last executing test programs: 27.697109255s ago: executing program 0 (id=48): write(0xffffffffffffffff, &(0x7f0000000140)="110000005a001f001007f4d655c635", 0xf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 27.471481678s ago: executing program 0 (id=52): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000000c0)={0x4000003}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0x9, 0x6, 0x3, 0x40, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0xfff3, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x1, 0x2, 0x3}], 0xf87}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 27.324640686s ago: executing program 0 (id=55): fanotify_mark(0xffffffffffffffff, 0x641, 0x8000026, 0xffffffffffffffff, 0x0) 27.118904625s ago: executing program 0 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) setxattr$security_evm(&(0x7f0000000280)='./file0/../file0/../file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) 26.905169696s ago: executing program 0 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3ff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x2001, 0x1dc) write(r1, &(0x7f0000000200)='atkbd', 0x5) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 26.571116819s ago: executing program 0 (id=65): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_io_uring_setup(0x3be9, &(0x7f0000000240)={0x0, 0xbc21, 0x80, 0x1, 0x34b}, 0x0, 0x0, 0x0) fanotify_init(0x200, 0x0) io_uring_setup(0x5128, &(0x7f0000000400)={0x0, 0xc8fe, 0x8, 0x1, 0x2c, 0x0, r0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) epoll_create1(0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) r2 = fsmount(r1, 0x0, 0x88) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2], 0x20) 26.202727009s ago: executing program 32 (id=65): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_io_uring_setup(0x3be9, &(0x7f0000000240)={0x0, 0xbc21, 0x80, 0x1, 0x34b}, 0x0, 0x0, 0x0) fanotify_init(0x200, 0x0) io_uring_setup(0x5128, &(0x7f0000000400)={0x0, 0xc8fe, 0x8, 0x1, 0x2c, 0x0, r0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) timerfd_create(0x0, 0x0) epoll_create1(0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) r2 = fsmount(r1, 0x0, 0x88) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2], 0x20) 2.965225767s ago: executing program 3 (id=324): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0xdb4, 0x200, 0x400, 0x7f, 0x10}) 2.825533133s ago: executing program 3 (id=327): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x5e20, @private=0xa010100}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x8, 0x700, 0x1, 0xe, {{0x6, 0x4, 0x3, 0x20, 0x18, 0x68, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp_addr={0x44, 0x4, 0x9d, 0x1, 0xd}]}}}}}) 2.621093612s ago: executing program 3 (id=328): r0 = userfaultfd(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x181}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mkdir(0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timerfd_create(0x9, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 2.049137111s ago: executing program 2 (id=336): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = fsopen(&(0x7f0000000140)='erofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.042802022s ago: executing program 4 (id=337): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x3, 0x301000) mq_timedreceive(r1, &(0x7f0000000300)=""/228, 0xe4, 0xfff, &(0x7f0000000400)={0x77359400}) 2.025745105s ago: executing program 1 (id=338): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0184d08, &(0x7f0000000140)) 1.884925262s ago: executing program 2 (id=340): write(0xffffffffffffffff, &(0x7f0000000140)="110000005a001f001007f4d655c63589ce", 0x11) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.83988829s ago: executing program 1 (id=341): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)="d6", 0x1}], 0x1}}], 0x1, 0x804) 1.784273271s ago: executing program 5 (id=342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x6, 0x4, 0x2, 0x8, 0x4, 0x3, 0x1, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.639925488s ago: executing program 4 (id=343): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x20) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x2400c800) sendmsg$nl_route(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setxattr$security_capability(0x0, &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x9, 0x6}, {0xa, 0x8000}]}, 0x18, 0x2) 1.478798969s ago: executing program 2 (id=344): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x4000003}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0x9, 0x6, 0x3, 0x40, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0xfff3, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x1, 0x2, 0x3}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.426851179s ago: executing program 5 (id=345): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0xb1, 0x4) sendmmsg$unix(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="b2", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000", @ANYRES8=r0], 0x18, 0x800c815}}], 0x1, 0x20040804) accept4$unix(r0, 0x0, 0x0, 0x0) 1.378058178s ago: executing program 1 (id=346): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}]}}) 1.232888115s ago: executing program 5 (id=347): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0xead07d5ec9a6f40b, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100, 0x9], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.232665325s ago: executing program 1 (id=348): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0xa1010, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 1.086199174s ago: executing program 4 (id=349): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fanotify_init(0x200, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x47e5, 0x0, 0x2, 0x378}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x46, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) 977.037114ms ago: executing program 1 (id=350): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = fsopen(&(0x7f0000000140)='erofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 976.802624ms ago: executing program 3 (id=351): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x8}, 0x1c) 911.005276ms ago: executing program 4 (id=352): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x8000000b, @empty, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 886.417271ms ago: executing program 5 (id=353): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'veth0_vlan\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e}, {0x7, 0x11fd}]}}) 783.073781ms ago: executing program 3 (id=354): write(0xffffffffffffffff, &(0x7f0000000140)="110000005a001f001007f4d655c63589ce", 0x11) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 725.082532ms ago: executing program 5 (id=355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x42}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x6, 0x4, 0x2, 0x8, 0x4, 0x3, 0x1, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 724.830742ms ago: executing program 4 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x7}}, 0x18) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x160) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) 685.024049ms ago: executing program 1 (id=357): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0xb1, 0x4) sendmmsg$unix(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="b2", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000001000000", @ANYRES8=r0], 0x18, 0x800c815}}], 0x1, 0x20040804) accept4$unix(r0, 0x0, 0x0, 0x0) 341.632735ms ago: executing program 33 (id=357): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0xb1, 0x4) sendmmsg$unix(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="b2", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000000001000000", @ANYRES8=r0], 0x18, 0x800c815}}], 0x1, 0x20040804) accept4$unix(r0, 0x0, 0x0, 0x0) 332.646866ms ago: executing program 5 (id=359): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) utimes(0x0, &(0x7f00000000c0)={{}, {0x0, 0x2710}}) 328.787747ms ago: executing program 2 (id=360): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x200, 0x7fff) 313.62905ms ago: executing program 3 (id=361): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 312.32464ms ago: executing program 4 (id=362): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 93.070562ms ago: executing program 2 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x300000b, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r0, 0x0, 0x0) 0s ago: executing program 2 (id=364): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x180000000000, 0x6, 0x8, 0x8}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 57.995186][ T4257] cgroup: Unknown subsys name 'net' [ 58.126602][ T4257] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.366101][ T4257] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.278529][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.293340][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.300603][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.309699][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.317512][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.326760][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.327718][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.334066][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.349045][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.349045][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.357021][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.363608][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.370951][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.377734][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.384843][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.398337][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.398601][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.406089][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.412855][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.420563][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.427226][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.434006][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.440483][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.454561][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.455286][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.468596][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.512388][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.512656][ T49] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.519652][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.534348][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.908995][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 61.937499][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 61.957098][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 61.977465][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 62.011993][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 62.141238][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.148354][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.157440][ T4277] device bridge_slave_0 entered promiscuous mode [ 62.165396][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.174929][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.182690][ T4272] device bridge_slave_0 entered promiscuous mode [ 62.202321][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.209426][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.217102][ T4283] device bridge_slave_0 entered promiscuous mode [ 62.230173][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.237952][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.245702][ T4277] device bridge_slave_1 entered promiscuous mode [ 62.253343][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.260429][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.269033][ T4272] device bridge_slave_1 entered promiscuous mode [ 62.283835][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.291989][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.299535][ T4283] device bridge_slave_1 entered promiscuous mode [ 62.308196][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.315384][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.323459][ T4280] device bridge_slave_0 entered promiscuous mode [ 62.339736][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.346974][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.354687][ T4276] device bridge_slave_0 entered promiscuous mode [ 62.373585][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.380645][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.388335][ T4280] device bridge_slave_1 entered promiscuous mode [ 62.407665][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.420014][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.427295][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.435639][ T4276] device bridge_slave_1 entered promiscuous mode [ 62.444014][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.455964][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.470609][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.481584][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.514607][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.542928][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.553902][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.565451][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.581203][ T4277] team0: Port device team_slave_0 added [ 62.588826][ T4283] team0: Port device team_slave_0 added [ 62.596202][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.617533][ T4272] team0: Port device team_slave_0 added [ 62.626101][ T4277] team0: Port device team_slave_1 added [ 62.632948][ T4283] team0: Port device team_slave_1 added [ 62.650844][ T4272] team0: Port device team_slave_1 added [ 62.681152][ T4276] team0: Port device team_slave_0 added [ 62.687634][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.694610][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.720523][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.738595][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.745657][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.771949][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.786098][ T4280] team0: Port device team_slave_0 added [ 62.799367][ T4276] team0: Port device team_slave_1 added [ 62.829782][ T4280] team0: Port device team_slave_1 added [ 62.836655][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.843621][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.869711][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.881368][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.888333][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.914528][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.925884][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.935509][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.964034][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.976862][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.983942][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.010671][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.036952][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.043962][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.074628][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.086539][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.093734][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.119972][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.162851][ T4277] device hsr_slave_0 entered promiscuous mode [ 63.169474][ T4277] device hsr_slave_1 entered promiscuous mode [ 63.177737][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.184818][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.213511][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.245662][ T4272] device hsr_slave_0 entered promiscuous mode [ 63.252713][ T4272] device hsr_slave_1 entered promiscuous mode [ 63.259109][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.266936][ T4272] Cannot create hsr debugfs directory [ 63.279400][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.286625][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.312650][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.366719][ T4276] device hsr_slave_0 entered promiscuous mode [ 63.373573][ T4276] device hsr_slave_1 entered promiscuous mode [ 63.379974][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.387634][ T4276] Cannot create hsr debugfs directory [ 63.396793][ T4283] device hsr_slave_0 entered promiscuous mode [ 63.406031][ T4283] device hsr_slave_1 entered promiscuous mode [ 63.412460][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.419998][ T4283] Cannot create hsr debugfs directory [ 63.481005][ T4280] device hsr_slave_0 entered promiscuous mode [ 63.487611][ T4280] device hsr_slave_1 entered promiscuous mode [ 63.494559][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.502363][ T4280] Cannot create hsr debugfs directory [ 63.552699][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 63.552709][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 63.631068][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 63.631137][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 63.637218][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 63.800529][ T4272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.823597][ T4272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.832595][ T4272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.841538][ T4272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.877486][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.897042][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.914941][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.928124][ T4280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.937150][ T4280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.952172][ T4280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.960702][ T4280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.968948][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.042451][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.055642][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.064524][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.078472][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.107511][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.137732][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.146440][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.186736][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.194930][ T4283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.212496][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.224562][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.233311][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.240465][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.279098][ T4283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.289220][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.299789][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.308756][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.319777][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.326876][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.342772][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.349704][ T4283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.369097][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.376658][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.386579][ T4283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.397279][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.424398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.433195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.466673][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.477028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.486530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.498698][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.513606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.521543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.529095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.544927][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.562126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.570958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.579241][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.586342][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.596078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.604968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.613876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.622820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.631560][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.638626][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.646237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.654747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.663541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.672455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.680653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.689113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.705016][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.725355][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.734936][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.751916][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.759092][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.773601][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.784483][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.795699][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.808072][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.820129][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.830265][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.840374][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.876179][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.885194][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.898794][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.907361][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.916988][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.926051][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.933182][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.942033][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.951919][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.960669][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.969569][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.985085][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.002614][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.020158][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.031892][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.039642][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.072724][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.094131][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.105084][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.115448][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.126005][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.135912][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.144866][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.160199][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.168326][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.177206][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.185881][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.193210][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.200887][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.209355][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.218480][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.225584][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.234417][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.243401][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.251400][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.267168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.277631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.287051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.295805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.308943][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.320332][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.334729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.346531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.371822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.395371][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.402501][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.415962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.433369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.446648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.489144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.507269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.518394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.533486][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.540548][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.548769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.559814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.568372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.577115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.585743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.594786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.623553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.631298][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 65.631332][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 65.644704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.654245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.666511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.676194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.689962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.698972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.711566][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 65.711582][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 65.717558][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 65.747762][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.764878][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.778754][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.785979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.795918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.807678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.820572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.836582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.845112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.884047][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.900617][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.909608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.924293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.934693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.944264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.954121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.962829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.972034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.979435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.004188][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.022533][ T4272] device veth0_vlan entered promiscuous mode [ 66.055728][ T4272] device veth1_vlan entered promiscuous mode [ 66.102322][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.110281][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.169341][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.186457][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.235750][ T4280] device veth0_vlan entered promiscuous mode [ 66.247980][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.262800][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.274119][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.282408][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.296947][ T4280] device veth1_vlan entered promiscuous mode [ 66.322610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.334189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.348395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.365802][ T4272] device veth0_macvtap entered promiscuous mode [ 66.386611][ T4272] device veth1_macvtap entered promiscuous mode [ 66.427112][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.456544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.472316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.482155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.491275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.513328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.546713][ T4280] device veth0_macvtap entered promiscuous mode [ 66.555720][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.568661][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.577602][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.599879][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.611705][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.624685][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.634186][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.643725][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.652810][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.667090][ T4280] device veth1_macvtap entered promiscuous mode [ 66.674611][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.683284][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.690652][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.698240][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.706914][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.756284][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.765168][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.776082][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.785998][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.795363][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.802993][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.819131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.827569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.862464][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.872452][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.883456][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.896126][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.904165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.915282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.923313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.931617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.939801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.948332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.956964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.965000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.977922][ T4277] device veth0_vlan entered promiscuous mode [ 66.991538][ T4276] device veth0_vlan entered promiscuous mode [ 66.998177][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.009355][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.020685][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.043601][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.056831][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.075947][ T4277] device veth1_vlan entered promiscuous mode [ 67.092734][ T4280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.104923][ T4280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.113741][ T4280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.123042][ T4280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.162388][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.170509][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.179700][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.190193][ T4276] device veth1_vlan entered promiscuous mode [ 67.215654][ T4283] device veth0_vlan entered promiscuous mode [ 67.236367][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.252757][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.254274][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.260669][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.299404][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.312297][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.319875][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.331452][ T4283] device veth1_vlan entered promiscuous mode [ 67.368676][ T4276] device veth0_macvtap entered promiscuous mode [ 67.382673][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.396801][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.405022][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.414387][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.422879][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.431796][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.440155][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.466769][ T4276] device veth1_macvtap entered promiscuous mode [ 67.476686][ T4277] device veth0_macvtap entered promiscuous mode [ 67.497991][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.505775][ T4283] device veth0_macvtap entered promiscuous mode [ 67.508791][ T4283] device veth1_macvtap entered promiscuous mode [ 67.525148][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.529208][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.543690][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.545081][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.552361][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.566654][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.579052][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.591204][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.601623][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.614437][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.622941][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.630563][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.639666][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.648370][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.656914][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.664863][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.673429][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.682601][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.696754][ T4277] device veth1_macvtap entered promiscuous mode [ 67.711063][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 67.721795][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 67.746469][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.758660][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.768507][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.779879][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.790196][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.791529][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 67.801772][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 67.807063][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 67.818546][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.830479][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.846599][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.857585][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.867635][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.878816][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.889577][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.900037][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.908878][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.917629][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.926583][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.937511][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.945658][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.954819][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.963704][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.973222][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.993093][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.004326][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.014636][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.025135][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.036204][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.046835][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.067936][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.094370][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.106897][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.119367][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.130003][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.139870][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.150618][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.160492][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.171176][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.181018][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.192361][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.204063][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.224693][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.232669][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.241413][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.249950][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.259300][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.269575][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.279969][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.290382][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.299290][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.312694][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.324226][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.334638][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.345279][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.356410][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.367322][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.377175][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.387664][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.399320][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.432475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.448468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.485213][ T4283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.512077][ T4283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.528024][ T4283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.535761][ T4356] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.537015][ T4283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.637708][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.652562][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.675131][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.724743][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.733086][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.741653][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.749012][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.758444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.768589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.835892][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.844914][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.863173][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.870654][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.891177][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.918293][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.971805][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.979675][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.009110][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.543507][ T4383] erofs: (device loop5): erofs_read_superblock: cannot find valid erofs superblock [ 69.792658][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 69.800996][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 69.829521][ T4389] loop2: detected capacity change from 0 to 512 [ 69.852641][ T4389] ======================================================= [ 69.852641][ T4389] WARNING: The mand mount option has been deprecated and [ 69.852641][ T4389] and is ignored by this kernel. Remove the mand [ 69.852641][ T4389] option from the mount to silence this warning. [ 69.852641][ T4389] ======================================================= [ 69.887533][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 69.893869][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 69.894366][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 69.940593][ T4389] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 71.153961][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.160480][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.492787][ T4437] FAULT_INJECTION: forcing a failure. [ 71.492787][ T4437] name failslab, interval 1, probability 0, space 0, times 1 [ 71.549773][ T4437] CPU: 1 PID: 4437 Comm: syz.4.30 Not tainted syzkaller #0 [ 71.557017][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.567093][ T4437] Call Trace: [ 71.570385][ T4437] [ 71.573327][ T4437] dump_stack_lvl+0x188/0x24e [ 71.578026][ T4437] ? show_regs_print_info+0x12/0x12 [ 71.583244][ T4437] ? load_image+0x410/0x410 [ 71.587771][ T4437] ? __might_sleep+0xd0/0xd0 [ 71.592380][ T4437] ? __lock_acquire+0x7c40/0x7c40 [ 71.597423][ T4437] should_fail_ex+0x390/0x4c0 [ 71.602109][ T4437] should_failslab+0x5/0x20 [ 71.606629][ T4437] slab_pre_alloc_hook+0x59/0x300 [ 71.611658][ T4437] kmem_cache_alloc+0x56/0x2f0 [ 71.616414][ T4437] ? getname_flags+0xb7/0x500 [ 71.621082][ T4437] getname_flags+0xb7/0x500 [ 71.625578][ T4437] user_path_at_empty+0x28/0x60 [ 71.630417][ T4437] __se_sys_mount+0x2a4/0x3d0 [ 71.635088][ T4437] ? __x64_sys_mount+0xc0/0xc0 [ 71.639849][ T4437] ? lockdep_hardirqs_on+0x94/0x140 [ 71.645039][ T4437] ? __x64_sys_mount+0x1c/0xc0 [ 71.649794][ T4437] do_syscall_64+0x4c/0xa0 [ 71.654205][ T4437] ? clear_bhb_loop+0x60/0xb0 [ 71.658871][ T4437] ? clear_bhb_loop+0x60/0xb0 [ 71.663536][ T4437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.669434][ T4437] RIP: 0033:0x7f365259e159 [ 71.673842][ T4437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.693437][ T4437] RSP: 002b:00007f3653451028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.701840][ T4437] RAX: ffffffffffffffda RBX: 00007f3652825fa0 RCX: 00007f365259e159 [ 71.709802][ T4437] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000000000000000 [ 71.717761][ T4437] RBP: 00007f365263506b R08: 0000000000000000 R09: 0000000000000000 [ 71.725721][ T4437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.733677][ T4437] R13: 00007f3652826038 R14: 00007f3652825fa0 R15: 00007fff3eaeeca8 [ 71.741646][ T4437] [ 71.846981][ T4445] loop0: detected capacity change from 0 to 512 [ 71.893874][ T4445] FAT-fs (loop0): Directory bread(block 199916) failed [ 71.916043][ T4445] FAT-fs (loop0): Directory bread(block 199917) failed [ 71.930853][ T4445] FAT-fs (loop0): Directory bread(block 199918) failed [ 71.951071][ T4445] FAT-fs (loop0): Directory bread(block 199919) failed [ 71.972188][ T4445] FAT-fs (loop0): Directory bread(block 199920) failed [ 71.979082][ T4445] FAT-fs (loop0): Directory bread(block 199921) failed [ 72.007851][ T4445] FAT-fs (loop0): Directory bread(block 199922) failed [ 72.052281][ T4445] FAT-fs (loop0): Directory bread(block 199923) failed [ 72.121671][ T4445] FAT-fs (loop0): Directory bread(block 199916) failed [ 72.150844][ T4445] FAT-fs (loop0): Directory bread(block 199917) failed [ 72.202338][ T4456] loop7: detected capacity change from 0 to 7 [ 72.211709][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.221034][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.230822][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.239986][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.259677][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.268856][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.336019][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.345228][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.357442][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.366643][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.374649][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.383852][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.411582][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.420785][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.434383][ T4266] ldm_validate_partition_table(): Disk read failed. [ 72.470642][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.479832][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.505274][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.514468][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.524929][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.534118][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.550908][ T4266] Dev loop7: unable to read RDB block 0 [ 72.557926][ T4266] loop7: unable to read partition table [ 72.568813][ T4266] loop7: partition table beyond EOD, truncated [ 72.579258][ T4456] ldm_validate_partition_table(): Disk read failed. [ 72.702924][ T4456] Dev loop7: unable to read RDB block 0 [ 72.795800][ T4456] loop7: unable to read partition table [ 72.848933][ T4456] loop7: partition table beyond EOD, truncated [ 72.891360][ T4456] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`4FLQk݊5) failed (rc=-5) [ 74.519035][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.665511][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.851702][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.020761][ T4546] mmap: syz.1.70 (4546) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.119550][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.570397][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.583397][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.591176][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.599985][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.608167][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.623399][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.549163][ T4558] chnl_net:caif_netlink_parms(): no params data found [ 76.749063][ T4602] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 76.871124][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.878242][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.897762][ T4558] device bridge_slave_0 entered promiscuous mode [ 76.961397][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.975031][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.001748][ T4558] device bridge_slave_1 entered promiscuous mode [ 77.108524][ T26] audit: type=1800 audit(1790689285.305:2): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.87" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 77.131132][ T4614] loop1: detected capacity change from 0 to 164 [ 77.145908][ T4558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.183196][ T4558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.555074][ T4558] team0: Port device team_slave_0 added [ 77.623562][ T4558] team0: Port device team_slave_1 added [ 77.710827][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 77.841719][ T4639] loop2: detected capacity change from 0 to 16 [ 77.912800][ T4639] erofs: (device loop2): erofs_init_device: empty device tag @ pos 0 [ 78.037084][ T4266] blk_print_req_error: 25 callbacks suppressed [ 78.037098][ T4266] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.097189][ T4558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.146523][ T4558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.285334][ T4558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.394635][ T9] device hsr_slave_0 left promiscuous mode [ 78.447795][ T9] device hsr_slave_1 left promiscuous mode [ 78.467159][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.497092][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.528048][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.561720][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.582414][ T4665] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 78.582860][ T9] device bridge_slave_1 left promiscuous mode [ 78.605310][ T4665] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 78.637389][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.703845][ T9] device bridge_slave_0 left promiscuous mode [ 78.726624][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.872683][ T9] device veth1_macvtap left promiscuous mode [ 78.879052][ T9] device veth0_macvtap left promiscuous mode [ 78.911540][ T9] device veth1_vlan left promiscuous mode [ 78.928611][ T9] device veth0_vlan left promiscuous mode [ 79.437636][ T4697] loop1: detected capacity change from 0 to 16 [ 79.484327][ T4697] erofs: (device loop1): mounted with root inode @ nid 36. [ 79.781696][ T4700] loop3: detected capacity change from 0 to 8192 [ 79.798814][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 80.280077][ T9] team0 (unregistering): Port device team_slave_1 removed [ 80.341367][ T9] team0 (unregistering): Port device team_slave_0 removed [ 80.401560][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.491362][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.549371][ T4722] capability: warning: `syz.1.119' uses deprecated v2 capabilities in a way that may be insecure [ 80.710132][ T4727] loop1: detected capacity change from 0 to 164 [ 81.173424][ T9] bond0 (unregistering): Released all slaves [ 81.245732][ T4740] IPv6: addrconf: prefix option has invalid lifetime [ 81.353547][ T4558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.367567][ T4558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.403459][ T4558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.408164][ T130] cfg80211: failed to load regulatory.db [ 81.599551][ T4753] loop3: detected capacity change from 0 to 512 [ 81.639226][ T4753] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 81.717839][ T4558] device hsr_slave_0 entered promiscuous mode [ 81.747310][ T4558] device hsr_slave_1 entered promiscuous mode [ 81.801108][ T4558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.822530][ T4558] Cannot create hsr debugfs directory [ 81.870927][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 82.324778][ T4558] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.421818][ T4558] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.580567][ T4558] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.660270][ T4558] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.851145][ T4787] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 82.935351][ T4558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.991454][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.009694][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.033761][ T4558] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.055927][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.085133][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.094283][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.101422][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.141628][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.161852][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.191723][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.218887][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.226048][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.278144][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.319717][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.383667][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.433310][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.475621][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.488497][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.553912][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.584848][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.606981][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.620668][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.630419][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.653500][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.958947][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 84.437536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.463840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.509610][ T4558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.400465][ T4894] loop2: detected capacity change from 0 to 512 [ 85.497710][ T4894] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.670701][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.688299][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.797295][ T4558] device veth0_vlan entered promiscuous mode [ 85.807602][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.817486][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.851920][ T4558] device veth1_vlan entered promiscuous mode [ 85.882639][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.891384][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.910399][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.976271][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.012637][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.021922][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.075703][ T4558] device veth0_macvtap entered promiscuous mode [ 86.094328][ T4558] device veth1_macvtap entered promiscuous mode [ 86.162574][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.202066][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.235655][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.287070][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.302699][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.320668][ T4924] x_tables: ip_tables: osf match: only valid for protocol 6 [ 86.334070][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.364222][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.400395][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.417082][ T4558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.464143][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.504347][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.531791][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.543655][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.553774][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.564431][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.579416][ T4558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.596800][ T4558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.651589][ T4558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.661208][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.715247][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.731935][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.770379][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.797916][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.835990][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.872484][ T4558] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.898865][ T4558] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.926652][ T4558] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.949801][ T4558] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.995278][ T4942] netlink: 36 bytes leftover after parsing attributes in process `syz.3.181'. [ 87.225257][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.261277][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.274447][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.344686][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.369012][ T4970] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 87.377283][ T4965] loop1: detected capacity change from 0 to 256 [ 87.390818][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.399075][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.118067][ T5041] loop2: detected capacity change from 0 to 1764 [ 89.622607][ T5064] FAULT_INJECTION: forcing a failure. [ 89.622607][ T5064] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.662484][ T5064] CPU: 0 PID: 5064 Comm: syz.4.214 Not tainted syzkaller #0 [ 89.669819][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.679884][ T5064] Call Trace: [ 89.683174][ T5064] [ 89.686116][ T5064] dump_stack_lvl+0x188/0x24e [ 89.690814][ T5064] ? show_regs_print_info+0x12/0x12 [ 89.696028][ T5064] ? load_image+0x410/0x410 [ 89.700556][ T5064] ? __lock_acquire+0x7c40/0x7c40 [ 89.705597][ T5064] ? __local_bh_enable_ip+0x136/0x1c0 [ 89.710985][ T5064] should_fail_ex+0x390/0x4c0 [ 89.715692][ T5064] _copy_from_user+0x2c/0x170 [ 89.720390][ T5064] copy_from_sockptr+0x69/0x80 [ 89.725173][ T5064] do_ip_setsockopt+0x1066/0x2f00 [ 89.730222][ T5064] ? ip_sock_set_pktinfo+0x60/0x60 [ 89.735357][ T5064] ? aa_sk_perm+0x81f/0x950 [ 89.739882][ T5064] ? aa_af_perm+0x340/0x340 [ 89.744404][ T5064] ? __fget_files+0x3fc/0x460 [ 89.749108][ T5064] ? aa_sock_opt_perm+0x74/0x100 [ 89.754074][ T5064] ip_setsockopt+0x5d/0x100 [ 89.758599][ T5064] ? sock_common_recvmsg+0x190/0x190 [ 89.763910][ T5064] __sys_setsockopt+0x2bf/0x3d0 [ 89.768780][ T5064] __x64_sys_setsockopt+0xb1/0xc0 [ 89.773825][ T5064] do_syscall_64+0x4c/0xa0 [ 89.778258][ T5064] ? clear_bhb_loop+0x60/0xb0 [ 89.782951][ T5064] ? clear_bhb_loop+0x60/0xb0 [ 89.787644][ T5064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.793563][ T5064] RIP: 0033:0x7f365259e159 [ 89.797990][ T5064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.817610][ T5064] RSP: 002b:00007f3653451028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.826048][ T5064] RAX: ffffffffffffffda RBX: 00007f3652825fa0 RCX: 00007f365259e159 [ 89.834035][ T5064] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000005 [ 89.842021][ T5064] RBP: 00007f365263506b R08: 000000000000000c R09: 0000000000000000 [ 89.850000][ T5064] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 89.857984][ T5064] R13: 00007f3652826038 R14: 00007f3652825fa0 R15: 00007fff3eaeeca8 [ 89.865971][ T5064] [ 90.591612][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 90.833263][ T5113] loop2: detected capacity change from 0 to 164 [ 90.910863][ T5113] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 92.003434][ T5165] loop2: detected capacity change from 0 to 764 [ 92.071427][ T4264] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.090290][ T5165] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 93.612294][ T26] audit: type=1326 audit(1790689301.815:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.4.265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365259e159 code=0x7ffc0000 [ 93.706396][ T26] audit: type=1326 audit(1790689301.855:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.4.265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365259e159 code=0x7ffc0000 [ 93.787516][ T26] audit: type=1326 audit(1790689301.865:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.4.265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365259e159 code=0x7ffc0000 [ 93.889277][ T5241] loop4: detected capacity change from 0 to 256 [ 93.910779][ T26] audit: type=1326 audit(1790689301.865:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.4.265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f365259e159 code=0x7ffc0000 [ 94.016255][ T5241] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 94.018484][ T26] audit: type=1326 audit(1790689301.865:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.4.265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365259e159 code=0x7ffc0000 [ 94.067674][ T5241] FAT-fs (loop4): Filesystem has been set read-only [ 94.117028][ T5241] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 94.146252][ T26] audit: type=1326 audit(1790689301.865:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.4.265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365259e159 code=0x7ffc0000 [ 94.156042][ T5241] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 94.264772][ T5241] syz.4.268 (5241) used greatest stack depth: 20704 bytes left [ 94.273825][ T26] audit: type=1326 audit(1790689301.865:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.4.265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365259e159 code=0x7ffc0000 [ 94.365681][ T26] audit: type=1326 audit(1790689301.865:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.4.265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f365259e159 code=0x7ffc0000 [ 94.392247][ T26] audit: type=1326 audit(1790689301.865:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.4.265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365259e159 code=0x7ffc0000 [ 94.458950][ T26] audit: type=1326 audit(1790689301.865:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5232 comm="syz.4.265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365259e159 code=0x7ffc0000 [ 95.278570][ T5292] loop5: detected capacity change from 0 to 16 [ 95.307482][ T5292] erofs: (device loop5): mounted with root inode @ nid 36. [ 96.265353][ T5328] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.599925][ T5339] loop1: detected capacity change from 0 to 512 [ 97.357558][ T5368] loop3: detected capacity change from 0 to 164 [ 97.620149][ T5376] device ip6gre1 entered promiscuous mode [ 97.709079][ T5377] loop3: detected capacity change from 0 to 8192 [ 97.782904][ T5377] loop3: p2 p3 < > p4 < p5 > [ 97.789426][ T5377] loop3: partition table partially beyond EOD, truncated [ 97.811514][ T5377] loop3: p2 start 3841984512 is beyond EOD, truncated [ 97.837415][ T5377] loop3: p3 start 327680 is beyond EOD, truncated [ 97.856573][ T5377] loop3: p5 start 3841984512 is beyond EOD, truncated [ 98.140073][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 98.629345][ T5414] 9pnet_fd: Insufficient options for proto=fd [ 99.423273][ T5450] Zero length message leads to an empty skb [ 100.370619][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.602330][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.714252][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.742812][ T5493] FAULT_INJECTION: forcing a failure. [ 100.742812][ T5493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.766670][ T5487] page:ffffea0001310d00 refcount:4 mapcount:1 mapping:ffff8880799fc8d8 index:0x0 pfn:0x4c434 [ 100.777911][ T5487] memcg:ffff88807cf0a000 [ 100.782176][ T5487] aops:shmem_aops ino:33 [ 100.786434][ T5487] flags: 0xfff60000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 100.796261][ T5487] raw: 00fff60000080015 ffff88807cf0c248 ffffea0001310d48 ffff8880799fc8d8 [ 100.804859][ T5487] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88807cf0a000 [ 100.813449][ T5487] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 100.820735][ T5487] page_owner tracks the page as allocated [ 100.827476][ T5487] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5492, tgid 5487 (syz.3.361), ts 100738148479, free_ts 99398763973 [ 100.845057][ T5487] post_alloc_hook+0x173/0x1a0 [ 100.849937][ T5487] get_page_from_freelist+0x206b/0x2180 [ 100.855510][ T5487] __alloc_pages+0x1ec/0x4f0 [ 100.860122][ T5487] __folio_alloc+0xe/0x30 [ 100.864480][ T5487] vma_alloc_folio+0x499/0x900 [ 100.869254][ T5487] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 100.874988][ T5487] shmem_get_folio_gfp+0x1439/0x35e0 [ 100.880298][ T5487] shmem_read_mapping_page_gfp+0x99/0x2c0 [ 100.886042][ T5487] udmabuf_create+0x992/0x1000 [ 100.890823][ T5487] udmabuf_ioctl+0x1f3/0x300 [ 100.895429][ T5487] __se_sys_ioctl+0xfa/0x170 [ 100.900034][ T5487] do_syscall_64+0x4c/0xa0 [ 100.904462][ T5487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.910376][ T5487] page last free stack trace: [ 100.915057][ T5487] free_unref_page_prepare+0x8e5/0x9e0 [ 100.920543][ T5487] free_unref_page_list+0xbb/0x8e0 [ 100.925675][ T5487] release_pages+0x20d1/0x2340 [ 100.930456][ T5487] __pagevec_release+0x6d/0xe0 [ 100.935238][ T5487] shmem_undo_range+0x808/0x21d0 [ 100.940194][ T5487] shmem_evict_inode+0x225/0x9f0 [ 100.945148][ T5487] evict+0x4b6/0x8b0 [ 100.949066][ T5487] __dentry_kill+0x412/0x630 [ 100.953662][ T5487] dentry_kill+0xb8/0x290 [ 100.958004][ T5487] dput+0xfa/0x1d0 [ 100.961736][ T5487] __fput+0x597/0x8b0 [ 100.965793][ T5487] task_work_run+0x1d0/0x260 [ 100.970401][ T5487] exit_to_user_mode_loop+0xe6/0x110 [ 100.975722][ T5487] exit_to_user_mode_prepare+0xee/0x180 [ 100.981292][ T5487] syscall_exit_to_user_mode+0x16/0x40 [ 100.986776][ T5487] do_syscall_64+0x58/0xa0 [ 100.991307][ T5487] ------------[ cut here ]------------ [ 100.996774][ T5487] kernel BUG at mm/filemap.c:153! [ 101.001844][ T5487] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 101.007920][ T5487] CPU: 0 PID: 5487 Comm: syz.3.361 Not tainted syzkaller #0 [ 101.015293][ T5487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.018093][ T5493] CPU: 1 PID: 5493 Comm: syz.5.359 Not tainted syzkaller #0 [ 101.025515][ T5487] RIP: 0010:filemap_unaccount_folio+0x559/0xa00 [ 101.032787][ T5493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.039014][ T5487] Code: 07 38 c1 0f 8c 35 fe ff ff 4c 89 e7 e8 30 33 28 00 e9 28 fe ff ff e8 96 ee d6 ff 48 89 df 48 c7 c6 20 fd 94 8a e8 27 24 12 00 <0f> 0b e8 80 ee d6 ff 48 89 df 48 c7 c6 80 02 95 8a e8 11 24 12 00 [ 101.049064][ T5493] Call Trace: [ 101.049078][ T5493] [ 101.068656][ T5487] RSP: 0018:ffffc90003117660 EFLAGS: 00010046 [ 101.071920][ T5493] dump_stack_lvl+0x188/0x24e [ 101.074833][ T5487] [ 101.074838][ T5487] RAX: baebfdeb241f1400 RBX: ffffea0001310d00 RCX: baebfdeb241f1400 [ 101.080875][ T5493] ? show_regs_print_info+0x12/0x12 [ 101.085520][ T5487] RDX: 0000000000000002 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0 [ 101.087827][ T5493] ? load_image+0x410/0x410 [ 101.095771][ T5487] RBP: ffffc900031177b8 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 101.100938][ T5493] ? __lock_acquire+0x7c40/0x7c40 [ 101.108881][ T5487] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: ffff8880799fc8d8 [ 101.113354][ T5493] ? do_futex+0x310/0x320 [ 101.121295][ T5487] R13: ffffc90003117700 R14: dffffc0000000000 R15: ffff8880799fc8d8 [ 101.126290][ T5493] should_fail_ex+0x390/0x4c0 [ 101.134235][ T5487] FS: 000055557395a500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 101.138537][ T5493] _copy_from_user+0x2c/0x170 [ 101.146477][ T5487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.151127][ T5493] __x64_sys_utimes+0x11d/0x250 [ 101.160022][ T5487] CR2: 000000110c3afb37 CR3: 000000005e1cf000 CR4: 00000000003526f0 [ 101.164670][ T5493] ? __ia32_sys_futimesat+0x270/0x270 [ 101.171230][ T5487] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.176045][ T5493] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 101.183991][ T5487] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.189331][ T5493] ? lock_chain_count+0x20/0x20 [ 101.197278][ T5487] Call Trace: [ 101.197285][ T5487] [ 101.203232][ T5493] ? lockdep_hardirqs_on+0x94/0x140 [ 101.211177][ T5487] ? trace_mm_filemap_delete_from_page_cache+0x9c/0x220 [ 101.216002][ T5493] do_syscall_64+0x4c/0xa0 [ 101.219258][ T5487] __filemap_remove_folio+0xc1/0x900 [ 101.222168][ T5493] ? clear_bhb_loop+0x60/0xb0 [ 101.227332][ T5487] ? __rwlock_init+0x140/0x140 [ 101.234233][ T5493] ? clear_bhb_loop+0x60/0xb0 [ 101.238618][ T5487] ? __up_read+0x2b4/0x6b0 [ 101.243872][ T5493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.248518][ T5487] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 101.253253][ T5493] RIP: 0033:0x7f2c5d39e159 [ 101.257906][ T5487] ? _raw_spin_lock_irq+0xb7/0xf0 [ 101.262297][ T5493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.268155][ T5487] ? _raw_spin_lock_irqsave+0x100/0x100 [ 101.275142][ T5493] RSP: 002b:00007f2c5e27e028 EFLAGS: 00000246 [ 101.279530][ T5487] filemap_remove_folio+0xed/0x2c0 [ 101.284520][ T5493] ORIG_RAX: 00000000000000eb [ 101.304097][ T5487] truncate_inode_folio+0x59/0x70 [ 101.309610][ T5493] RAX: ffffffffffffffda RBX: 00007f2c5d625fa0 RCX: 00007f2c5d39e159 [ 101.315645][ T5487] shmem_undo_range+0x554/0x21d0 [ 101.320727][ T5493] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 101.325374][ T5487] ? verify_lock_unused+0x140/0x140 [ 101.330369][ T5493] RBP: 00007f2c5d43506b R08: 0000000000000000 R09: 0000000000000000 [ 101.338319][ T5487] ? shmem_truncate_range+0xb0/0xb0 [ 101.343224][ T5493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.351176][ T5487] ? do_raw_spin_lock+0x128/0x2f0 [ 101.356335][ T5493] R13: 00007f2c5d626038 R14: 00007f2c5d625fa0 R15: 00007ffe319abdf8 [ 101.364281][ T5487] ? __rwlock_init+0x140/0x140 [ 101.369459][ T5493] [ 101.377420][ T5487] shmem_evict_inode+0x225/0x9f0 [ 101.403470][ T5487] ? _raw_spin_unlock+0x24/0x40 [ 101.408339][ T5487] ? inode_wait_for_writeback+0x1df/0x220 [ 101.414070][ T5487] ? shmem_free_in_core_inode+0xb0/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 101.419624][ T5487] ? do_raw_spin_lock+0x128/0x2f0 [ 101.424654][ T5487] ? bit_waitqueue+0x30/0x30 [ 101.429255][ T5487] ? do_raw_spin_unlock+0x11d/0x230 [ 101.434464][ T5487] ? shmem_free_in_core_inode+0xb0/0xb0 [ 101.440015][ T5487] evict+0x4b6/0x8b0 [ 101.442046][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.443894][ T5487] ? proc_nr_inodes+0x2f0/0x2f0 [ 101.451381][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.455635][ T5487] ? do_raw_spin_unlock+0x11d/0x230 [ 101.463381][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.467709][ T5487] ? _raw_spin_unlock+0x24/0x40 [ 101.475447][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.479435][ T5487] ? iput+0x79f/0x9c0 [ 101.487301][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 101.490384][ T5487] __dentry_kill+0x412/0x630 [ 101.497813][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.501849][ T5487] dentry_kill+0xb8/0x290 [ 101.501867][ T5487] ? dput+0x37/0x1d0 [ 101.517039][ T5487] dput+0xfa/0x1d0 [ 101.520768][ T5487] __fput+0x597/0x8b0 [ 101.524768][ T5487] task_work_run+0x1d0/0x260 [ 101.529371][ T5487] ? task_work_cancel+0x220/0x220 [ 101.534401][ T5487] ? __close_range+0x20c/0x770 [ 101.539176][ T5487] ? exit_to_user_mode_loop+0x3b/0x110 [ 101.544645][ T5487] exit_to_user_mode_loop+0xe6/0x110 [ 101.549940][ T5487] exit_to_user_mode_prepare+0xee/0x180 [ 101.555498][ T5487] syscall_exit_to_user_mode+0x16/0x40 [ 101.560969][ T5487] do_syscall_64+0x58/0xa0 [ 101.565395][ T5487] ? clear_bhb_loop+0x60/0xb0 [ 101.570077][ T5487] ? clear_bhb_loop+0x60/0xb0 [ 101.574765][ T5487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.580670][ T5487] RIP: 0033:0x7fd554b9e159 [ 101.585083][ T5487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.604702][ T5487] RSP: 002b:00007ffe0a27dcd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 101.613162][ T5487] RAX: 0000000000000000 RBX: 00007ffe0a27ddc0 RCX: 00007fd554b9e159 [ 101.621143][ T5487] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 101.629123][ T5487] RBP: 0000000000018953 R08: 0000000000000001 R09: 0000000000000000 [ 101.637102][ T5487] R10: 0000001b2ee20000 R11: 0000000000000246 R12: 00007ffe0a27de00 [ 101.645076][ T5487] R13: 00007fd554e25fac R14: 00000000000189b1 R15: 00007fd554e25fa0 [ 101.653056][ T5487] [ 101.656084][ T5487] Modules linked in: [ 101.659988][ T5487] ---[ end trace 0000000000000000 ]--- [ 101.665437][ T5487] RIP: 0010:filemap_unaccount_folio+0x559/0xa00 [ 101.671697][ T5487] Code: 07 38 c1 0f 8c 35 fe ff ff 4c 89 e7 e8 30 33 28 00 e9 28 fe ff ff e8 96 ee d6 ff 48 89 df 48 c7 c6 20 fd 94 8a e8 27 24 12 00 <0f> 0b e8 80 ee d6 ff 48 89 df 48 c7 c6 80 02 95 8a e8 11 24 12 00 [ 101.691304][ T5487] RSP: 0018:ffffc90003117660 EFLAGS: 00010046 [ 101.697357][ T5487] RAX: baebfdeb241f1400 RBX: ffffea0001310d00 RCX: baebfdeb241f1400 [ 101.705319][ T5487] RDX: 0000000000000002 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0 [ 101.713278][ T5487] RBP: ffffc900031177b8 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 101.721235][ T5487] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: ffff8880799fc8d8 [ 101.729197][ T5487] R13: ffffc90003117700 R14: dffffc0000000000 R15: ffff8880799fc8d8 [ 101.737151][ T5487] FS: 000055557395a500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 101.746061][ T5487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.752631][ T5487] CR2: 000000110c3afb37 CR3: 000000005e1cf000 CR4: 00000000003526f0 [ 101.760588][ T5487] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.768544][ T5487] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.776509][ T5487] Kernel panic - not syncing: Fatal exception [ 101.782862][ T5487] Kernel Offset: disabled [ 101.787172][ T5487] Rebooting in 86400 seconds..