_print_info+0x20/0x20 [ 96.182185][ C1] ? load_image+0x400/0x400 [ 96.186803][ C1] panic+0x2e5/0x810 [ 96.190861][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 96.195493][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 96.201602][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 96.207524][ C1] ? _raw_spin_unlock+0x40/0x40 [ 96.212414][ C1] ? print_memory_metadata+0x314/0x400 [ 96.218316][ C1] ? __nft_trace_packet+0x135/0x150 [ 96.223545][ C1] check_panic_on_warn+0x80/0xa0 [ 96.228521][ C1] ? __nft_trace_packet+0x135/0x150 [ 96.233875][ C1] end_report+0x6d/0xf0 [ 96.238083][ C1] kasan_report+0x102/0x130 [ 96.242617][ C1] ? __nft_trace_packet+0x135/0x150 [ 96.247935][ C1] __nft_trace_packet+0x135/0x150 [ 96.252990][ C1] nft_do_chain+0x12a5/0x14f0 [ 96.257880][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 96.260363][ T5124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.264076][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 96.264108][ C1] ? ipv6_find_tlv+0x270/0x270 [ 96.279980][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 96.283568][ C1] nft_do_chain_inet+0x25c/0x340 [ 96.283594][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 96.299910][ C1] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 96.304791][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 96.310224][ C1] ? ip6table_mangle_hook+0x23c/0x7a0 [ 96.315634][ C1] ? lock_downgrade+0x770/0x830 [ 96.316532][ T5111] EXT4-fs warning (device loop5): dx_probe:869: inode #2: comm syz.5.234: Unimplemented hash flags: 0x0001 [ 96.320509][ C1] ? nf_nat_ipv6_local_fn+0x390/0x390 [ 96.320536][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 96.342213][ C1] nf_hook_slow+0xb9/0x200 [ 96.346656][ C1] ? ip6_input+0xa0/0xa0 [ 96.351010][ C1] NF_HOOK+0x1f2/0x390 [ 96.355109][ C1] ? ip6_input+0xa0/0xa0 [ 96.359389][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 96.364356][ C1] ? ip6_input+0xa0/0xa0 [ 96.368970][ C1] ? ip6_rcv_finish_core+0x20d/0x420 [ 96.374505][ C1] ? ip6_rcv_finish+0x16b/0x240 [ 96.379569][ C1] ? refcount_add+0x80/0x80 [ 96.384189][ C1] NF_HOOK+0x303/0x390 [ 96.388292][ C1] ? refcount_add+0x80/0x80 [ 96.392995][ C1] ? ip6_rcv_core+0x1620/0x1620 [ 96.398050][ C1] ? refcount_add+0x80/0x80 [ 96.402701][ C1] ? ip6_rcv_finish_core+0x420/0x420 [ 96.408113][ C1] __netif_receive_skb+0xcc/0x290 [ 96.409756][ T5111] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.234: Corrupt directory, running e2fsck is recommended [ 96.413395][ C1] process_backlog+0x370/0x790 [ 96.413428][ C1] ? rps_trigger_softirq+0x210/0x210 [ 96.413447][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 96.436409][ T5130] EXT4-fs warning (device loop5): dx_probe:869: inode #2: comm syz.5.234: Unimplemented hash flags: 0x0001 [ 96.436753][ C1] ? lock_chain_count+0x20/0x20 [ 96.443275][ T5130] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.234: Corrupt directory, running e2fsck is recommended [ 96.454533][ C1] __napi_poll+0xc0/0x430 [ 96.454564][ C1] ? net_rx_action+0x307/0xa10 [ 96.454582][ C1] net_rx_action+0x4d4/0xa10 [ 96.454603][ C1] ? net_tx_action+0x880/0x880 [ 96.454619][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 96.454639][ C1] ? lock_chain_count+0x20/0x20 [ 96.454659][ C1] handle_softirqs+0x339/0x830 [ 96.470405][ T5128] EXT4-fs warning (device loop5): dx_probe:869: inode #2: comm syz.5.234: Unimplemented hash flags: 0x0001 [ 96.472526][ C1] ? do_softirq+0x142/0x210 [ 96.472555][ C1] ? do_softirq+0x210/0x210 [ 96.477418][ T5128] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.234: Corrupt directory, running e2fsck is recommended [ 96.481765][ C1] do_softirq+0x142/0x210 [ 96.481791][ C1] [ 96.481796][ C1] [ 96.481802][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 96.556250][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 96.562267][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 96.567585][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 96.572901][ C1] ? local_bh_enable+0x5/0x20 [ 96.577693][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 96.582925][ C1] ? _local_bh_enable+0xa0/0xa0 [ 96.587943][ C1] ? ip6_finish_output2+0xcb6/0x1510 [ 96.593533][ C1] ip6_finish_output2+0x1127/0x1510 [ 96.598768][ C1] ? nf_hook+0x360/0x360 [ 96.603043][ C1] ip6_xmit+0x109b/0x16d0 [ 96.607527][ C1] ? ip6_autoflowlabel+0xd0/0xd0 [ 96.612645][ C1] ? inet6_csk_route_socket+0x5f4/0xe60 [ 96.619616][ C1] ? read_lock_is_recursive+0x10/0x10 [ 96.625503][ C1] inet6_csk_xmit+0x405/0x680 [ 96.630303][ C1] ? inet6_csk_addr2sockaddr+0x1d0/0x1d0 [ 96.636370][ C1] ? tcp_v6_send_check+0x195/0x410 [ 96.641693][ C1] __tcp_transmit_skb+0x1d11/0x3200 [ 96.647295][ C1] ? __tcp_send_ack+0x5d0/0x5d0 [ 96.652268][ C1] ? tcp_fastopen_cookie_check+0x269/0x3c0 [ 96.658308][ C1] tcp_connect+0x2d71/0x4970 [ 96.663211][ C1] tcp_v6_connect+0x1224/0x1a30 [ 96.668188][ C1] ? tcp_v6_pre_connect+0xf0/0xf0 [ 96.673433][ C1] ? finish_lock_switch+0x12f/0x280 [ 96.679129][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 96.684449][ C1] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 96.689861][ C1] ? tcp_sendmsg_locked+0x2efa/0x3320 [ 96.695458][ C1] ? tcp_sendmsg+0x2b/0x40 [ 96.699912][ C1] ? __sys_sendto+0x46d/0x620 [ 96.704615][ C1] ? __x64_sys_sendto+0xda/0xf0 [ 96.709592][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.715910][ C1] __inet_stream_connect+0x244/0xd70 [ 96.721244][ C1] ? inet_dgram_connect+0x360/0x360 [ 96.726562][ C1] tcp_sendmsg_fastopen+0x38f/0x600 [ 96.732313][ C1] tcp_sendmsg_locked+0x2efa/0x3320 [ 96.737541][ C1] ? aa_sk_perm+0x910/0x910 [ 96.742073][ C1] ? mark_lock+0x94/0x320 [ 96.746435][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 96.752534][ C1] ? lock_chain_count+0x20/0x20 [ 96.757512][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 96.763696][ C1] ? tcp_free_fastopen_req+0x70/0x70 [ 96.769099][ C1] tcp_sendmsg+0x2b/0x40 [ 96.773363][ C1] __sys_sendto+0x46d/0x620 [ 96.777896][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 96.783482][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 96.789265][ C1] ? lock_chain_count+0x20/0x20 [ 96.794146][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 96.799295][ C1] __x64_sys_sendto+0xda/0xf0 [ 96.804013][ C1] do_syscall_64+0x4c/0xa0 [ 96.808460][ C1] ? clear_bhb_loop+0x30/0x80 [ 96.813338][ C1] ? clear_bhb_loop+0x30/0x80 [ 96.818048][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.824479][ C1] RIP: 0033:0x7f80c1260799 [ 96.829092][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.849256][ C1] RSP: 002b:00007f80bf4ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 96.858100][ C1] RAX: ffffffffffffffda RBX: 00007f80c14d9fa0 RCX: 00007f80c1260799 [ 96.866295][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 96.874382][ C1] RBP: 00007f80c12f6bd9 R08: 0000200000000200 R09: 000000000000001c [ 96.882471][ C1] R10: 00000000240540c7 R11: 0000000000000246 R12: 0000000000000000 [ 96.890560][ C1] R13: 00007f80c14da038 R14: 00007f80c14d9fa0 R15: 00007ffdb82c1978 [ 96.898758][ C1] [ 96.902241][ C1] Kernel Offset: disabled [ 96.906866][ C1] Rebooting in 86400 seconds..