last executing test programs: 10.703824382s ago: executing program 0 (id=202): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a00dd870000000000000000023469c2"], 0x18}, 0x1, 0x0, 0x0, 0x8000804}, 0x0) 10.603778107s ago: executing program 0 (id=206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x20}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048d4}, 0x4004080) 10.570895189s ago: executing program 0 (id=209): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, r0, 0x1b, 0x0, 0x0, @void, @value=r0}, 0x20) 10.483730322s ago: executing program 0 (id=212): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x4000, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2b7, &(0x7f0000000700)="$eJzs3b2LY1UUAPDzZvK1WiSFlQg+0MLGZWdbmwyShWAqJYVa6OLugkyCsAsDfmDYytbG0r9AEOz8J2ws7AVbwc4FF568r0miL9nJYGbU/f2auXPvOe+e9+bODCly8v4L85M7adx7+NnP0eslcTCMYTxKYhAHUbsWa4ZfBgDwX/Yoy+K3rLS+kmzNy1d7+y0NANiTzf//N/hu7yUBAHv21tvvvHE8mYzeTNNe3Jp/cTrNX9nnX8v143vxYczibtyIfjyOyM6U41tZli1aaW4QL88Xp9M8c/7eD9X1j3+NKPKPoh+DYmo9fzwZHaWllfxFXscz1f7DPP9m9OO5hv3Hk9HNhvyYduKVl1bqvx79+PGD+Chmcacoosh/9Y/xZPT5UZq+nn31+6fv5uXl+cnidNot4payw0v+0QAAAAAAAAAAAAAAAAAAAAAA8D92veqd042if08+VfXfOXycf9OOtDZY789T5p91Ca76AyVVh55FFl/X/XlupGmaVYHL/FY834rW1dw1AAAAAAAAAAAAAAAAAAAA/Ls8+PiTk9uz2d37/8ig7gZQv63/otcZrsy8GA0xgzib6S63PKi23XLlOKxjkoitZeRX3Kn49pN33zC4tinrm293fXS9J8e0L1DhjoP6dJ3cTpqfYTfqmV59SL5fjenEOffqbFrKdjp+ncal/s733nm2GCy2xESyrbDXfimfXDWT/PUuOsVTbUxvV4Pyd6HpbOx0nv/+tyLRrQMAAAAAAAAAAAAAAAAAAPZq+abfhsWHG5J+Gpcf8h+DPVcHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJdj+fn/OwwWVfI5gjtx/8EV3yIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPgT8DAAD//yZKX1E=") capset(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x104) ioctl(r0, 0x400c4d04, &(0x7f0000000a00)) 10.451009264s ago: executing program 0 (id=214): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x80, "01234567"}}]}, 0x140}}, 0x0) 9.925939749s ago: executing program 0 (id=226): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2890) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 9.881024301s ago: executing program 32 (id=226): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2890) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 1.414784283s ago: executing program 4 (id=352): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0xd, 0x4, 0x4, 0xffffffffffffffc0, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0xf, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) 1.394436164s ago: executing program 4 (id=353): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259866ec9c3740ce1b22bb3327ef4f001dffffffffffffff7fd858bf9a7ae95bc7f52363c468b257ff3e248525f2deb01efd54f11ed2c453c97e4af37017ea6b16b694bb4a6e4606c3e519d1d2bd3c8c4e97da2213f9d509ae0400000000000000c279f03558083916666827d61dcc3a633bffce540b5a293e3877adc1662edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a216c28665f7f46c70d4e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50447a6af0d76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="cc7766d47465642e"], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 1.345451177s ago: executing program 4 (id=354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0x8}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.230126412s ago: executing program 2 (id=356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)={0x14, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 1.143895686s ago: executing program 2 (id=358): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.083907549s ago: executing program 2 (id=360): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x2, 0x800, &(0x7f0000003640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40000, 0x52) fadvise64(r0, 0x54056, 0x55156, 0x3) 1.06706096s ago: executing program 2 (id=361): setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)="628a", 0x2}, 0x1, 0x0, 0x0, 0x20000041}, 0x40d0) 1.05472999s ago: executing program 4 (id=362): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) 932.305456ms ago: executing program 2 (id=364): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x8000000, {0x7, 0x0, 0x0, r1, 0x1682, 0x1004}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) 596.708052ms ago: executing program 2 (id=366): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x25) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) 527.736855ms ago: executing program 5 (id=236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xd}}}, 0x24}}, 0x0) 524.842106ms ago: executing program 1 (id=368): r0 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x389, @empty, 0xfffffffe}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) 335.624924ms ago: executing program 5 (id=371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0x8}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 335.551415ms ago: executing program 1 (id=372): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x40d0) 305.979696ms ago: executing program 3 (id=373): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000018000002000000000000000018000000020800000000000041000004010100000000000002"], 0x0, 0x32, 0x0, 0x1}, 0x28) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 299.108926ms ago: executing program 1 (id=374): r0 = socket$l2tp(0x2, 0x2, 0x73) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$l2tp(r0, 0x0, 0x0, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x82004}, 0x10) 203.920801ms ago: executing program 3 (id=375): capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 203.798981ms ago: executing program 1 (id=376): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x5}, {0x16, 0x3}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) 203.724951ms ago: executing program 3 (id=377): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xba, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) 184.466622ms ago: executing program 4 (id=378): syz_clone3(&(0x7f0000000100)={0x100025200, 0x0, 0x0, 0x0, {0x3}, 0x0, 0xfffffffffffffc92, 0x0, 0x0}, 0x58) 160.877343ms ago: executing program 4 (id=379): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) faccessat(0xffffffffffffffff, 0x0, 0x81) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 115.779925ms ago: executing program 1 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000040), 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x9, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 111.932625ms ago: executing program 3 (id=381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 58.251817ms ago: executing program 1 (id=382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @typed={0x4, 0x149}]}, 0x24}], 0x1}, 0x0) 11.764419ms ago: executing program 3 (id=383): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000840}, 0x48014) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 0s ago: executing program 3 (id=384): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x40d0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 28.457823][ T4316] cgroup: Unknown subsys name 'net' [ 28.703041][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.002177][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.708591][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.710811][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.712371][ T4330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.715512][ T4330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.720552][ T4335] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.722339][ T4335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.724559][ T4337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.726177][ T4337] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.727696][ T4337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.729195][ T4337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.732296][ T4340] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.735510][ T4342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.736752][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.736958][ T4342] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.738968][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.740701][ T4342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.741114][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.742391][ T4342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.743376][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.745112][ T4342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.750943][ T4340] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.752602][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.754715][ T4340] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.756201][ T4340] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.757696][ T4344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.757857][ T4340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.764186][ T4344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.765888][ T4344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.767696][ T4344] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.770621][ T4344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.911283][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 29.918466][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 29.931829][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 29.951423][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 29.964610][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 29.980120][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.981400][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.983026][ T4328] device bridge_slave_0 entered promiscuous mode [ 29.987011][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.988282][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.990386][ T4329] device bridge_slave_0 entered promiscuous mode [ 29.994302][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.995628][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.997254][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.004523][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.005826][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.007632][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.013421][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.014843][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.016571][ T4333] device bridge_slave_0 entered promiscuous mode [ 30.021849][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.023693][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.025072][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.026668][ T4333] device bridge_slave_1 entered promiscuous mode [ 30.034423][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.056637][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.059344][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.061443][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.062815][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.064455][ T4341] device bridge_slave_0 entered promiscuous mode [ 30.067281][ T4329] team0: Port device team_slave_0 added [ 30.070978][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.072344][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.074115][ T4334] device bridge_slave_0 entered promiscuous mode [ 30.077654][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.084382][ T4328] team0: Port device team_slave_0 added [ 30.086409][ T4328] team0: Port device team_slave_1 added [ 30.087543][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.088792][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.090576][ T4341] device bridge_slave_1 entered promiscuous mode [ 30.095320][ T4329] team0: Port device team_slave_1 added [ 30.096624][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.097866][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.099486][ T4334] device bridge_slave_1 entered promiscuous mode [ 30.102080][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.111960][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.113290][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.117805][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.127858][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.133222][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.135840][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.139586][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.141210][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.145659][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.150845][ T4333] team0: Port device team_slave_0 added [ 30.152462][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.153732][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.158074][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.161081][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.168435][ T4341] team0: Port device team_slave_0 added [ 30.176688][ T4333] team0: Port device team_slave_1 added [ 30.178089][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.179292][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.184239][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.186920][ T4341] team0: Port device team_slave_1 added [ 30.189045][ T4334] team0: Port device team_slave_0 added [ 30.200803][ T4334] team0: Port device team_slave_1 added [ 30.240992][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.279909][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.330174][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.331441][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.336045][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.339115][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.342991][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.347531][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.350035][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.351196][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.355775][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.410876][ T4328] device hsr_slave_0 entered promiscuous mode [ 30.459950][ T4328] device hsr_slave_1 entered promiscuous mode [ 30.499779][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.501125][ T4328] Cannot create hsr debugfs directory [ 30.503962][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.505208][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.509783][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.512173][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.513410][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.517877][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.520783][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.522020][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.526273][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.600770][ T4333] device hsr_slave_0 entered promiscuous mode [ 30.640056][ T4333] device hsr_slave_1 entered promiscuous mode [ 30.679752][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.681160][ T4333] Cannot create hsr debugfs directory [ 30.720840][ T4341] device hsr_slave_0 entered promiscuous mode [ 30.759892][ T4341] device hsr_slave_1 entered promiscuous mode [ 30.809753][ T4341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.810900][ T4341] Cannot create hsr debugfs directory [ 30.860841][ T4334] device hsr_slave_0 entered promiscuous mode [ 30.900036][ T4334] device hsr_slave_1 entered promiscuous mode [ 30.939713][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.941174][ T4334] Cannot create hsr debugfs directory [ 31.059448][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.105832][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.141322][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.183520][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.241762][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.281735][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.320773][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.362904][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.424860][ T4341] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.453725][ T4341] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.506751][ T4341] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.540890][ T4341] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.598698][ T4333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.626512][ T4333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.650710][ T4333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.708624][ T4333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.767553][ T4334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.769896][ T4344] Bluetooth: hci2: command 0x0409 tx timeout [ 31.770085][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 31.782612][ T4335] Bluetooth: hci0: command 0x0409 tx timeout [ 31.800970][ T4334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.832588][ T4334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.849768][ T4335] Bluetooth: hci4: command 0x0409 tx timeout [ 31.850775][ T4335] Bluetooth: hci1: command 0x0409 tx timeout [ 31.896244][ T4334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.933964][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.955328][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.957433][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.963650][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.965879][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.980352][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.982533][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.984457][ T1616] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.985732][ T1616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.987445][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.989252][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.992178][ T1616] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.993408][ T1616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.994988][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.998236][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.009227][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.011164][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.012871][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.020034][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.023773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.025644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.027397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.029191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.045947][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.048098][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.050356][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.052409][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.053762][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.055572][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.057233][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.062764][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.064527][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.066412][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.074320][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.076660][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.078472][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.080468][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.081729][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.083219][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.085317][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.087079][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.088277][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.091372][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.098701][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.100782][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.102819][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.104465][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.106128][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.107722][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.109284][ T1616] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.110668][ T1616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.122907][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.124735][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.126291][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.127848][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.129586][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.135257][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.137383][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.145699][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.147165][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.149042][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.153114][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.154981][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.157668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.160616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.166208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.167965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.170810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.172482][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.173751][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.179137][ T4341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.182742][ T4341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.187852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.189464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.194696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.196822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.199036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.201250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.202943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.216591][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.219034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.221250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.223031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.224687][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.225885][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.227454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.229176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.233855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.236043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.237828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.241533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.243291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.245156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.246707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.248309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.253724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.255556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.257368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.258940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.263763][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.273048][ T4328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.274850][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.278017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.279738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.281496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.283129][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.284486][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.286045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.288168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.292245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.294069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.296178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.297878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.307629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.309178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.311661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.313784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.319795][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.321091][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.337025][ T4334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.339004][ T4334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.345084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.347004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.348765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.351342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.353296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.355146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.363021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.371304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.373210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.375010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.381984][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.395013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.396650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.398235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.400522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.402721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.404089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.413636][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.418555][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.424241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.425764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.432635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.434742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.443168][ T4329] device veth0_vlan entered promiscuous mode [ 32.446189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.447918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.457066][ T4333] device veth0_vlan entered promiscuous mode [ 32.475876][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.477956][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.479562][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.485150][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.488584][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.491418][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.493668][ T4333] device veth1_vlan entered promiscuous mode [ 32.495513][ T4329] device veth1_vlan entered promiscuous mode [ 32.507691][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.509382][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.511691][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.513381][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.514991][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.516351][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.528617][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.534197][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.535922][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.537566][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.538985][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.550671][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.556021][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.558033][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.560160][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.561875][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.570502][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.572258][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.574488][ T4329] device veth0_macvtap entered promiscuous mode [ 32.577409][ T4341] device veth0_vlan entered promiscuous mode [ 32.587207][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.588943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.591277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.598630][ T4333] device veth0_macvtap entered promiscuous mode [ 32.604251][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.606101][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.607877][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.611851][ T4329] device veth1_macvtap entered promiscuous mode [ 32.617619][ T4333] device veth1_macvtap entered promiscuous mode [ 32.621894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.623763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.625442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.627014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.628663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.630824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.633239][ T4328] device veth0_vlan entered promiscuous mode [ 32.642548][ T4341] device veth1_vlan entered promiscuous mode [ 32.653177][ T4328] device veth1_vlan entered promiscuous mode [ 32.659012][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.664876][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.666614][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.668330][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.670861][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.672832][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.679415][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.684779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.687062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.689155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.695397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.697241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.709143][ T4341] device veth0_macvtap entered promiscuous mode [ 32.713177][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.714977][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.717360][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.724073][ T4333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.725601][ T4333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.727118][ T4333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.728667][ T4333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.733707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.735409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.737073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.748147][ T4328] device veth0_macvtap entered promiscuous mode [ 32.751233][ T4328] device veth1_macvtap entered promiscuous mode [ 32.754031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.755751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.757398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.759258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.761943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.764753][ T4341] device veth1_macvtap entered promiscuous mode [ 32.769037][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.772300][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.774615][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.776662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.778329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.781198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.782655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.784282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.785926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.787567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.789096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.795310][ T4334] device veth0_vlan entered promiscuous mode [ 32.804188][ T4334] device veth1_vlan entered promiscuous mode [ 32.814761][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.816396][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.818105][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.820917][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.823569][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.825926][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.827246][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.828791][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.830562][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.833044][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.834881][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.836318][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.838059][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.843245][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.844898][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.847327][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.850204][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.851867][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.853544][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.855146][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.856888][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.864772][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.866678][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.868400][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.870807][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.873433][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.876067][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.877738][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.879370][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.881669][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.885914][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.888190][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.890664][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.894196][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.896026][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.897811][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.899489][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.902558][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.904322][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.906698][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.914364][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.915971][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.928339][ T1616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.930132][ T1616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.932172][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.941608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.943548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.947442][ T4341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.948994][ T4341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.952031][ T4341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.953529][ T4341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.973826][ T4334] device veth0_macvtap entered promiscuous mode [ 32.976830][ T4334] device veth1_macvtap entered promiscuous mode [ 33.006263][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.007961][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.009332][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.009335][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.012185][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.014774][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.016496][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.018153][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.018736][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.023093][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.024776][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.026464][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.028930][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.033722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.035406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.037076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.038822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.058970][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.060621][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.062571][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.064645][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.066058][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.066128][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.069073][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.071804][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.073693][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.075656][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.077264][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.079347][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.082913][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.089466][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.091043][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.093039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.094657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.096146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.097946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.099492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.117524][ T4334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.119144][ T4334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.121017][ T4334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.122620][ T4334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.152515][ T4412] loop1: detected capacity change from 0 to 512 [ 33.172077][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.173569][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.175332][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.185093][ T1616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.186778][ T1616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.196242][ T4414] FAULT_INJECTION: forcing a failure. [ 33.196242][ T4414] name failslab, interval 1, probability 0, space 0, times 1 [ 33.203878][ T4414] CPU: 0 PID: 4414 Comm: syz.0.1 Not tainted syzkaller #0 [ 33.205211][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 33.206942][ T4414] Call trace: [ 33.207565][ T4414] dump_backtrace+0x1c4/0x1f0 [ 33.208384][ T4414] show_stack+0x2c/0x3c [ 33.209098][ T4414] __dump_stack+0x30/0x40 [ 33.209898][ T4414] dump_stack_lvl+0xf4/0x15c [ 33.210728][ T4414] dump_stack+0x1c/0x5c [ 33.211490][ T4414] should_fail_ex+0x3cc/0x524 [ 33.212449][ T4414] __should_failslab+0xc0/0x11c [ 33.213304][ T4414] should_failslab+0x10/0x28 [ 33.214115][ T4414] __kmem_cache_alloc_node+0x7c/0x318 [ 33.215116][ T4414] __kmalloc+0xc4/0x180 [ 33.215898][ T4414] security_sk_alloc+0x54/0x140 [ 33.216813][ T4414] sk_prot_alloc+0xe0/0x1e8 [ 33.217686][ T4414] sk_alloc+0x44/0x3a0 [ 33.218445][ T4414] inet6_create+0x6f4/0xf9c [ 33.219318][ T4414] __sock_create+0x448/0x8a8 [ 33.220173][ T4414] __sys_socket+0xc0/0x1b0 [ 33.220185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.220197][ T4414] __arm64_sys_socket+0x7c/0x94 [ 33.222006][ T4412] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 33.222345][ T4414] invoke_syscall+0x98/0x290 [ 33.225668][ T4414] el0_svc_common+0x13c/0x258 [ 33.226518][ T4414] do_el0_svc+0x5c/0x134 [ 33.227382][ T4414] el0_svc+0x58/0x128 [ 33.228183][ T4414] el0t_64_sync_handler+0x84/0xf0 [ 33.229194][ T4414] el0t_64_sync+0x18c/0x190 [ 33.309515][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.314315][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 33.315418][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.316900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.325684][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.327316][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.328889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.445634][ T4430] loop4: detected capacity change from 0 to 1024 [ 33.447319][ T4430] EXT4-fs: Ignoring removed i_version option [ 33.480889][ T4430] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.493100][ T4430] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 33.495357][ T4430] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.501761][ T4430] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.5: Freeing blocks not in datazone - block = 0, count = 4096 [ 33.505799][ T4430] EXT4-fs (loop4): Remounting filesystem read-only [ 33.507268][ T4430] EXT4-fs (loop4): 1 orphan inode deleted [ 33.508294][ T4430] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.519617][ T4440] Cannot find set identified by id 0 to match [ 33.595977][ T4443] Zero length message leads to an empty skb [ 33.641561][ T4430] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.5: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 33.647826][ T4430] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.5: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 33.688562][ T4430] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.5: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 33.717778][ T4454] loop1: detected capacity change from 0 to 512 [ 33.746973][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 33.759375][ T4454] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 33.785671][ T4454] EXT4-fs (loop1): invalid journal inode [ 33.790245][ T4454] EXT4-fs (loop1): can't get journal size [ 33.796654][ T4458] capability: warning: `syz.0.18' uses 32-bit capabilities (legacy support in use) [ 33.801543][ T4454] EXT4-fs (loop1): 1 truncate cleaned up [ 33.802988][ T4454] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 33.833443][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 33.853367][ T4340] Bluetooth: hci3: command 0x041b tx timeout [ 33.854541][ T4340] Bluetooth: hci0: command 0x041b tx timeout [ 33.855480][ T4340] Bluetooth: hci2: command 0x041b tx timeout [ 33.893859][ T4467] loop3: detected capacity change from 0 to 512 [ 33.904968][ T4467] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.20: iget: bad i_size value: 38620345925642 [ 33.908097][ T4467] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.20: couldn't read orphan inode 15 (err -117) [ 33.912968][ T4467] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 33.932237][ T4335] Bluetooth: hci1: command 0x041b tx timeout [ 33.933496][ T4335] Bluetooth: hci4: command 0x041b tx timeout [ 33.964447][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 34.129155][ T4482] FAULT_INJECTION: forcing a failure. [ 34.129155][ T4482] name failslab, interval 1, probability 0, space 0, times 0 [ 34.140384][ T4482] CPU: 0 PID: 4482 Comm: syz.4.27 Not tainted syzkaller #0 [ 34.141723][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 34.143446][ T4482] Call trace: [ 34.144021][ T4482] dump_backtrace+0x1c4/0x1f0 [ 34.144852][ T4482] show_stack+0x2c/0x3c [ 34.145730][ T4482] __dump_stack+0x30/0x40 [ 34.146527][ T4482] dump_stack_lvl+0xf4/0x15c [ 34.147340][ T4482] dump_stack+0x1c/0x5c [ 34.148069][ T4482] should_fail_ex+0x3cc/0x524 [ 34.148932][ T4482] __should_failslab+0xc0/0x11c [ 34.149849][ T4482] should_failslab+0x10/0x28 [ 34.150682][ T4482] kmem_cache_alloc_node+0x8c/0x344 [ 34.151695][ T4482] __alloc_skb+0x128/0x728 [ 34.152564][ T4482] tcp_stream_alloc_skb+0x48/0x2d8 [ 34.153569][ T4482] tcp_sendmsg_locked+0x900/0x3164 [ 34.154508][ T4482] tcp_sendmsg+0x40/0x64 [ 34.155289][ T4482] inet_sendmsg+0x154/0x27c [ 34.156108][ T4482] __sys_sendto+0x324/0x440 [ 34.156952][ T4482] __arm64_sys_sendto+0xe4/0x104 [ 34.157920][ T4482] invoke_syscall+0x98/0x290 [ 34.158731][ T4482] el0_svc_common+0x13c/0x258 [ 34.159573][ T4482] do_el0_svc+0x5c/0x134 [ 34.160323][ T4482] el0_svc+0x58/0x128 [ 34.161139][ T4482] el0t_64_sync_handler+0x84/0xf0 [ 34.162109][ T4482] el0t_64_sync+0x18c/0x190 [ 34.198256][ T4486] loop1: detected capacity change from 0 to 1024 [ 34.220091][ T4486] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.265941][ T4486] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.287869][ T4486] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 34.313761][ T4486] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 34.316823][ T4486] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.316823][ T4486] [ 34.318659][ T4486] EXT4-fs (loop1): Total free blocks count 0 [ 34.331891][ T4486] EXT4-fs (loop1): Free/Dirty block details [ 34.333040][ T4486] EXT4-fs (loop1): free_blocks=20480 [ 34.334062][ T4486] EXT4-fs (loop1): dirty_blocks=80 [ 34.335185][ T4486] EXT4-fs (loop1): Block reservation details [ 34.336366][ T4486] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 34.342973][ T4485] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 34.560766][ T4515] FAULT_INJECTION: forcing a failure. [ 34.560766][ T4515] name failslab, interval 1, probability 0, space 0, times 0 [ 34.567660][ T4515] CPU: 0 PID: 4515 Comm: syz.4.40 Not tainted syzkaller #0 [ 34.569016][ T4515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 34.570850][ T4515] Call trace: [ 34.571451][ T4515] dump_backtrace+0x1c4/0x1f0 [ 34.572372][ T4515] show_stack+0x2c/0x3c [ 34.573172][ T4515] __dump_stack+0x30/0x40 [ 34.574042][ T4515] dump_stack_lvl+0xf4/0x15c [ 34.574853][ T4515] dump_stack+0x1c/0x5c [ 34.575629][ T4515] should_fail_ex+0x3cc/0x524 [ 34.576558][ T4515] __should_failslab+0xc0/0x11c [ 34.577543][ T4515] should_failslab+0x10/0x28 [ 34.578400][ T4515] __kmem_cache_alloc_node+0x7c/0x318 [ 34.579383][ T4515] __kmalloc_node_track_caller+0xb8/0x174 [ 34.580403][ T4515] kstrdup_const+0x90/0xdc [ 34.581157][ T4515] __kernfs_new_node+0xb0/0x5fc [ 34.582051][ T4515] kernfs_new_node+0x120/0x230 [ 34.582916][ T4515] __kernfs_create_file+0x60/0x2e0 [ 34.583762][ T4515] cgroup_addrm_files+0x670/0xaac [ 34.584664][ T4515] css_populate_dir+0xfc/0x330 [ 34.585544][ T4515] cgroup_apply_control_enable+0x578/0x9e0 [ 34.586626][ T4515] cgroup_mkdir+0x964/0xcf8 [ 34.587447][ T4515] kernfs_iop_mkdir+0x118/0x164 [ 34.588403][ T4515] vfs_mkdir+0x314/0x4d8 [ 34.589178][ T4515] do_mkdirat+0x1b8/0x3ec [ 34.589968][ T4515] __arm64_sys_mkdirat+0x90/0xa8 [ 34.590878][ T4515] invoke_syscall+0x98/0x290 [ 34.591775][ T4515] el0_svc_common+0x13c/0x258 [ 34.592656][ T4515] do_el0_svc+0x5c/0x134 [ 34.593441][ T4515] el0_svc+0x58/0x128 [ 34.594212][ T4515] el0t_64_sync_handler+0x84/0xf0 [ 34.595157][ T4515] el0t_64_sync+0x18c/0x190 [ 34.602439][ T4515] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 35.930722][ T4340] Bluetooth: hci2: command 0x040f tx timeout [ 35.931933][ T4340] Bluetooth: hci0: command 0x040f tx timeout [ 35.933016][ T4340] Bluetooth: hci3: command 0x040f tx timeout [ 36.009921][ T4335] Bluetooth: hci4: command 0x040f tx timeout [ 36.011062][ T4335] Bluetooth: hci1: command 0x040f tx timeout [ 36.211712][ T4563] loop0: detected capacity change from 0 to 4096 [ 36.216825][ T4563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.232765][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 36.385746][ T4582] loop0: detected capacity change from 0 to 128 [ 36.564683][ T4602] loop0: detected capacity change from 0 to 512 [ 36.571382][ T4602] EXT4-fs (loop0): 1 truncate cleaned up [ 36.572557][ T4602] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.584723][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 37.475832][ T4608] loop0: detected capacity change from 0 to 1024 [ 37.478308][ T4608] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.483014][ T4608] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 37.484826][ T4608] EXT4-fs (loop0): orphan cleanup on readonly fs [ 37.486120][ T4608] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.75: Freeing blocks not in datazone - block = 0, count = 4096 [ 37.489853][ T4608] EXT4-fs (loop0): 1 orphan inode deleted [ 37.491105][ T4608] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 37.494106][ T4608] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 37.507928][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 37.510137][ T4506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 37.627391][ T4611] loop4: detected capacity change from 0 to 8192 [ 37.634129][ T4619] FAULT_INJECTION: forcing a failure. [ 37.634129][ T4619] name failslab, interval 1, probability 0, space 0, times 0 [ 37.636999][ T4619] CPU: 0 PID: 4619 Comm: syz.3.80 Not tainted syzkaller #0 [ 37.638501][ T4619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 37.640339][ T4619] Call trace: [ 37.640920][ T4619] dump_backtrace+0x1c4/0x1f0 [ 37.641864][ T4619] show_stack+0x2c/0x3c [ 37.642634][ T4619] __dump_stack+0x30/0x40 [ 37.643479][ T4619] dump_stack_lvl+0xf4/0x15c [ 37.644340][ T4619] dump_stack+0x1c/0x5c [ 37.645126][ T4619] should_fail_ex+0x3cc/0x524 [ 37.646029][ T4619] __should_failslab+0xc0/0x11c [ 37.646904][ T4619] should_failslab+0x10/0x28 [ 37.647842][ T4619] slab_pre_alloc_hook+0x6c/0x31c [ 37.648787][ T4619] kmem_cache_alloc_lru+0x60/0x284 [ 37.649745][ T4619] __d_alloc+0x40/0x68c [ 37.650488][ T4619] d_alloc_anon+0x24/0x34 [ 37.651358][ T4619] __ns_get_path+0x368/0x5c8 [ 37.652266][ T4619] ns_get_path+0x64/0xac [ 37.653103][ T4619] proc_ns_get_link+0x154/0x2a0 [ 37.654070][ T4619] pick_link+0x58c/0xbc8 [ 37.654874][ T4619] step_into+0x954/0xbc4 [ 37.655624][ T4619] path_openat+0x1148/0x27a0 [ 37.656480][ T4619] do_filp_open+0x198/0x38c [ 37.657279][ T4619] do_sys_openat2+0x134/0x3fc [ 37.658133][ T4619] __arm64_sys_openat+0x11c/0x150 [ 37.659054][ T4619] invoke_syscall+0x98/0x290 [ 37.659929][ T4619] el0_svc_common+0x13c/0x258 [ 37.660802][ T4619] do_el0_svc+0x5c/0x134 [ 37.661580][ T4619] el0_svc+0x58/0x128 [ 37.662301][ T4619] el0t_64_sync_handler+0x84/0xf0 [ 37.663180][ T4619] el0t_64_sync+0x18c/0x190 [ 37.674552][ T4611] FAT-fs (loop4): error, invalid access to FAT (entry 0x00003c09) [ 37.676149][ T4611] FAT-fs (loop4): Filesystem has been set read-only [ 37.752973][ T4631] ======================================================= [ 37.752973][ T4631] WARNING: The mand mount option has been deprecated and [ 37.752973][ T4631] and is ignored by this kernel. Remove the mand [ 37.752973][ T4631] option from the mount to silence this warning. [ 37.752973][ T4631] ======================================================= [ 37.763907][ T4633] FAULT_INJECTION: forcing a failure. [ 37.763907][ T4633] name failslab, interval 1, probability 0, space 0, times 0 [ 37.766237][ T4633] CPU: 1 PID: 4633 Comm: syz.1.87 Not tainted syzkaller #0 [ 37.767662][ T4633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 37.769393][ T4633] Call trace: [ 37.769944][ T4633] dump_backtrace+0x1c4/0x1f0 [ 37.770820][ T4633] show_stack+0x2c/0x3c [ 37.771696][ T4633] __dump_stack+0x30/0x40 [ 37.772380][ T4633] dump_stack_lvl+0xf4/0x15c [ 37.773249][ T4633] dump_stack+0x1c/0x5c [ 37.774082][ T4633] should_fail_ex+0x3cc/0x524 [ 37.775024][ T4633] __should_failslab+0xc0/0x11c [ 37.775858][ T4633] should_failslab+0x10/0x28 [ 37.776703][ T4633] __kmem_cache_alloc_node+0x7c/0x318 [ 37.777563][ T4633] __kmalloc_node_track_caller+0xb8/0x174 [ 37.778501][ T4633] kstrdup_const+0x90/0xdc [ 37.779231][ T4633] __kernfs_new_node+0xb0/0x5fc [ 37.780021][ T4633] kernfs_new_node+0x120/0x230 [ 37.780756][ T4633] __kernfs_create_file+0x60/0x2e0 [ 37.781576][ T4633] cgroup_addrm_files+0x670/0xaac [ 37.782374][ T4633] css_populate_dir+0xfc/0x330 [ 37.783329][ T4633] cgroup_apply_control_enable+0x578/0x9e0 [ 37.784316][ T4633] cgroup_mkdir+0x964/0xcf8 [ 37.785176][ T4633] kernfs_iop_mkdir+0x118/0x164 [ 37.786046][ T4633] vfs_mkdir+0x314/0x4d8 [ 37.786729][ T4633] do_mkdirat+0x1b8/0x3ec [ 37.787463][ T4633] __arm64_sys_mkdirat+0x90/0xa8 [ 37.788268][ T4633] invoke_syscall+0x98/0x290 [ 37.789110][ T4633] el0_svc_common+0x13c/0x258 [ 37.789937][ T4633] do_el0_svc+0x5c/0x134 [ 37.790802][ T4633] el0_svc+0x58/0x128 [ 37.791559][ T4633] el0t_64_sync_handler+0x84/0xf0 [ 37.792448][ T4633] el0t_64_sync+0x18c/0x190 [ 37.803017][ T4633] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 37.903474][ T4631] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.036684][ T4340] Bluetooth: hci3: command 0x0419 tx timeout [ 38.036715][ T4340] Bluetooth: hci0: command 0x0419 tx timeout [ 38.036750][ T4340] Bluetooth: hci2: command 0x0419 tx timeout [ 38.052389][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 38.090005][ T4335] Bluetooth: hci1: command 0x0419 tx timeout [ 38.090040][ T4335] Bluetooth: hci4: command 0x0419 tx timeout [ 38.235911][ T4660] set_capacity_and_notify: 1 callbacks suppressed [ 38.235920][ T4660] loop3: detected capacity change from 0 to 136 [ 38.292326][ T4329] rock: directory entry would overflow storage [ 38.293721][ T4329] rock: sig=0x4f50, size=4, remaining=3 [ 38.297964][ T4329] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 38.303348][ T4667] loop4: detected capacity change from 0 to 512 [ 38.315358][ T4329] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 38.352144][ T4673] FAULT_INJECTION: forcing a failure. [ 38.352144][ T4673] name failslab, interval 1, probability 0, space 0, times 0 [ 38.356931][ T4667] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.362102][ T4673] CPU: 0 PID: 4673 Comm: syz.2.101 Not tainted syzkaller #0 [ 38.363348][ T4673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 38.365234][ T4673] Call trace: [ 38.365863][ T4673] dump_backtrace+0x1c4/0x1f0 [ 38.366741][ T4673] show_stack+0x2c/0x3c [ 38.367451][ T4673] __dump_stack+0x30/0x40 [ 38.368211][ T4673] dump_stack_lvl+0xf4/0x15c [ 38.368987][ T4673] dump_stack+0x1c/0x5c [ 38.369723][ T4673] should_fail_ex+0x3cc/0x524 [ 38.370554][ T4673] __should_failslab+0xc0/0x11c [ 38.371457][ T4673] should_failslab+0x10/0x28 [ 38.372262][ T4673] kmem_cache_alloc+0x88/0x310 [ 38.373101][ T4673] mas_alloc_nodes+0x284/0x758 [ 38.373966][ T4673] mas_preallocate+0x13c/0x310 [ 38.374925][ T4673] __vma_adjust+0x26c/0x16fc [ 38.375738][ T4673] __split_vma+0x328/0x44c [ 38.376540][ T4673] split_vma+0xa0/0xf8 [ 38.377298][ T4673] mlock_fixup+0x3d4/0x480 [ 38.378127][ T4673] apply_vma_lock_flags+0x208/0x33c [ 38.379067][ T4673] do_mlock+0x3cc/0x514 [ 38.379851][ T4673] __arm64_sys_mlock+0x60/0x78 [ 38.380744][ T4673] invoke_syscall+0x98/0x290 [ 38.381580][ T4673] el0_svc_common+0x13c/0x258 [ 38.382462][ T4673] do_el0_svc+0x5c/0x134 [ 38.383247][ T4673] el0_svc+0x58/0x128 [ 38.383968][ T4673] el0t_64_sync_handler+0x84/0xf0 [ 38.384904][ T4673] el0t_64_sync+0x18c/0x190 [ 38.398200][ T4679] loop0: detected capacity change from 0 to 512 [ 38.405625][ T4679] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 38.429951][ T4679] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 38.431974][ T4679] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.436332][ T4679] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.104: bad orphan inode 3 [ 38.444939][ T4679] EXT4-fs (loop0): Remounting filesystem read-only [ 38.446188][ T4679] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.455636][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 38.516356][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 38.695904][ T4705] loop0: detected capacity change from 0 to 512 [ 38.698159][ T4705] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.718553][ T4705] EXT4-fs (loop0): 1 orphan inode deleted [ 38.720588][ T4705] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.733147][ T4531] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 38.735169][ T4531] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 38.744390][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 38.783738][ T4707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.118'. [ 38.871068][ T4728] loop2: detected capacity change from 0 to 128 [ 38.891414][ T4730] FAULT_INJECTION: forcing a failure. [ 38.891414][ T4730] name failslab, interval 1, probability 0, space 0, times 0 [ 38.894298][ T4730] CPU: 1 PID: 4730 Comm: syz.4.127 Not tainted syzkaller #0 [ 38.895671][ T4730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 38.897536][ T4730] Call trace: [ 38.898176][ T4730] dump_backtrace+0x1c4/0x1f0 [ 38.899078][ T4730] show_stack+0x2c/0x3c [ 38.899855][ T4730] __dump_stack+0x30/0x40 [ 38.900419][ T4728] syz.2.126: attempt to access beyond end of device [ 38.900419][ T4728] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 38.900667][ T4730] dump_stack_lvl+0xf4/0x15c [ 38.904083][ T4730] dump_stack+0x1c/0x5c [ 38.904876][ T4730] should_fail_ex+0x3cc/0x524 [ 38.905733][ T4730] __should_failslab+0xc0/0x11c [ 38.906604][ T4730] should_failslab+0x10/0x28 [ 38.907430][ T4730] __kmem_cache_alloc_node+0x7c/0x318 [ 38.908554][ T4730] __kmalloc_node_track_caller+0xb8/0x174 [ 38.909602][ T4730] kstrdup_const+0x90/0xdc [ 38.910404][ T4730] __kernfs_new_node+0xb0/0x5fc [ 38.911300][ T4730] kernfs_new_node+0x120/0x230 [ 38.912209][ T4730] __kernfs_create_file+0x60/0x2e0 [ 38.912753][ T4728] syz.2.126: attempt to access beyond end of device [ 38.912753][ T4728] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 38.913145][ T4730] cgroup_addrm_files+0x670/0xaac [ 38.915953][ T4728] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 38.916607][ T4730] css_populate_dir+0xfc/0x330 [ 38.918620][ T4728] syz.2.126: attempt to access beyond end of device [ 38.918620][ T4728] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 38.919144][ T4730] cgroup_apply_control_enable+0x578/0x9e0 [ 38.922104][ T4728] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 38.922553][ T4730] cgroup_mkdir+0x964/0xcf8 [ 38.924191][ T4728] syz.2.126: attempt to access beyond end of device [ 38.924191][ T4728] loop2: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 38.924841][ T4730] kernfs_iop_mkdir+0x118/0x164 [ 38.927466][ T4728] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 38.928187][ T4730] vfs_mkdir+0x314/0x4d8 [ 38.930137][ T4728] syz.2.126: attempt to access beyond end of device [ 38.930137][ T4728] loop2: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 38.930391][ T4730] do_mkdirat+0x1b8/0x3ec [ 38.933758][ T4730] __arm64_sys_mkdirat+0x90/0xa8 [ 38.934620][ T4730] invoke_syscall+0x98/0x290 [ 38.935441][ T4730] el0_svc_common+0x13c/0x258 [ 38.936223][ T4730] do_el0_svc+0x5c/0x134 [ 38.936981][ T4730] el0_svc+0x58/0x128 [ 38.937667][ T4730] el0t_64_sync_handler+0x84/0xf0 [ 38.938540][ T4730] el0t_64_sync+0x18c/0x190 [ 38.939406][ C1] vkms_vblank_simulate: vblank timer overrun [ 38.978643][ T4730] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 39.042168][ T4740] loop0: detected capacity change from 0 to 512 [ 39.082324][ T4740] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 39.084428][ T4740] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 39.086099][ T4740] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.131: Corrupt directory, running e2fsck is recommended [ 39.093737][ T4740] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 39.094866][ T4745] netlink: 'syz.2.132': attribute type 2 has an invalid length. [ 39.098231][ T4740] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.131: corrupted in-inode xattr [ 39.445660][ T4740] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.131: couldn't read orphan inode 15 (err -117) [ 39.456968][ T4740] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.489409][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 39.662798][ T4777] syz.0.145 (4777): /proc/4777/oom_adj is deprecated, please use /proc/4777/oom_score_adj instead. [ 39.668371][ T4776] loop1: detected capacity change from 0 to 2048 [ 39.670283][ T4776] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.717031][ T4776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.752964][ T4774] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 39.817236][ T4791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.824348][ T4791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.825444][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 39.896624][ T4798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.153'. [ 39.915728][ T4801] syz.1.154 uses obsolete (PF_INET,SOCK_PACKET) [ 39.917956][ T4802] mmap: syz.2.155 (4802) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.925953][ T4802] loop2: detected capacity change from 0 to 128 [ 39.927538][ T4802] FAT-fs (loop2): Unrecognized mount option "n4Nr>bPra%YdW5.l<7akpe;*" or missing value [ 40.002829][ T4806] loop1: detected capacity change from 0 to 1764 [ 40.047657][ T4812] FAULT_INJECTION: forcing a failure. [ 40.047657][ T4812] name failslab, interval 1, probability 0, space 0, times 0 [ 40.053298][ T4812] CPU: 0 PID: 4812 Comm: syz.2.160 Not tainted syzkaller #0 [ 40.054636][ T4812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 40.056319][ T4812] Call trace: [ 40.056898][ T4812] dump_backtrace+0x1c4/0x1f0 [ 40.057728][ T4812] show_stack+0x2c/0x3c [ 40.058467][ T4812] __dump_stack+0x30/0x40 [ 40.059241][ T4812] dump_stack_lvl+0xf4/0x15c [ 40.060137][ T4812] dump_stack+0x1c/0x5c [ 40.060903][ T4812] should_fail_ex+0x3cc/0x524 [ 40.061763][ T4812] __should_failslab+0xc0/0x11c [ 40.062632][ T4812] should_failslab+0x10/0x28 [ 40.063469][ T4812] __kmem_cache_alloc_node+0x7c/0x318 [ 40.064433][ T4812] __kmalloc_node_track_caller+0xb8/0x174 [ 40.065530][ T4812] kstrdup_const+0x90/0xdc [ 40.066348][ T4812] __kernfs_new_node+0xb0/0x5fc [ 40.067246][ T4812] kernfs_new_node+0x120/0x230 [ 40.068164][ T4812] __kernfs_create_file+0x60/0x2e0 [ 40.069343][ T4812] cgroup_addrm_files+0x670/0xaac [ 40.070266][ T4812] css_populate_dir+0xfc/0x330 [ 40.071136][ T4812] cgroup_apply_control_enable+0x578/0x9e0 [ 40.072186][ T4812] cgroup_mkdir+0x964/0xcf8 [ 40.073025][ T4812] kernfs_iop_mkdir+0x118/0x164 [ 40.073973][ T4812] vfs_mkdir+0x314/0x4d8 [ 40.074803][ T4812] do_mkdirat+0x1b8/0x3ec [ 40.075623][ T4812] __arm64_sys_mkdirat+0x90/0xa8 [ 40.076561][ T4812] invoke_syscall+0x98/0x290 [ 40.077406][ T4812] el0_svc_common+0x13c/0x258 [ 40.078280][ T4812] do_el0_svc+0x5c/0x134 [ 40.079121][ T4812] el0_svc+0x58/0x128 [ 40.079884][ T4812] el0t_64_sync_handler+0x84/0xf0 [ 40.080822][ T4812] el0t_64_sync+0x18c/0x190 [ 40.085039][ T4812] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 40.085946][ T4318] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 40.706464][ T4832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 40.755439][ T4836] loop0: detected capacity change from 0 to 2048 [ 40.780421][ T4836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.786390][ T4836] FAULT_INJECTION: forcing a failure. [ 40.786390][ T4836] name failslab, interval 1, probability 0, space 0, times 0 [ 40.789088][ T4836] CPU: 0 PID: 4836 Comm: syz.0.168 Not tainted syzkaller #0 [ 40.790469][ T4836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 40.792209][ T4836] Call trace: [ 40.792721][ T4836] dump_backtrace+0x1c4/0x1f0 [ 40.793464][ T4836] show_stack+0x2c/0x3c [ 40.794135][ T4836] __dump_stack+0x30/0x40 [ 40.794936][ T4836] dump_stack_lvl+0xf4/0x15c [ 40.795834][ T4836] dump_stack+0x1c/0x5c [ 40.796527][ T4836] should_fail_ex+0x3cc/0x524 [ 40.797405][ T4836] __should_failslab+0xc0/0x11c [ 40.798291][ T4836] should_failslab+0x10/0x28 [ 40.799201][ T4836] __kmem_cache_alloc_node+0x7c/0x318 [ 40.800116][ T4836] __kmalloc+0xc4/0x180 [ 40.800979][ T4836] ext4_find_extent+0x284/0xb60 [ 40.801765][ T4836] ext4_ext_map_blocks+0x268/0x563c [ 40.802637][ T4836] ext4_map_blocks+0x2dc/0x160c [ 40.803506][ T4836] ext4_convert_inline_data_nolock+0x360/0xa80 [ 40.804530][ T4836] ext4_convert_inline_data+0x39c/0x4fc [ 40.805398][ T4836] ext4_fallocate+0xf0/0x1b4c [ 40.806360][ T4836] vfs_fallocate+0x4a4/0x5fc [ 40.807285][ T4836] __arm64_sys_fallocate+0xc4/0x114 [ 40.808269][ T4836] invoke_syscall+0x98/0x290 [ 40.809405][ T4836] el0_svc_common+0x13c/0x258 [ 40.810356][ T4836] do_el0_svc+0x5c/0x134 [ 40.811101][ T4836] el0_svc+0x58/0x128 [ 40.811884][ T4836] el0t_64_sync_handler+0x84/0xf0 [ 40.812825][ T4836] el0t_64_sync+0x18c/0x190 [ 40.815913][ T4836] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 40.837894][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 40.946953][ T4852] device bridge0 entered promiscuous mode [ 41.176257][ T4874] FAULT_INJECTION: forcing a failure. [ 41.176257][ T4874] name failslab, interval 1, probability 0, space 0, times 0 [ 41.178705][ T4874] CPU: 1 PID: 4874 Comm: syz.2.183 Not tainted syzkaller #0 [ 41.180132][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.182029][ T4874] Call trace: [ 41.182600][ T4874] dump_backtrace+0x1c4/0x1f0 [ 41.183540][ T4874] show_stack+0x2c/0x3c [ 41.184324][ T4874] __dump_stack+0x30/0x40 [ 41.185122][ T4874] dump_stack_lvl+0xf4/0x15c [ 41.185960][ T4874] dump_stack+0x1c/0x5c [ 41.186730][ T4874] should_fail_ex+0x3cc/0x524 [ 41.187603][ T4874] __should_failslab+0xc0/0x11c [ 41.188522][ T4874] should_failslab+0x10/0x28 [ 41.189383][ T4874] kmem_cache_alloc+0x88/0x310 [ 41.190251][ T4874] __kernfs_new_node+0xec/0x5fc [ 41.191146][ T4874] kernfs_new_node+0x120/0x230 [ 41.191987][ T4874] __kernfs_create_file+0x60/0x2e0 [ 41.192865][ T4874] cgroup_addrm_files+0x670/0xaac [ 41.193803][ T4874] css_populate_dir+0xfc/0x330 [ 41.194699][ T4874] cgroup_apply_control_enable+0x578/0x9e0 [ 41.195764][ T4874] cgroup_mkdir+0x964/0xcf8 [ 41.196598][ T4874] kernfs_iop_mkdir+0x118/0x164 [ 41.197490][ T4874] vfs_mkdir+0x314/0x4d8 [ 41.198271][ T4874] do_mkdirat+0x1b8/0x3ec [ 41.199019][ T4874] __arm64_sys_mkdirat+0x90/0xa8 [ 41.199914][ T4874] invoke_syscall+0x98/0x290 [ 41.200724][ T4874] el0_svc_common+0x13c/0x258 [ 41.201582][ T4874] do_el0_svc+0x5c/0x134 [ 41.202345][ T4874] el0_svc+0x58/0x128 [ 41.203056][ T4874] el0t_64_sync_handler+0x84/0xf0 [ 41.203929][ T4874] el0t_64_sync+0x18c/0x190 [ 41.313014][ T4874] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 41.478874][ T4888] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.664578][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 41.898673][ T4908] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.986206][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 42.046717][ T4924] device syzkaller0 entered promiscuous mode [ 42.204639][ T4333] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 42.211227][ T4333] FAT-fs (loop0): Filesystem has been set read-only [ 42.213477][ T4333] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 42.296466][ T4942] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 42.354457][ T4946] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 42.365103][ T4946] EXT4-fs (loop2): shut down requested (1) [ 42.429504][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 42.470926][ T4341] EXT4-fs (loop2): unmounting filesystem. [ 42.498623][ T4957] ieee802154 phy0 wpan0: encryption failed: -22 [ 42.588028][ T4964] device syzkaller0 entered promiscuous mode [ 42.597301][ T4964] tipc: Started in network mode [ 42.598304][ T4964] tipc: Node identity aa8d7befe5b5, cluster identity 4711 [ 42.604499][ T4964] tipc: Enabled bearer , priority 0 [ 42.626338][ T4964] tipc: Resetting bearer [ 42.630149][ T4963] tipc: Resetting bearer [ 42.760376][ T4963] tipc: Disabling bearer [ 42.827635][ T4335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 42.835288][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 42.837634][ T4335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 42.839346][ T4335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 42.843939][ T4335] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 42.845450][ T4335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 42.891785][ T4974] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 42.896264][ T4974] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 42.907184][ T4974] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 42.955224][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 43.067350][ T91] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.076789][ T4995] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.141816][ T4997] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 43.143304][ T4997] FAT-fs (loop4): Filesystem has been set read-only [ 43.156016][ T4995] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 43.186722][ T4748] lg-g15 0003:046D:0A07.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 43.189303][ T4748] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0001/input/input2 [ 43.211190][ T91] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.223341][ T4995] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 43.292450][ T91] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.344105][ T5013] fido_id[5013]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.432538][ T91] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.434318][ T5031] set_capacity_and_notify: 10 callbacks suppressed [ 43.434326][ T5031] loop4: detected capacity change from 0 to 1024 [ 43.438340][ T5031] EXT4-fs: Ignoring removed i_version option [ 43.441196][ T4975] chnl_net:caif_netlink_parms(): no params data found [ 43.451701][ T5031] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.457405][ T5031] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 43.462244][ T5031] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.466262][ T5031] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.247: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.469383][ T5031] EXT4-fs (loop4): Remounting filesystem read-only [ 43.472496][ T5031] EXT4-fs (loop4): 1 orphan inode deleted [ 43.473652][ T5031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.495728][ T4975] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.509290][ T4975] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.514271][ T4975] device bridge_slave_0 entered promiscuous mode [ 43.522075][ T4975] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.526507][ T4975] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.528279][ T4975] device bridge_slave_1 entered promiscuous mode [ 43.530685][ T5038] loop3: detected capacity change from 0 to 1024 [ 43.536072][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 43.561866][ T4975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.564590][ T4975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.576369][ T5038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 43.628228][ T4975] team0: Port device team_slave_0 added [ 43.661982][ T4975] team0: Port device team_slave_1 added [ 43.671757][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 43.682631][ T4975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.683915][ T4975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.688341][ T4975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.702942][ T4975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.704660][ T4975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.723406][ T4975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.771393][ T4975] device hsr_slave_0 entered promiscuous mode [ 43.820216][ T4975] device hsr_slave_1 entered promiscuous mode [ 43.821743][ T5066] netlink: 'syz.3.255': attribute type 2 has an invalid length. [ 43.823237][ T5066] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 43.840040][ T4975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.841457][ T4975] Cannot create hsr debugfs directory [ 44.125556][ T5079] xt_TCPMSS: Only works on TCP SYN packets [ 44.253668][ T4975] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.273708][ T5099] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 44.308470][ T5101] loop2: detected capacity change from 0 to 512 [ 44.360750][ T5106] ieee802154 phy0 wpan0: encryption failed: -22 [ 44.377305][ T4975] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.405529][ T5118] loop2: detected capacity change from 0 to 256 [ 44.421280][ T4975] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.428697][ T5118] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.442702][ T5121] ip_tables: iptables: counters copy to user failed while replacing table [ 44.502617][ T5127] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 44.504151][ T5127] FAT-fs (loop2): Filesystem has been set read-only [ 44.505277][ T5127] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 44.514610][ T5127] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 44.518383][ T5127] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 44.583806][ T4975] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.640524][ T5139] loop3: detected capacity change from 0 to 512 [ 44.797609][ T4975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.818563][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.821783][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.889974][ T4335] Bluetooth: hci2: command 0x0409 tx timeout [ 45.019049][ T4975] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.039965][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.042063][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.043737][ T4531] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.045008][ T4531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.064113][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.073352][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.080704][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.085335][ T4531] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.086654][ T4531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.089179][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.094333][ T5182] loop2: detected capacity change from 0 to 512 [ 45.099818][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.101847][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.103852][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.105773][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.247204][ T5199] loop4: detected capacity change from 0 to 512 [ 45.276557][ T5199] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.298: inode has both inline data and extents flags [ 45.296508][ T5199] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.298: couldn't read orphan inode 15 (err -117) [ 45.331741][ T5199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.399537][ T5217] loop3: detected capacity change from 0 to 512 [ 45.417114][ T4975] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.419051][ T4975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.424595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.426854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.428606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.433611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.437931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.454691][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.467776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.517148][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 45.614269][ T5235] ieee802154 phy0 wpan0: encryption failed: -22 [ 45.994407][ T91] device hsr_slave_0 left promiscuous mode [ 46.019841][ T91] device hsr_slave_1 left promiscuous mode [ 46.099797][ T91] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.101438][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.103461][ T91] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.104876][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.106515][ T91] device bridge_slave_1 left promiscuous mode [ 46.108513][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.151932][ T91] device bridge_slave_0 left promiscuous mode [ 46.153090][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.177789][ T5256] loop1: detected capacity change from 0 to 512 [ 46.262647][ T91] device veth1_macvtap left promiscuous mode [ 46.264010][ T91] device veth0_macvtap left promiscuous mode [ 46.265169][ T91] device veth1_vlan left promiscuous mode [ 46.266299][ T91] device veth0_vlan left promiscuous mode [ 46.979680][ T4340] Bluetooth: hci2: command 0x041b tx timeout [ 48.351584][ T91] team0 (unregistering): Port device team_slave_1 removed [ 48.513980][ T91] team0 (unregistering): Port device team_slave_0 removed [ 48.684449][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.881134][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.049753][ T4335] Bluetooth: hci2: command 0x040f tx timeout [ 49.614001][ T5282] loop3: detected capacity change from 0 to 512 [ 50.321706][ T91] bond0 (unregistering): Released all slaves [ 50.625114][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.626788][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.671024][ T4975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.747325][ T5304] device syzkaller0 entered promiscuous mode [ 50.784749][ T5304] tipc: Started in network mode [ 50.785539][ T5304] tipc: Node identity 128b8b536314, cluster identity 4711 [ 50.786920][ T5304] tipc: Enabled bearer , priority 0 [ 50.817449][ T5303] tipc: Resetting bearer [ 50.880569][ T5327] loop3: detected capacity change from 0 to 512 [ 50.901914][ T5303] tipc: Disabling bearer [ 51.035847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.037808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.076137][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.078048][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.080844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.082437][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.094015][ T4975] device veth0_vlan entered promiscuous mode [ 51.106860][ T4975] device veth1_vlan entered promiscuous mode [ 51.139836][ T4340] Bluetooth: hci2: command 0x0419 tx timeout [ 51.192680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.195930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.198615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.204119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.207254][ T4975] device veth0_macvtap entered promiscuous mode [ 51.277181][ T4975] device veth1_macvtap entered promiscuous mode [ 51.288666][ T5361] loop4: detected capacity change from 0 to 512 [ 51.303637][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.305539][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.307369][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.318798][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.330312][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.337016][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.338767][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.341345][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.367174][ T4975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.368652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.381382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.383459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.393909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.429994][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.431855][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.433554][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.435314][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.439312][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.441699][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.443353][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.445228][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.448030][ T4975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.449969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.451855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.456004][ T4975] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.458014][ T4975] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.465199][ T4975] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.466776][ T4975] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.470727][ T5370] device syzkaller0 entered promiscuous mode [ 51.475700][ T5370] tipc: Started in network mode [ 51.476580][ T5370] tipc: Node identity de7c1ba687f8, cluster identity 4711 [ 51.477985][ T5370] tipc: Enabled bearer , priority 0 [ 51.485953][ T5369] tipc: Resetting bearer [ 51.553899][ T5382] loop2: detected capacity change from 0 to 764 [ 51.557284][ T5382] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 51.561429][ T5369] tipc: Disabling bearer [ 51.640588][ T5390] ieee802154 phy0 wpan0: encryption failed: -22 [ 51.643967][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.645473][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.647459][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.737826][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.739336][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.741526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.748819][ T5395] loop1: detected capacity change from 0 to 512 [ 52.167908][ T5412] pim6reg: tun_chr_ioctl cmd 1074025677 [ 52.169503][ T5412] pim6reg: linktype set to 270 [ 52.351568][ T5422] device syzkaller0 entered promiscuous mode [ 52.362117][ T5422] tipc: Started in network mode [ 52.363097][ T5422] tipc: Node identity 02c2e3598076, cluster identity 4711 [ 52.366822][ T5422] tipc: Enabled bearer , priority 0 [ 52.372852][ T5419] tipc: Resetting bearer [ 52.500824][ T5419] tipc: Disabling bearer [ 52.645214][ T5444] netlink: 'syz.4.379': attribute type 3 has an invalid length. [ 52.646760][ T5444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.379'. [ 52.648254][ T5444] ------------[ cut here ]------------ [ 52.649340][ T5444] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 52.673711][ T5444] WARNING: CPU: 1 PID: 5444 at net/sched/cls_u32.c:853 u32_change+0x1748/0x2018 [ 52.675508][ T5444] Modules linked in: [ 52.676194][ T5444] CPU: 1 PID: 5444 Comm: syz.4.379 Not tainted syzkaller #0 [ 52.677601][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 52.679437][ T5444] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 52.680876][ T5444] pc : u32_change+0x1748/0x2018 [ 52.681815][ T5444] lr : u32_change+0x1748/0x2018 [ 52.682680][ T5444] sp : ffff8000216d6c60 [ 52.683413][ T5444] x29: ffff8000216d6dc0 x28: ffff0000d083b200 x27: 1fffe0001a10764d [ 52.684927][ T5444] x26: ffff8000216d6f40 x25: ffff0000e9a68200 x24: dfff800000000000 [ 52.686409][ T5444] x23: 0000000000000010 x22: ffff7000042dad9c x21: dfff800000000000 [ 52.688098][ T5444] x20: ffff8000216d7460 x19: ffff800017d7f000 x18: 1fffe00033e7217e [ 52.689687][ T5444] x17: ffff80001539d000 x16: ffff8000082dd25c x15: 0000000040000000 [ 52.691213][ T5444] x14: 0000000000000001 x13: 1fffe00033e74870 x12: 0000000000000000 [ 52.692675][ T5444] x11: ff0080000a977920 x10: 0000000000000003 x9 : e281358c7bef5600 [ 52.694173][ T5444] x8 : e281358c7bef5600 x7 : ffff80000825ab48 x6 : 0000000000000000 [ 52.695625][ T5444] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 52.697113][ T5444] x2 : 0000000000000006 x1 : ffff800011cfdc80 x0 : ffff80018a09a000 [ 52.698637][ T5444] Call trace: [ 52.699210][ T5444] u32_change+0x1748/0x2018 [ 52.699965][ T5444] tc_new_tfilter+0xdc8/0x1468 [ 52.700822][ T5444] rtnetlink_rcv_msg+0x6d4/0xcc4 [ 52.701725][ T5444] netlink_rcv_skb+0x220/0x3ec [ 52.702609][ T5444] rtnetlink_rcv+0x28/0x38 [ 52.703489][ T5444] netlink_unicast+0x5fc/0x80c [ 52.704293][ T5444] netlink_sendmsg+0x6f0/0x9d8 [ 52.705173][ T5444] ____sys_sendmsg+0x588/0x90c [ 52.706026][ T5444] __sys_sendmmsg+0x320/0x7ec [ 52.706922][ T5444] __arm64_sys_sendmmsg+0xa4/0xc0 [ 52.707893][ T5444] invoke_syscall+0x98/0x290 [ 52.708751][ T5444] el0_svc_common+0x13c/0x258 [ 52.709552][ T5444] do_el0_svc+0x5c/0x134 [ 52.710289][ T5444] el0_svc+0x58/0x128 [ 52.710986][ T5444] el0t_64_sync_handler+0x84/0xf0 [ 52.711896][ T5444] el0t_64_sync+0x18c/0x190 [ 52.712847][ T5444] irq event stamp: 1118 [ 52.713607][ T5444] hardirqs last enabled at (1117): [] finish_lock_switch+0xb0/0x1c8 [ 52.715232][ T5444] hardirqs last disabled at (1118): [] el1_dbg+0x24/0x80 [ 52.716730][ T5444] softirqs last enabled at (1110): [] handle_softirqs+0xb1c/0xc90 [ 52.718572][ T5444] softirqs last disabled at (1007): [] __do_softirq+0x14/0x20 [ 52.720191][ T5444] ---[ end trace 0000000000000000 ]--- [ 52.756243][ T5466] netlink: 48 bytes leftover after parsing attributes in process `syz.1.386'.