last executing test programs: 4.985408417s ago: executing program 1 (id=669): socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000fc0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)={0x3c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 4.608915676s ago: executing program 1 (id=671): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r4, r7, 0x0) 4.56279555s ago: executing program 1 (id=673): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0xe, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.588449841s ago: executing program 1 (id=687): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000e40)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="84", 0x1}, {&(0x7f0000000f40)="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", 0x584}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) 3.128190468s ago: executing program 0 (id=693): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffffff, 0x0, 0x1c5981, 0xed7b9be2a7a46e42) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@flushpolicy={0x38, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@address_filter={0x28, 0x1a, {@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x5, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x20040840) 3.058946145s ago: executing program 0 (id=695): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x4882, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES64], 0x25, 0x359, &(0x7f00000003c0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$unix(0x1, 0x3, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000dc0)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x9, 0x0, 0x8}}}}, 0x36) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x14) 2.962624355s ago: executing program 0 (id=698): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="0056ccb99fdbcc", 0x7, 0x4004000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000480), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.954167566s ago: executing program 0 (id=700): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0xe, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.598475983s ago: executing program 2 (id=705): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="8d79", 0x2, 0x4008004, 0x0, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) recvfrom(r1, &(0x7f0000000300)=""/102, 0xfffffffffffffe30, 0x736, 0x0, 0x0) 2.298701933s ago: executing program 2 (id=707): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffffff, 0x0, 0x1c5981, 0xed7b9be2a7a46e42) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@flushpolicy={0x38, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@address_filter={0x28, 0x1a, {@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x5, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x20040840) 2.297570314s ago: executing program 2 (id=717): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) landlock_restrict_self(r0, 0x0) 2.296940144s ago: executing program 3 (id=718): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000840)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000880)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x20, r5, 0x7, 0x3, 0x1fff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 1.224100274s ago: executing program 1 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) 1.223901904s ago: executing program 2 (id=709): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x2000000, &(0x7f0000000580)}) 1.223797744s ago: executing program 3 (id=710): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.219191114s ago: executing program 0 (id=720): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "9c"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) 1.147201562s ago: executing program 2 (id=714): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000001c0)={[{@rodir}, {@rodir}, {@fat=@flush}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@utf8}, {@fat=@errors_continue}, {@shortname_winnt}]}, 0xfc, 0x2b8, &(0x7f0000000240)="$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") 740.009134ms ago: executing program 1 (id=719): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x0, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0xb27, 0x4) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e23, @loopback}, 0x10) sendto(r1, &(0x7f0000000440)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000600)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb387", 0xa9, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000040), 0x80, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 707.708577ms ago: executing program 0 (id=722): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 702.812868ms ago: executing program 4 (id=723): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000000980)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004080}], 0x1, 0x40002) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b1, &(0x7f0000001d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x81) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x180) close_range(r0, 0xffffffffffffffff, 0x0) 669.135181ms ago: executing program 4 (id=724): r0 = gettid() timer_create(0xc, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x200408cc}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x29, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) 210.957778ms ago: executing program 2 (id=725): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x8, 0x181}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0xa) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 210.394469ms ago: executing program 3 (id=726): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000980)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56a, &(0x7f0000002c80)="$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") r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x9800, &(0x7f0000001dc0)={0xe, 0x1, 0x80000}, 0x20) 197.02608ms ago: executing program 4 (id=727): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0x10001, 0x5, 0x20, 0x0, 0x467, 0x9, 0x9, 0x80000001, 0x4, 0x8, 0x7, 0xfffff510, 0x80000001, 0x1, 0x3, 0xfffffffc, 0x7, 0x5, 0xff, 0x7, 0x5487, 0x6, 0x0, 0x4, 0x47e, 0xfffffffc, 0xffffffff, 0xfffffffb, 0x485, 0x3, 0x6b, 0x9a1c, 0x5, 0x4, 0x0, 0x2c2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0x7, 0x0, 0x0, 0xe65, 0x3ff, 0xc, 0x7, 0xf, 0x7, 0x1, 0x775a, 0x8, 0x0, 0x7fff, 0xfffffff7, 0x8000, 0xf79c, 0x5, 0x1ff, 0x1, 0x81, 0xce, 0x1, 0x7, 0x9, 0xc0000000, 0x10, 0x7, 0x6, 0xc, 0x5, 0x4, 0x333, 0x7, 0x4, 0x4, 0xbfb, 0x9, 0x9, 0x7fffffff, 0x0, 0x4, 0x9, 0x2, 0xfffffff7, 0x6, 0x3, 0x2, 0x904, 0x3, 0xa, 0x200, 0x8, 0x1959, 0x8, 0x2, 0x2, 0x6, 0x3, 0x10, 0x7, 0x574, 0x6, 0x6, 0x5f, 0x0, 0x0, 0x2, 0xc, 0x6, 0x800, 0x64af, 0x4, 0x3, 0x8, 0xc7, 0x0, 0x2, 0x7fff, 0x3, 0x9, 0x40, 0x7, 0x9, 0x8, 0x0, 0x4, 0x7, 0x10, 0x9, 0x8, 0x9, 0x1, 0x2, 0x9db, 0x0, 0x80000001, 0x1, 0xf4, 0x8001, 0x1, 0x1, 0xfffffff3, 0x7e3e55a6, 0x6, 0x7, 0x9, 0x4, 0x3, 0x4, 0x2, 0x4, 0xc63b, 0x9c8e, 0xfffffffd, 0x4, 0x0, 0xffff0000, 0x0, 0x0, 0x2, 0x7, 0xac2, 0x6, 0xde7, 0x78, 0x8, 0x3ff, 0x4, 0x0, 0x3, 0x2, 0x859, 0x800, 0xbde8, 0x5, 0xc00, 0x0, 0x2, 0x1c00, 0x3ff, 0xffff, 0x8, 0x4, 0x7, 0x8001, 0x9, 0x3, 0x6, 0x1, 0x7ff, 0x0, 0x9, 0x7, 0x8, 0x0, 0x4, 0x8, 0xfffffff8, 0x7, 0x4, 0x800, 0x7, 0x80000001, 0xc, 0x4, 0x9, 0x9980, 0x6, 0x7ff, 0x10000, 0x6, 0x250, 0x9, 0xfffffffb, 0x2, 0x7, 0x4, 0x6, 0xfff, 0x3, 0x2, 0x80000000, 0x1, 0x3, 0xc093, 0x3, 0x6, 0x51d, 0x0, 0x1, 0x8, 0x4, 0x8001, 0x3, 0x8e, 0x3053, 0xc0000, 0x1, 0x0, 0x9, 0x1600, 0x5, 0xf1, 0xf, 0x4, 0x401, 0x6, 0x0, 0x200, 0x0, 0x4, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffffff8, 0x1, 0x2, 0x5, 0x8, 0x1, 0x0, 0x1, 0x202ed62a, 0x10, 0x9, 0x9, 0x8, 0x9, 0x7, 0x71c, 0x101, 0xfffffff7, 0x0, 0xa5d, 0xffff8000, 0x7f, 0x477b, 0x3, 0x7, 0xb4d8, 0xa0, 0x7ff, 0xffffff7f, 0x22ab, 0x8, 0xd7, 0x3f, 0x3ff, 0x1, 0x2327, 0x80, 0x3, 0xfffffffc, 0x200, 0x8, 0x2, 0xde41, 0x8, 0xc28e, 0x10000, 0xff800000, 0x0, 0x5, 0x9, 0xfffffffc, 0x32b, 0x1, 0xe, 0x4, 0x9, 0x7f5, 0x1, 0x29f, 0x400, 0xffff, 0x6, 0xffffffff, 0x8a, 0x8, 0x7, 0x80000000, 0x0, 0x200, 0x3, 0x2, 0xfff, 0x5, 0x4b1, 0x4, 0x3, 0x1, 0x4, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xfffffffc, 0x10001, 0x1db, 0x40, 0x80000000, 0x9, 0x1, 0x0, 0x15de, 0x2, 0x0, 0x200, 0xd, 0x7, 0x3, 0xfffffff8, 0x1, 0x3, 0x2, 0x8, 0x8, 0xfff, 0x6, 0x7fff, 0x0, 0xffff, 0x3, 0x4, 0x683, 0x8, 0x7, 0x8001, 0x6, 0x7, 0x0, 0x7, 0xffff2294, 0xfffffffa, 0x3, 0xb4, 0x8, 0xfffffff3, 0x5, 0x7fff, 0x5, 0x8, 0x0, 0x3ff, 0x8, 0xc18, 0x6, 0x6, 0x22ca21da, 0xffff, 0xb, 0xa, 0x9f5, 0x1, 0x2, 0x0, 0x0, 0x6, 0x80000000, 0xfffffffd, 0x7, 0x81, 0x8d4a, 0x10000, 0x7f, 0xc5e, 0x1ff, 0x800, 0x5, 0x5, 0xb74, 0xa, 0x80e, 0x1, 0x0, 0x9, 0x2454f7e4, 0x4, 0x6, 0x0, 0x5, 0x4, 0x772, 0x10001, 0xff, 0x1, 0x6, 0x2, 0x7, 0xff, 0x401, 0x0, 0x6, 0x7fffffff, 0x40, 0x9, 0xda1, 0x2, 0x200, 0x8, 0x2948, 0xf5e, 0x36bcd671, 0xb07, 0x8, 0x0, 0x8, 0x9, 0xfffffffa, 0x6, 0x1, 0x1c00, 0x7f, 0x7f, 0x5, 0x6, 0xf01, 0x10001, 0x9, 0x0, 0x4, 0x401, 0x1000, 0x4, 0x1000, 0x9, 0x80000000, 0x3, 0xe, 0x80000001, 0x9, 0x7, 0x80000000, 0x8, 0x0, 0x0, 0x1, 0x8, 0x3ff, 0x4, 0x1ff, 0x3, 0xff, 0x4, 0x1, 0xffff, 0x5, 0x4, 0x3, 0x80000001, 0x6, 0x100, 0x0, 0x170, 0x6c00, 0x2, 0x7, 0x4, 0xf61a, 0x28000, 0xd, 0x1, 0x8, 0x1, 0x6, 0x6, 0x0, 0x79ca]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe71, 0x1, 0x0, 0x1, 0x1, {0xc, 0x2, 0x4, 0x9d, 0x400, 0x1e970d41}, {0xf, 0x2, 0x8, 0x5c7b, 0x80, 0x1}, 0x1, 0x3, 0x3}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 164.847403ms ago: executing program 4 (id=728): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xad, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r2, 0x0, 0x0) 127.205217ms ago: executing program 4 (id=729): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000b40)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000b80)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000bc0)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000cc0)=0x2f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000d00)=0xcf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000d40)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000d80)=0xc0) 126.441217ms ago: executing program 3 (id=730): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000280)}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000340)=[@enter_looper], 0x100, 0x0, &(0x7f0000000380)=@transaction={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x50, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)={@flat=@binder={0x73622a85, 0x0, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0x3}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r2}], 0x100, 0x0, &(0x7f0000000600)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740), 0x100, 0x0, &(0x7f0000000780)=@reply={0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x50, 0x0, &(0x7f00000008c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000940)={@flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}}, &(0x7f00000009c0)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r3}]}) 93.382111ms ago: executing program 3 (id=731): setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000740)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) shutdown(r0, 0x1) 46.771335ms ago: executing program 4 (id=732): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x48) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000580)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f00000006c0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000700)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 0s ago: executing program 3 (id=733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.934578][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.936289][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.938734][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.940573][ T270] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.941974][ T270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.952812][ T4331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.954987][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.958518][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.960373][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.962096][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.964700][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.966734][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.972136][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.974159][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.980465][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.994539][ T4343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.996710][ T4343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.002876][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.005090][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.006820][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.009005][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.011065][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.012785][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.014751][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.016432][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.019461][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.021012][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.023727][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.025602][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.035861][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.040880][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.042470][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.045860][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.055453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.057905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.076672][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.080248][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.087925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.089718][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.091565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.093173][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.098440][ T4329] device veth0_vlan entered promiscuous mode [ 33.101701][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.103323][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.107082][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.114950][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.116729][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.119434][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.121192][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.123800][ T4338] device veth0_vlan entered promiscuous mode [ 33.130470][ T4329] device veth1_vlan entered promiscuous mode [ 33.132507][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.134403][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.136414][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.146379][ T4343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.151668][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.153222][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.155997][ T4338] device veth1_vlan entered promiscuous mode [ 33.165701][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.167995][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.169805][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.171663][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.191814][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.193531][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.195341][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.197731][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.199887][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.202022][ T4330] device veth0_vlan entered promiscuous mode [ 33.208320][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.210391][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.214218][ T4329] device veth0_macvtap entered promiscuous mode [ 33.222668][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.224568][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.226212][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.229420][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.231259][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.236577][ T4331] device veth0_vlan entered promiscuous mode [ 33.244765][ T4330] device veth1_vlan entered promiscuous mode [ 33.248804][ T4329] device veth1_macvtap entered promiscuous mode [ 33.250741][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.252542][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.254693][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.256516][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.261250][ T4338] device veth0_macvtap entered promiscuous mode [ 33.265642][ T4331] device veth1_vlan entered promiscuous mode [ 33.272619][ T4338] device veth1_macvtap entered promiscuous mode [ 33.289746][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.291494][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.293291][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.294984][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.296761][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.299462][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.301410][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.304640][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.306199][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.308805][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.316157][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.318764][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.321449][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.323988][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.325467][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.330251][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.332151][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.334153][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.335876][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.338920][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.340833][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.342395][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.345326][ T4343] device veth0_vlan entered promiscuous mode [ 33.350346][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.352271][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.354021][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.355650][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.362019][ T4330] device veth0_macvtap entered promiscuous mode [ 33.366224][ T4331] device veth0_macvtap entered promiscuous mode [ 33.369816][ T4331] device veth1_macvtap entered promiscuous mode [ 33.371629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.373532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.375480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.378682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.380462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.382167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.384070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.385956][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.389783][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.392237][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.394647][ T4330] device veth1_macvtap entered promiscuous mode [ 33.401515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.403449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.405257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.409668][ T4338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.411330][ T4338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.413092][ T4338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.415020][ T4338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.429089][ T4343] device veth1_vlan entered promiscuous mode [ 33.439954][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.442153][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.444232][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.446445][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.449859][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.451471][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.453512][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.455426][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.461393][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.463359][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.465452][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.468744][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.471807][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.473638][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.475265][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.480308][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.482938][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.484877][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.492278][ T4343] device veth0_macvtap entered promiscuous mode [ 33.495021][ T4343] device veth1_macvtap entered promiscuous mode [ 33.501884][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.504142][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.505859][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.508480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.511441][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.513682][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.515709][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.518177][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.520525][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.530601][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.533007][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.535050][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.537800][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.539619][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.541727][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.544386][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.545998][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.548145][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.550036][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.551988][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.556574][ T4330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.563980][ T4330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.565852][ T4330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.568558][ T4330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.572211][ T4331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.573994][ T4331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.575882][ T4331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.581209][ T4331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.611212][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.613315][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.615422][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.620294][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.622200][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.624268][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.626252][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.628455][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.631307][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.642187][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.644014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.657848][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.660029][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.661991][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.664081][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.666124][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.669650][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.671346][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.673313][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.675731][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.685271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.687558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.692404][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.693996][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.698555][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.700538][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.702074][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.703769][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.713276][ T4343] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.714748][ T4343] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.716378][ T4343] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.721836][ T4343] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.751364][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.752949][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.754547][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.756128][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.760767][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.762076][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.766446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.766526][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.770400][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.772869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.774627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.776319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.820810][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.821516][ T270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.822356][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.822514][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.823936][ T270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.837421][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.838935][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.852436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.854159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.894428][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.895969][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.898682][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.973888][ T4438] ======================================================= [ 33.973888][ T4438] WARNING: The mand mount option has been deprecated and [ 33.973888][ T4438] and is ignored by this kernel. Remove the mand [ 33.973888][ T4438] option from the mount to silence this warning. [ 33.973888][ T4438] ======================================================= [ 33.999486][ T4434] loop0: detected capacity change from 0 to 8192 [ 34.014639][ T4434] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 34.017601][ T4434] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 34.019748][ T4434] REISERFS (device loop0): using ordered data mode [ 34.020890][ T4434] reiserfs: using flush barriers [ 34.030486][ T4434] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 34.033392][ T4434] REISERFS (device loop0): checking transaction log (loop0) [ 34.045852][ T4434] REISERFS (device loop0): Using r5 hash to sort names [ 34.047937][ T4434] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 34.051144][ T4432] loop1: detected capacity change from 0 to 32768 [ 34.054728][ T4432] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4432) [ 34.066611][ T4432] BTRFS info (device loop1): first mount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 34.070386][ T4432] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 34.072360][ T4432] BTRFS info (device loop1): using free space tree [ 34.172403][ T4448] device syzkaller0 entered promiscuous mode [ 34.195470][ T4434] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2381, free_space(entry_count) 2 [ 34.219314][ T4434] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 556. Fsck? [ 34.221333][ T4434] REISERFS (device loop0): Remounting filesystem read-only [ 34.222856][ T4434] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 34.239120][ T4434] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2381, free_space(entry_count) 2 [ 34.246454][ T4434] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 556. Fsck? [ 34.247008][ T4340] Bluetooth: hci1: command 0x041b tx timeout [ 34.249220][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 34.255002][ T4434] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 2381, free_space(entry_count) 2 [ 34.261558][ T4434] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 556. Fsck? [ 34.263520][ T4434] REISERFS error (device loop0): clm-6001 reiserfs_truncate_file: grab_tail_page failed -5 [ 34.314715][ T4472] binder: 4470:4472 tried to acquire reference to desc 0, got 1 instead [ 34.316620][ T4432] BTRFS info (device loop1): enabling ssd optimizations [ 34.319003][ T4472] binder: 4470:4472 got transaction with invalid offset (64, min 64 max 88) or object. [ 34.323576][ T4472] binder: 4470:4472 transaction call to 4470:0 failed 5/29201/-22, size 88-24 line 3363 [ 34.327031][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 34.328144][ T4340] Bluetooth: hci3: command 0x041b tx timeout [ 34.329795][ T4398] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.411875][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 34.480973][ T4329] BTRFS info (device loop1): last unmount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 34.570399][ T4494] using random self ethernet address [ 34.574278][ T4494] using random host ethernet address [ 34.580291][ T4494] Need at least one configuration in g1. [ 34.581498][ T4494] udc dummy_udc.0: failed to start g1: -22 [ 34.591992][ T4494] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 34.596268][ T4494] UDC core: g1: couldn't find an available UDC or it's busy [ 34.657805][ T4487] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.915084][ T4503] loop4: detected capacity change from 0 to 32768 [ 34.931830][ T4503] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.21 (4503) [ 34.945418][ T4503] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 34.960447][ T4503] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 34.971395][ T4503] BTRFS info (device loop4): setting nodatacow, compression disabled [ 34.973055][ T4503] BTRFS info (device loop4): enabling auto defrag [ 34.974405][ T4503] BTRFS info (device loop4): max_inline at 0 [ 34.975617][ T4503] BTRFS info (device loop4): using free space tree [ 35.068607][ T4531] process 'syz.2.24' launched './file0' with NULL argv: empty string added [ 35.115759][ T4343] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 35.150466][ T4521] netlink: 36 bytes leftover after parsing attributes in process `syz.1.25'. [ 36.114753][ T4549] loop4: detected capacity change from 0 to 8192 [ 36.156672][ T4549] loop4: p1 p2 p4 [ 36.158104][ T4549] loop4: partition table partially beyond EOD, truncated [ 36.159985][ T4549] loop4: p1 start 838860800 is beyond EOD, truncated [ 36.161429][ T4549] loop4: p2 start 50331648 is beyond EOD, truncated [ 36.162860][ T4549] loop4: p4 start 4278190080 is beyond EOD, truncated [ 36.204084][ T4552] TC_ACT_REPEAT abuse ? [ 36.337350][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 36.366005][ T4565] Zero length message leads to an empty skb [ 36.478799][ T4572] FAULT_INJECTION: forcing a failure. [ 36.478799][ T4572] name failslab, interval 1, probability 0, space 0, times 1 [ 36.481349][ T4572] CPU: 1 PID: 4572 Comm: syz.3.43 Not tainted syzkaller #0 [ 36.482686][ T4572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.484395][ T4572] Call trace: [ 36.485018][ T4572] dump_backtrace+0x1c4/0x1f0 [ 36.486049][ T4572] show_stack+0x2c/0x3c [ 36.486934][ T4572] __dump_stack+0x30/0x40 [ 36.487797][ T4572] dump_stack_lvl+0xf4/0x15c [ 36.488770][ T4572] dump_stack+0x1c/0x5c [ 36.489747][ T4572] should_fail_ex+0x3cc/0x524 [ 36.490849][ T4572] __should_failslab+0xc0/0x11c [ 36.492003][ T4572] should_failslab+0x10/0x28 [ 36.493081][ T4572] kmem_cache_alloc+0x88/0x310 [ 36.494154][ T4572] __kernfs_new_node+0xec/0x5fc [ 36.495271][ T4572] kernfs_new_node+0x120/0x230 [ 36.496375][ T4572] __kernfs_create_file+0x60/0x2e0 [ 36.497590][ T4572] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 36.498812][ T4572] internal_create_group+0x3e8/0xb24 [ 36.500010][ T4572] sysfs_create_group+0x2c/0x3c [ 36.501107][ T4572] sysfs_slab_add+0x160/0x298 [ 36.502160][ T4572] __kmem_cache_create+0x628/0x72c [ 36.503159][ T4572] kmem_cache_create_usercopy+0x184/0x2fc [ 36.504335][ T4572] kmem_cache_create+0x1c/0x28 [ 36.505291][ T4572] bioset_init+0x2c0/0x5c0 [ 36.506203][ T4572] dm_table_complete+0x1860/0x1e40 [ 36.507141][ T4572] table_load+0x2f4/0x690 [ 36.508017][ T4572] dm_ctl_ioctl+0xaac/0xf1c [ 36.508938][ T4572] __arm64_sys_ioctl+0x14c/0x1c8 [ 36.509955][ T4572] invoke_syscall+0x98/0x290 [ 36.510963][ T4572] el0_svc_common+0x13c/0x258 [ 36.512023][ T4572] do_el0_svc+0x5c/0x134 [ 36.512997][ T4572] el0_svc+0x58/0x12c [ 36.513929][ T4572] el0t_64_sync_handler+0x84/0xf0 [ 36.515093][ T4572] el0t_64_sync+0x18c/0x190 [ 36.517394][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 36.519295][ T4572] kmem_cache_create_usercopy(bio-408) failed with error -12 [ 36.520776][ T4572] CPU: 1 PID: 4572 Comm: syz.3.43 Not tainted syzkaller #0 [ 36.522181][ T4572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.524385][ T4572] Call trace: [ 36.525118][ T4572] dump_backtrace+0x1c4/0x1f0 [ 36.526179][ T4572] show_stack+0x2c/0x3c [ 36.527089][ T4572] __dump_stack+0x30/0x40 [ 36.528071][ T4572] dump_stack_lvl+0xf4/0x15c [ 36.529147][ T4572] dump_stack+0x1c/0x5c [ 36.530085][ T4572] kmem_cache_create_usercopy+0x24c/0x2fc [ 36.531416][ T4572] kmem_cache_create+0x1c/0x28 [ 36.532505][ T4572] bioset_init+0x2c0/0x5c0 [ 36.533526][ T4572] dm_table_complete+0x1860/0x1e40 [ 36.534693][ T4572] table_load+0x2f4/0x690 [ 36.535578][ T4572] dm_ctl_ioctl+0xaac/0xf1c [ 36.536467][ T4572] __arm64_sys_ioctl+0x14c/0x1c8 [ 36.537418][ T4572] invoke_syscall+0x98/0x290 [ 36.538338][ T4572] el0_svc_common+0x13c/0x258 [ 36.539405][ T4572] do_el0_svc+0x5c/0x134 [ 36.540243][ T4572] el0_svc+0x58/0x12c [ 36.541143][ T4572] el0t_64_sync_handler+0x84/0xf0 [ 36.542234][ T4572] el0t_64_sync+0x18c/0x190 [ 36.543782][ T4572] device-mapper: table: unable to allocate mempools [ 37.005952][ T4597] device syzkaller0 entered promiscuous mode [ 37.811727][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.813548][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.815318][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.817953][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.821596][ T4603] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 37.823946][ T4603] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 37.827340][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.829246][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.011215][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.023696][ T4604] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.024732][ T4618] syz.3.59 uses obsolete (PF_INET,SOCK_PACKET) [ 38.119029][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.160376][ T4620] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 38.163201][ T4620] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 38.256532][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.265961][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.268391][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.270490][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.272345][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 38.274016][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.278988][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.298269][ T4626] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.379796][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.385396][ T4604] chnl_net:caif_netlink_parms(): no params data found [ 38.407897][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 38.416450][ T4604] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.418610][ T4604] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.420878][ T4604] device bridge_slave_0 entered promiscuous mode [ 38.424973][ T4604] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.426557][ T4604] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.428693][ T4604] device bridge_slave_1 entered promiscuous mode [ 38.441923][ T4604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.445077][ T4604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.452983][ T4604] team0: Port device team_slave_0 added [ 38.455056][ T4604] team0: Port device team_slave_1 added [ 38.460711][ T4604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.462081][ T4604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.467689][ T4604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.471127][ T4604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.472518][ T4604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.479005][ T4604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.483065][ T4626] chnl_net:caif_netlink_parms(): no params data found [ 38.558181][ T4604] device hsr_slave_0 entered promiscuous mode [ 38.567348][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 38.597202][ T4604] device hsr_slave_1 entered promiscuous mode [ 38.656978][ T4604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.659179][ T4604] Cannot create hsr debugfs directory [ 38.669131][ T4626] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.670818][ T4626] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.672580][ T4626] device bridge_slave_0 entered promiscuous mode [ 38.684807][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.686433][ T4626] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.688638][ T4626] device bridge_slave_1 entered promiscuous mode [ 38.772330][ T4626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.781429][ T4626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.784831][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.787763][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.789952][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.791972][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.793728][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 38.795527][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.812380][ T4626] team0: Port device team_slave_0 added [ 38.833150][ T4626] team0: Port device team_slave_1 added [ 39.013736][ T4646] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.022427][ T4626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.023857][ T4626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.031497][ T4626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.036142][ T4626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.041396][ T4626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.046235][ T4626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.178959][ T4626] device hsr_slave_0 entered promiscuous mode [ 39.227236][ T4626] device hsr_slave_1 entered promiscuous mode [ 39.237481][ T4626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.238929][ T4626] Cannot create hsr debugfs directory [ 39.384827][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 39.389759][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 39.393227][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 39.510568][ T4688] bridge0: port 3(syz_tun) entered blocking state [ 39.512024][ T4688] bridge0: port 3(syz_tun) entered disabled state [ 39.514813][ T4688] device syz_tun entered promiscuous mode [ 39.516266][ T4688] bridge0: port 3(syz_tun) entered blocking state [ 39.517626][ T4688] bridge0: port 3(syz_tun) entered listening state [ 39.588938][ T4694] netlink: 'syz.4.72': attribute type 4 has an invalid length. [ 39.655926][ T4692] device syzkaller0 entered promiscuous mode [ 39.659597][ T4646] chnl_net:caif_netlink_parms(): no params data found [ 39.704754][ T4705] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 39.706271][ T4705] overlayfs: failed to set xattr on upper [ 39.712675][ T4705] overlayfs: ...falling back to index=off,metacopy=off. [ 39.850190][ T4340] Bluetooth: hci0: command 0x0409 tx timeout [ 40.131380][ T4728] loop4: detected capacity change from 0 to 8 [ 40.218367][ T4728] SQUASHFS error: xz decompression failed, data probably corrupt [ 40.219963][ T4728] SQUASHFS error: Failed to read block 0x108: -5 [ 40.221305][ T4728] SQUASHFS error: Unable to read metadata cache entry [106] [ 40.222873][ T4728] SQUASHFS error: Unable to read inode 0x11f [ 40.363286][ T4336] Bluetooth: hci1: command 0x0409 tx timeout [ 40.886958][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 41.936942][ T4340] Bluetooth: hci0: command 0x041b tx timeout [ 42.406929][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 42.739443][ T4759] FAULT_INJECTION: forcing a failure. [ 42.739443][ T4759] name failslab, interval 1, probability 0, space 0, times 0 [ 42.743253][ T4759] CPU: 1 PID: 4759 Comm: syz.4.82 Not tainted syzkaller #0 [ 42.744539][ T4759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.746448][ T4759] Call trace: [ 42.747114][ T4759] dump_backtrace+0x1c4/0x1f0 [ 42.748097][ T4759] show_stack+0x2c/0x3c [ 42.749025][ T4759] __dump_stack+0x30/0x40 [ 42.750015][ T4759] dump_stack_lvl+0xf4/0x15c [ 42.751010][ T4759] dump_stack+0x1c/0x5c [ 42.751919][ T4759] should_fail_ex+0x3cc/0x524 [ 42.752982][ T4759] __should_failslab+0xc0/0x11c [ 42.754071][ T4759] should_failslab+0x10/0x28 [ 42.755108][ T4759] kmem_cache_alloc_node+0x8c/0x344 [ 42.756270][ T4759] __alloc_skb+0x128/0x728 [ 42.757259][ T4759] __ip_append_data+0x1da4/0x2d94 [ 42.758374][ T4759] ip_make_skb+0x208/0x3a0 [ 42.759403][ T4759] udp_sendmsg+0x1458/0x1db0 [ 42.760365][ T4759] udpv6_sendmsg+0x8dc/0x20d0 [ 42.761397][ T4759] inet6_sendmsg+0xb4/0xd8 [ 42.762341][ T4759] sock_write_iter+0x268/0x368 [ 42.763387][ T4759] vfs_write+0x3c8/0x7c8 [ 42.764212][ T4759] ksys_write+0x12c/0x228 [ 42.765182][ T4759] __arm64_sys_write+0x7c/0x90 [ 42.766117][ T4759] invoke_syscall+0x98/0x290 [ 42.767000][ T4759] el0_svc_common+0x13c/0x258 [ 42.767907][ T4759] do_el0_svc+0x5c/0x134 [ 42.768807][ T4759] el0_svc+0x58/0x12c [ 42.769687][ T4759] el0t_64_sync_handler+0x84/0xf0 [ 42.770749][ T4759] el0t_64_sync+0x18c/0x190 [ 42.808025][ T4803] loop4: detected capacity change from 0 to 256 [ 42.812094][ T4803] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.966929][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 43.150820][ T4819] binder: 4818:4819 tried to acquire reference to desc 0, got 1 instead [ 43.152999][ T4819] binder: cannot allocate buffer [ 43.153018][ T4819] binder: 4818:4819 transaction async to 4818:0 failed 11/29201/-22, size 104--6 line 3247 [ 43.156504][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 43.212977][ T4823] ip_tables: iptables: counters copy to user failed while replacing table [ 43.234732][ T4825] capability: warning: `syz.4.89' uses deprecated v2 capabilities in a way that may be insecure [ 44.008710][ T4340] Bluetooth: hci0: command 0x040f tx timeout [ 44.496939][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 45.046977][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 46.087597][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 46.568330][ T4340] Bluetooth: hci1: command 0x0419 tx timeout [ 47.126999][ T4340] Bluetooth: hci3: command 0x0419 tx timeout [ 50.546056][ T4626] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.553016][ T4646] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.555440][ T4646] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.557715][ T4646] device bridge_slave_0 entered promiscuous mode [ 50.578268][ T4841] binder: 4840:4841 ioctl c0306201 20000080 returned -14 [ 50.583888][ T4841] binder: 4840:4841 tried to acquire reference to desc 0, got 1 instead [ 50.585454][ T4841] binder: 4840:4841 ioctl c0306201 200003c0 returned -14 [ 50.591814][ T4841] binder: 4840:4841 not enough space to store 12 fds in buffer [ 50.593700][ T4841] binder: 4841:4840 translate fd array failed [ 50.594979][ T4841] binder: 4840:4841 transaction call to 4840:0 failed 16/29201/-22, size 112-24 line 3503 [ 50.599902][ T4646] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.601381][ T4646] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.603292][ T4646] device bridge_slave_1 entered promiscuous mode [ 50.611750][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.659280][ T4626] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.945509][ T4646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.993389][ T4626] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.998907][ T4860] bridge0: port 3(syz_tun) entered disabled state [ 51.039027][ T4860] device syz_tun left promiscuous mode [ 51.040924][ T4860] bridge0: port 3(syz_tun) entered disabled state [ 51.092939][ T4646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.168119][ T4626] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.228740][ T14] rxe_eth0 speed is unknown, defaulting to 1000 [ 51.501575][ T4646] team0: Port device team_slave_0 added [ 51.506402][ T4646] team0: Port device team_slave_1 added [ 51.521719][ T4646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.523108][ T4646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.538138][ T4646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.591670][ T4646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.593146][ T4646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.606941][ T4646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.648392][ T4646] device hsr_slave_0 entered promiscuous mode [ 51.689353][ T4912] loop3: detected capacity change from 0 to 128 [ 51.697700][ T4646] device hsr_slave_1 entered promiscuous mode [ 51.703688][ T4912] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.727197][ T4646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.728592][ T4646] Cannot create hsr debugfs directory [ 51.732750][ T39] device hsr_slave_0 left promiscuous mode [ 51.779537][ T39] device hsr_slave_1 left promiscuous mode [ 51.838650][ T4893] loop4: detected capacity change from 0 to 131072 [ 51.866680][ T4893] F2FS-fs (loop4): Test dummy encryption mode enabled [ 51.870204][ T4893] F2FS-fs (loop4): invalid crc value [ 51.873876][ T4893] F2FS-fs (loop4): Found nat_bits in checkpoint [ 51.877249][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.878863][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.889170][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.890626][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.894937][ T4893] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 51.895129][ T39] device bridge_slave_1 left promiscuous mode [ 51.907835][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.929423][ T4338] EXT4-fs (loop3): unmounting filesystem. [ 51.957889][ T39] device bridge_slave_0 left promiscuous mode [ 51.959199][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.077244][ T39] device veth1_macvtap left promiscuous mode [ 52.078876][ T39] device veth0_macvtap left promiscuous mode [ 52.080750][ T39] device veth1_vlan left promiscuous mode [ 52.082042][ T39] device veth0_vlan left promiscuous mode [ 52.108502][ T4893] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 54.222026][ T39] team0 (unregistering): Port device team_slave_1 removed [ 54.398073][ T39] team0 (unregistering): Port device team_slave_0 removed [ 54.557569][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.757380][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.268688][ T39] bond0 (unregistering): Released all slaves [ 56.554355][ T4604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.621597][ T4604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.658334][ T4604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.698566][ T4604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.762731][ T4626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.790771][ T4957] mmap: syz.4.109 (4957) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.976666][ T4967] loop0: detected capacity change from 0 to 3904 [ 57.159091][ T4646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.163486][ T4626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.182511][ T4626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.189938][ T4968] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 57.191936][ T4968] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 57.193672][ T4968] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 57.195216][ T4968] loop0: [ 57.309258][ T4646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.325262][ T4626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.468242][ T4646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.471770][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 57.602406][ T4646] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.615635][ T4626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.625036][ T4604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.631294][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.633252][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.636508][ T4626] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.644570][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.646584][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.650493][ T4604] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.653968][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.655882][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.658260][ T4800] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.659691][ T4800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.661452][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.664961][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.667204][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.669005][ T4755] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.670481][ T4755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.673428][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.677996][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.679731][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.681742][ T4775] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.683211][ T4775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.684465][ T4990] block device autoloading is deprecated and will be removed. [ 57.685887][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.695315][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.699129][ T4775] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.700796][ T4775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.207246][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.209392][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.211385][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.213367][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.215678][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.220522][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.222515][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.225100][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.226766][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.233839][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.236033][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.238280][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.240106][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.241959][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.258914][ T4993] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 58.261743][ T4994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.273988][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.276772][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.280069][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.284481][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.295887][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.302733][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.308755][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.327459][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.329538][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.346195][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.363775][ T4646] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.496365][ T5008] loop3: detected capacity change from 0 to 256 [ 58.752197][ T4646] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.794259][ T4646] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.923190][ T4626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.925433][ T4604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.928155][ T4646] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.960739][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.962386][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.963860][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.965313][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.072110][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.074140][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.090642][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.092778][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.182368][ T4604] device veth0_vlan entered promiscuous mode [ 59.184448][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.187131][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.191181][ T4626] device veth0_vlan entered promiscuous mode [ 59.194929][ T4626] device veth1_vlan entered promiscuous mode [ 59.196589][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.199673][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.201454][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.203363][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.205278][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.213819][ T4604] device veth1_vlan entered promiscuous mode [ 59.216390][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.219653][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.221517][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.390147][ T5017] loop3: detected capacity change from 0 to 128 [ 59.393378][ T5017] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.396530][ T5017] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.415984][ T4646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.451847][ T4756] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.456282][ T5017] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.484102][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.485943][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.488000][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.490173][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.497053][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.499643][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.503912][ T4626] device veth0_macvtap entered promiscuous mode [ 59.506692][ T4604] device veth0_macvtap entered promiscuous mode [ 59.514222][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.515931][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.519471][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.521196][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.525214][ T4646] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.613424][ T4604] device veth1_macvtap entered promiscuous mode [ 59.616303][ T4626] device veth1_macvtap entered promiscuous mode [ 59.620112][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.622068][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.623865][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.625896][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.628161][ T4800] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.629753][ T4800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.038969][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.040931][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.042859][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.044705][ T4800] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.046170][ T4800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.055276][ T4604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.057260][ T4604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.059138][ T4604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.061161][ T4604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.063026][ T4604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.065158][ T4604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.067265][ T4604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.069278][ T4604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.072375][ T4604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.081540][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.083529][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.085323][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.087940][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.091604][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.093549][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.095499][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.098609][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.100476][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.102574][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.104603][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.106631][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.109281][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.111346][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.113971][ T4626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.224222][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.226342][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.228447][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.230737][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.232896][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.238781][ T4604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.241197][ T4604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.243216][ T4604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.245393][ T4604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.248111][ T4604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.250246][ T4604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.252425][ T4604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.254534][ T4604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.257671][ T4604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.262253][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.264376][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.266514][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.269308][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.271273][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.273446][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.275477][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.277734][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.279588][ T4626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.281707][ T4626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.284323][ T4626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.285825][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.289254][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.291432][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.293565][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.295662][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.297882][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.299857][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.302013][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.411478][ T4604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.413547][ T4604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.415303][ T4604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.418674][ T4604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.435079][ T4626] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.436743][ T4626] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.439218][ T4626] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.441081][ T4626] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.451915][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.453706][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.476505][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.523244][ T5035] fuse: Bad value for 'fd' [ 60.797495][ T4755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.799273][ T4755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.800917][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.829206][ T5044] fuse: Bad value for 'fd' [ 60.867543][ T4755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.867894][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.869064][ T4755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.870641][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.873755][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.883189][ T4780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.884800][ T4780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.892028][ T4646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.896171][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.910775][ T4775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.912357][ T4775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.169857][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.192309][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.194481][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.260084][ T4646] device veth0_vlan entered promiscuous mode [ 61.263385][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.265804][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.270746][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.275719][ T5057] device bridge_slave_0 left promiscuous mode [ 61.283522][ T5057] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.329972][ T5057] device bridge_slave_1 left promiscuous mode [ 61.331290][ T5057] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.374038][ T5055] Injecting memory failure for pfn 0x141801 at process virtual address 0x20001000 [ 61.376669][ T5055] Memory failure: 0x141801: recovery action for unsplit thp: Ignored [ 61.380216][ T5057] bond0: (slave bond_slave_0): Releasing backup interface [ 61.421650][ T5057] bond0: (slave bond_slave_1): Releasing backup interface [ 61.467400][ T5066] binder: 5065:5066 tried to acquire reference to desc 0, got 1 instead [ 61.470184][ T5057] team0: Port device team_slave_0 removed [ 61.471667][ T5066] binder: tried to use weak ref as strong ref [ 61.473905][ T5066] binder: 5065:5066 got transaction with invalid handle, 0 [ 61.476224][ T5066] binder: 5066:5065 translate handle failed [ 61.480987][ T5066] binder: 5065:5066 transaction call to 5065:0 failed 21/29201/-22, size 88-24 line 3410 [ 61.481361][ T5057] team0: Port device team_slave_1 removed [ 61.483960][ T3779] binder: undelivered TRANSACTION_ERROR: 29201 [ 61.484603][ T5057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.487638][ T5057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.490078][ T5057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.491934][ T5057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.500241][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.502327][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.514000][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.521641][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.528800][ T4646] device veth1_vlan entered promiscuous mode [ 61.685104][ T5071] fuse: Bad value for 'fd' [ 61.688962][ T4397] kernel write not supported for file /newroot/61/file0 (pid: 4397 comm: kworker/1:5) [ 61.840026][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 61.863142][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.865788][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.868157][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.870198][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.873406][ T4646] device veth0_macvtap entered promiscuous mode [ 61.876163][ T4646] device veth1_macvtap entered promiscuous mode [ 61.907110][ T5076] binder: 5074:5076 tried to acquire reference to desc 0, got 1 instead [ 61.909392][ T5076] binder: 5074:5076 got transaction with out-of-order buffer fixup [ 61.910894][ T5076] binder: 5076:5074 failed to fixup parent [ 61.912115][ T5076] binder: 5074:5076 transaction call to 5074:0 failed 26/29201/-22, size 104-24 line 3557 [ 61.914802][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 61.924297][ T4646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.926357][ T4646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.935377][ T4646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.943457][ T4646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.945173][ T4646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.948714][ T4646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.950609][ T4646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.952492][ T4646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.954365][ T4646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.956363][ T4646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.964062][ T4646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.967702][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.969423][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.971155][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.972996][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.978880][ T5079] ip_tables: iptables: counters copy to user failed while replacing table [ 62.184317][ T4646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.186326][ T4646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.188782][ T4646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.191006][ T4646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.192930][ T4646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.195082][ T4646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.197123][ T4646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.199174][ T4646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.201229][ T4646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.203320][ T4646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.206181][ T4646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.207912][ T5079] tipc: Started in network mode [ 62.208951][ T5079] tipc: Node identity ac1414aa, cluster identity 4711 [ 62.210455][ T5079] tipc: New replicast peer: 172.20.20.187 [ 62.213092][ T5079] tipc: Enabled bearer , priority 10 [ 62.216255][ T5082] device syzkaller1 entered promiscuous mode [ 62.219549][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.225302][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.281321][ T4646] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.282852][ T4646] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.284568][ T4646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.286417][ T4646] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.409999][ T4800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.411792][ T4800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.415354][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.440888][ T4756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.442295][ T4756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.443916][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.465294][ T39] device hsr_slave_0 left promiscuous mode [ 62.495484][ T39] device hsr_slave_1 left promiscuous mode [ 62.577006][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.578432][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.580383][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.581733][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.583295][ T39] device bridge_slave_1 left promiscuous mode [ 62.584902][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.607825][ T39] device bridge_slave_0 left promiscuous mode [ 62.609132][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.651783][ T39] device hsr_slave_0 left promiscuous mode [ 62.687130][ T39] device hsr_slave_1 left promiscuous mode [ 62.706771][ T5112] FAULT_INJECTION: forcing a failure. [ 62.706771][ T5112] name failslab, interval 1, probability 0, space 0, times 0 [ 62.712920][ T5112] CPU: 1 PID: 5112 Comm: syz.4.153 Not tainted syzkaller #0 [ 62.714429][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 62.716470][ T5112] Call trace: [ 62.717236][ T5112] dump_backtrace+0x1c4/0x1f0 [ 62.718331][ T5112] show_stack+0x2c/0x3c [ 62.719272][ T5112] __dump_stack+0x30/0x40 [ 62.720291][ T5112] dump_stack_lvl+0xf4/0x15c [ 62.721363][ T5112] dump_stack+0x1c/0x5c [ 62.722310][ T5112] should_fail_ex+0x3cc/0x524 [ 62.723392][ T5112] __should_failslab+0xc0/0x11c [ 62.724457][ T5112] should_failslab+0x10/0x28 [ 62.725346][ T5112] __kmem_cache_alloc_node+0x7c/0x318 [ 62.726436][ T5112] __kmalloc_node_track_caller+0xb8/0x174 [ 62.727708][ T5112] kmemdup+0x5c/0x98 [ 62.728637][ T5112] key_alloc+0x2b0/0xdec [ 62.729614][ T5112] keyring_alloc+0x68/0xe0 [ 62.730605][ T5112] look_up_user_keyrings+0x2a8/0x550 [ 62.731818][ T5112] lookup_user_key+0x614/0xf94 [ 62.732929][ T5112] __arm64_sys_add_key+0x3d4/0x520 [ 62.734048][ T5112] invoke_syscall+0x98/0x290 [ 62.734935][ T5112] el0_svc_common+0x13c/0x258 [ 62.735935][ T5112] do_el0_svc+0x5c/0x134 [ 62.736810][ T5112] el0_svc+0x58/0x12c [ 62.737679][ T5112] el0t_64_sync_handler+0x84/0xf0 [ 62.738707][ T5112] el0t_64_sync+0x18c/0x190 [ 62.764119][ T5115] loop4: detected capacity change from 0 to 512 [ 62.772127][ T5115] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 62.773772][ T5115] System zones: 1-12 [ 62.777671][ T5115] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.154: missing EA_INODE flag [ 62.784754][ T5115] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.154: error while reading EA inode 12 err=-117 [ 62.789136][ T5115] EXT4-fs (loop4): 1 orphan inode deleted [ 62.790268][ T5115] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 62.797134][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.798627][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.801751][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.803238][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.806665][ T39] device bridge_slave_1 left promiscuous mode [ 62.813986][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.851726][ T5119] binder: 5118:5119 tried to acquire reference to desc 0, got 1 instead [ 62.858387][ T39] device bridge_slave_0 left promiscuous mode [ 62.859796][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.860853][ T5119] binder: 5118:5119 got transaction with invalid parent offset or type [ 62.862890][ T5119] binder: 5119:5118 failed to fixup parent [ 62.864191][ T5119] binder: 5118:5119 transaction call to 5118:0 failed 33/29201/-22, size 104-24 line 3557 [ 62.869148][ T4396] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.884687][ T4343] EXT4-fs (loop4): unmounting filesystem. [ 62.967143][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000bdd2ad8a: rx timeout, send abort [ 62.970108][ C0] vxcan1: j1939_xtp_rx_abort_one: 0x00000000bdd2ad8a: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 62.973137][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000e2f93a9b: rx timeout, send abort [ 62.977132][ T39] device veth1_macvtap left promiscuous mode [ 62.978492][ T39] device veth0_macvtap left promiscuous mode [ 62.978731][ C0] vxcan1: j1939_xtp_rx_abort_one: 0x00000000e2f93a9b: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 62.979832][ T39] device veth1_vlan left promiscuous mode [ 62.995929][ T39] device veth0_vlan left promiscuous mode [ 63.023687][ T5128] ip_tables: iptables: counters copy to user failed while replacing table [ 63.087093][ T39] device veth1_macvtap left promiscuous mode [ 63.088379][ T39] device veth0_macvtap left promiscuous mode [ 63.089780][ T39] device veth1_vlan left promiscuous mode [ 63.090907][ T39] device veth0_vlan left promiscuous mode [ 63.453547][ T5145] fuse: Bad value for 'fd' [ 63.832907][ T5158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.838378][ T5158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.843094][ T5158] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 63.851737][ T5158] xt_hashlimit: size too large, truncated to 1048576 [ 64.489048][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.490402][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.231556][ T39] team0 (unregistering): Port device team_slave_1 removed [ 65.428878][ T39] team0 (unregistering): Port device team_slave_0 removed [ 65.514460][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.174'. [ 65.608185][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.808506][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.298012][ T39] bond0 (unregistering): Released all slaves [ 69.569334][ T39] team0 (unregistering): Port device team_slave_1 removed [ 69.618400][ T24] cfg80211: failed to load regulatory.db [ 69.759489][ T39] team0 (unregistering): Port device team_slave_0 removed [ 69.937573][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.138038][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.638024][ T39] bond0 (unregistering): Released all slaves [ 71.911086][ T3779] tipc: Node number set to 2886997162 [ 71.921893][ T5173] netlink: 'syz.0.175': attribute type 10 has an invalid length. [ 71.924002][ T5173] device syz_tun entered promiscuous mode [ 71.931348][ T5173] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 71.933028][ T5174] netlink: 'syz.4.174': attribute type 10 has an invalid length. [ 72.022072][ T5174] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 72.030694][ T4775] bond0: (slave bond_slave_0): interface is now down [ 72.032069][ T4775] bond0: (slave bond_slave_1): interface is now down [ 72.033383][ T4775] bond0: (slave syz_tun): interface is now down [ 72.047673][ T4800] bond0: (slave bond_slave_0): interface is now down [ 72.053544][ T4800] bond0: (slave bond_slave_1): interface is now down [ 72.054721][ T4800] bond0: (slave syz_tun): interface is now down [ 72.064615][ T4800] bond0: now running without any active interface! [ 72.084499][ T5191] binder: 5187:5191 tried to acquire reference to desc 0, got 1 instead [ 72.086688][ T5191] binder: 5187:5191 got transaction with out-of-order buffer fixup [ 72.090005][ T5191] binder: 5191:5187 failed to fixup parent [ 72.091265][ T5191] binder: 5187:5191 transaction call to 5187:0 failed 40/29201/-22, size 120-24 line 3557 [ 72.094067][ T3779] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.118315][ T5193] Illegal XDP return value 4026048808 on prog (id 19) dev N/A, expect packet loss! [ 72.162680][ T5196] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 72.193133][ T5203] binder: 5202:5203 tried to acquire reference to desc 0, got 1 instead [ 72.193890][ T5201] IPVS: nq: FWM 3 0x00000003 - no destination available [ 72.194739][ T5203] binder: 5202:5203 got transaction with invalid parent offset or type [ 72.196266][ C1] IPVS: nq: FWM 3 0x00000003 - no destination available [ 72.217654][ T5203] binder: 5202:5203 transaction async to 5202:0 failed 45/29201/-22, size 96-24 line 3456 [ 72.222267][ T5199] netlink: 'syz.1.183': attribute type 10 has an invalid length. [ 72.241468][ T4396] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.251464][ T5199] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 72.516805][ T5228] loop0: detected capacity change from 0 to 1024 [ 72.606019][ T5228] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.653236][ T5228] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.195: lblock 0 mapped to illegal pblock 0 (length 6) [ 72.659452][ T5228] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 72.662062][ T5228] EXT4-fs (loop0): This should not happen!! Data will be lost [ 72.662062][ T5228] [ 72.702138][ T5228] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 7: comm syz.0.195: lblock 7 mapped to illegal pblock 7 (length 9) [ 72.724718][ T5228] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 72.734989][ T5260] binder: 5259:5260 ioctl c0306201 20000240 returned -14 [ 72.745033][ T5260] binder: 5259:5260 tried to acquire reference to desc 0, got 1 instead [ 72.746767][ T5260] binder: 5259:5260 ioctl c0306201 20000380 returned -14 [ 72.746830][ T5228] EXT4-fs (loop0): This should not happen!! Data will be lost [ 72.746830][ T5228] [ 72.750837][ T5260] binder: 5259:5260 got transaction with invalid offset (40, min 24 max 40) or object. [ 72.753045][ T5260] binder: 5259:5260 transaction call to 5259:0 failed 50/29201/-22, size 40-24 line 3363 [ 72.755357][ T3779] binder: undelivered TRANSACTION_ERROR: 29201 [ 72.765870][ T5261] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.195: bg 0: block 112: padding at end of block bitmap is not set [ 72.784116][ T4336] Bluetooth: Wrong link type (-22) [ 72.815410][ T5228] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.195: lblock 0 mapped to illegal pblock 0 (length 1) [ 72.849084][ T4604] EXT4-fs (loop0): unmounting filesystem. [ 73.144211][ T5285] loop0: detected capacity change from 0 to 512 [ 73.155931][ T5285] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.161821][ T5285] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 73.213953][ T5285] EXT4-fs (loop0): 1 truncate cleaned up [ 73.215123][ T5285] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 73.323539][ T4604] EXT4-fs (loop0): unmounting filesystem. [ 73.692055][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.855877][ T5340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.857820][ T5340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.001404][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 74.008256][ T5346] device team1 entered promiscuous mode [ 74.064496][ T5350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.244'. [ 74.189706][ T5355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.191408][ T5355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.193849][ T5355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.195502][ T5355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.575611][ T5389] overlayfs: failed to clone upperpath [ 74.707205][ T5393] netlink: 'syz.2.261': attribute type 1 has an invalid length. [ 74.714696][ T5393] bond1 (unregistering): Released all slaves [ 74.815535][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.817218][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.474187][ T5396] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.476529][ T5396] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.478624][ T5396] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.480742][ T5396] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.691163][ T5409] overlayfs: failed to clone upperpath [ 75.698646][ T5409] overlayfs: failed to clone upperpath [ 75.776155][ T5421] binder: 5420:5421 ioctl c0306201 20000100 returned -14 [ 75.781192][ T5421] binder: 5420:5421 tried to acquire reference to desc 0, got 1 instead [ 75.783645][ T5421] binder: 5420:5421 ioctl c0306201 20000200 returned -14 [ 75.785826][ T5421] binder: 5420:5421 got transaction with too large buffer [ 75.788016][ T5421] binder: 5420:5421 transaction call to 5420:0 failed 55/29201/-22, size 112-4280 line 3521 [ 75.791155][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.838994][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 75.884562][ T5432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.277'. [ 76.869982][ T5467] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82 [ 77.095323][ T5482] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 77.260448][ T5496] tipc: Failed to remove unknown binding: 66,0,0/0:3281767337/3281767338 [ 77.263739][ T5496] tipc: Failed to remove unknown binding: 66,0,0/0:3281767337/3281767338 [ 77.310921][ T5498] bond1: (slave veth3): Enslaving as an active interface with a down link [ 77.341444][ T5498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.453051][ T5507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 77.468227][ T5507] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 77.824881][ T5551] tipc: Failed to remove unknown binding: 66,0,0/0:483295710/483295711 [ 77.829268][ T5551] tipc: Failed to remove unknown binding: 66,0,0/0:483295710/483295711 [ 77.869060][ T5553] bond1: (slave veth3): Enslaving as an active interface with a down link [ 77.881845][ T5553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.915344][ T5560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.330'. [ 77.917453][ T5560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.330'. [ 78.089176][ T5568] loop0: detected capacity change from 0 to 512 [ 78.779163][ T5599] binder: 5597:5599 tried to acquire reference to desc 0, got 1 instead [ 78.781880][ T5599] binder: 5597:5599 got transaction with invalid data ptr [ 78.783412][ T5599] binder: 5597:5599 transaction async to 5597:0 failed 60/29201/-14, size 240-0 line 3582 [ 78.785960][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.867536][ T5601] loop1: detected capacity change from 0 to 2048 [ 78.913565][ T5601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.259122][ T5624] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 79.261262][ T5624] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 79.277342][ T5628] fuse: Bad value for 'fd' [ 79.442416][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.444146][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.577975][ T5641] loop2: detected capacity change from 0 to 32768 [ 79.589419][ T5641] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.371 (5641) [ 79.599358][ T5641] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 79.601900][ T5641] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 79.605080][ T5641] BTRFS info (device loop2): disabling tree log [ 79.607354][ T5641] BTRFS info (device loop2): using free space tree [ 79.705672][ T5641] BTRFS info (device loop2): enabling ssd optimizations [ 79.861301][ T4778] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 79.939842][ T5626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.959944][ T5641] BTRFS info (device loop2): balance: start -d -m [ 79.964874][ T5626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.974900][ T5641] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 80.105787][ T5641] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 80.183159][ T5641] BTRFS info (device loop2): found 13 extents, stage: move data extents [ 80.199341][ T5641] BTRFS info (device loop2): found 1 extents, stage: update data pointers [ 80.223818][ T5641] BTRFS info (device loop2): balance: ended with status: 0 [ 80.275645][ T4646] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 80.318210][ T5626] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.320054][ T5626] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.322009][ T5626] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.323907][ T5626] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.626143][ T5680] fuse: Bad value for 'fd' [ 80.721228][ T5689] ip_tables: iptables: counters copy to user failed while replacing table [ 80.802433][ T5683] loop0: detected capacity change from 0 to 32768 [ 80.827359][ T5683] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.372 (5683) [ 80.833116][ T5683] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.834964][ T5683] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 80.836608][ T5683] BTRFS info (device loop0): setting nodatasum [ 80.842648][ T5683] BTRFS info (device loop0): force zlib compression, level 3 [ 80.844197][ T5683] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 80.846021][ T5683] BTRFS info (device loop0): use lzo compression, level 0 [ 80.857533][ T5683] BTRFS info (device loop0): turning on flush-on-commit [ 80.859326][ T5683] BTRFS info (device loop0): enabling auto defrag [ 80.860888][ T5683] BTRFS info (device loop0): max_inline at 4096 [ 80.862164][ T5683] BTRFS info (device loop0): using free space tree [ 80.934263][ T5683] BTRFS info (device loop0): enabling ssd optimizations [ 80.961363][ T4604] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.256595][ T5730] ip_tables: iptables: counters copy to user failed while replacing table [ 81.485200][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 81.500193][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 81.502290][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 81.515107][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 81.518149][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 81.541376][ T5757] binder: 5756:5757 ioctl c0306201 20000100 returned -14 [ 81.545423][ T5757] binder: 5756:5757 tried to acquire reference to desc 0, got 1 instead [ 81.550273][ T5757] binder: 5756:5757 ioctl c0306201 20000200 returned -14 [ 81.552265][ T5757] binder: 5756:5757 got transaction with too large buffer [ 81.553617][ T5757] binder: 5756:5757 transaction call to 5756:0 failed 65/29201/-22, size 112-4280 line 3521 [ 81.556275][ T4396] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.592988][ T5755] loop0: detected capacity change from 0 to 2048 [ 81.614920][ T5755] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.759013][ T5775] binder: 5774:5775 tried to acquire reference to desc 0, got 1 instead [ 81.762142][ T5778] netlink: 20 bytes leftover after parsing attributes in process `syz.2.391'. [ 81.763513][ T5775] binder: 5774:5775 got transaction with invalid handle, 3 [ 81.769031][ T5775] binder: 5775:5774 translate handle failed [ 81.771064][ T5775] binder: 5774:5775 transaction call to 5774:0 failed 70/29201/-22, size 72-24 line 3410 [ 81.782170][ T4545] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.812575][ T5781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 81.848741][ T5787] netlink: 'syz.4.395': attribute type 1 has an invalid length. [ 81.885892][ T5787] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.892514][ T5787] bond2: (slave bond3): making interface the new active one [ 81.895496][ T5787] bond2: (slave bond3): Enslaving as an active interface with an up link [ 82.330003][ T5811] loop2: detected capacity change from 0 to 128 [ 82.346798][ T5811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.381039][ T5811] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 82.393792][ T5811] fscrypt: loop2: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 82.416261][ T4646] EXT4-fs (loop2): unmounting filesystem. [ 82.602366][ T5816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.407'. [ 82.614120][ T5816] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 82.616105][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.618558][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.839474][ T5830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.412'. [ 82.878065][ T5832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 82.883917][ T5832] device team1 entered promiscuous mode [ 82.909297][ T5834] binder: 5833:5834 tried to acquire reference to desc 0, got 1 instead [ 82.915565][ T5834] binder: 5833:5834 got transaction with out-of-order buffer fixup [ 82.918435][ T5834] binder: 5834:5833 failed to fixup parent [ 82.919699][ T5834] binder: 5833:5834 transaction call to 5833:0 failed 77/29201/-22, size 120-24 line 3557 [ 82.922880][ T4489] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.952949][ T5838] netlink: 'syz.2.415': attribute type 10 has an invalid length. [ 82.958691][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.961045][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.973067][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.974527][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.976229][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.977885][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.988916][ T5838] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 83.209097][ T4397] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.325128][ T5865] netlink: 'syz.2.429': attribute type 10 has an invalid length. [ 83.328363][ T5865] device syz_tun entered promiscuous mode [ 83.342666][ T5865] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 83.376563][ T4756] bond0: (slave bond_slave_0): interface is now down [ 83.378482][ T4756] bond0: (slave bond_slave_1): interface is now down [ 83.379793][ T4756] bond0: (slave bridge0): interface is now down [ 83.380967][ T4756] bond0: (slave syz_tun): interface is now down [ 83.390826][ T4397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.393157][ T4397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.394957][ T4397] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.397302][ T4756] bond0: now running without any active interface! [ 83.399866][ T4397] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.405493][ T4397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.415684][ T4397] usb 1-1: config 0 descriptor?? [ 83.829145][ T5840] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.831916][ T5840] xt_hashlimit: size too large, truncated to 1048576 [ 84.042287][ T5878] netlink: 'syz.3.432': attribute type 10 has an invalid length. [ 84.045609][ T5878] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 84.057788][ T5876] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 84.182095][ T5876] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 84.275441][ T5886] loop2: detected capacity change from 0 to 1024 [ 84.299894][ T5886] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.333751][ T5886] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.436: lblock 0 mapped to illegal pblock 0 (length 6) [ 84.345018][ T5886] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 84.352364][ T5886] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.352364][ T5886] [ 84.369492][ T5886] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 7: comm syz.2.436: lblock 7 mapped to illegal pblock 7 (length 9) [ 84.375845][ T5886] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 84.381819][ T5886] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.381819][ T5886] [ 84.395026][ T5886] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.436: bg 0: block 112: padding at end of block bitmap is not set [ 84.406584][ T5886] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.436: lblock 0 mapped to illegal pblock 0 (length 1) [ 84.444085][ T4646] EXT4-fs (loop2): unmounting filesystem. [ 84.486609][ T5894] device syzkaller0 entered promiscuous mode [ 84.654624][ T5903] loop2: detected capacity change from 0 to 1024 [ 84.671099][ T5903] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.685763][ T5903] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.793542][ T5903] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 84.802755][ T5903] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.802755][ T5903] [ 84.811284][ T5903] EXT4-fs (loop2): Total free blocks count 0 [ 84.815634][ T5903] EXT4-fs (loop2): Free/Dirty block details [ 84.821932][ T5903] EXT4-fs (loop2): free_blocks=0 [ 84.825243][ T5903] EXT4-fs (loop2): dirty_blocks=0 [ 84.828998][ T5903] EXT4-fs (loop2): Block reservation details [ 84.832975][ T5903] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 84.893344][ T4646] EXT4-fs (loop2): unmounting filesystem. [ 84.997665][ T5909] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 85.205619][ T5914] ip_tables: iptables: counters copy to user failed while replacing table [ 85.224864][ T5917] netlink: 'syz.4.445': attribute type 10 has an invalid length. [ 85.240415][ T5917] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 85.383408][ T5924] netlink: 'syz.3.448': attribute type 10 has an invalid length. [ 85.393130][ T5924] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 85.503064][ T4397] usbhid 1-1:0.0: can't add hid device: -71 [ 85.504484][ T4397] usbhid: probe of 1-1:0.0 failed with error -71 [ 85.510492][ T4397] usb 1-1: USB disconnect, device number 2 [ 85.619126][ T5938] loop1: detected capacity change from 0 to 1024 [ 85.631475][ T5938] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.668623][ T5938] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 85.711009][ T5938] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 85.713779][ T5938] EXT4-fs (loop1): This should not happen!! Data will be lost [ 85.713779][ T5938] [ 85.716330][ T5938] EXT4-fs (loop1): Total free blocks count 0 [ 85.719315][ T5938] EXT4-fs (loop1): Free/Dirty block details [ 85.720636][ T5938] EXT4-fs (loop1): free_blocks=0 [ 85.721763][ T5938] EXT4-fs (loop1): dirty_blocks=0 [ 85.722697][ T5938] EXT4-fs (loop1): Block reservation details [ 85.724207][ T5938] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 85.740314][ T4626] EXT4-fs (loop1): unmounting filesystem. [ 85.977944][ T5948] loop1: detected capacity change from 0 to 32768 [ 85.991197][ T5948] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.459 (5948) [ 86.000980][ T5948] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.003301][ T5948] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 86.005201][ T5948] BTRFS info (device loop1): disabling tree log [ 86.006461][ T5948] BTRFS info (device loop1): using free space tree [ 86.016191][ T5952] fuse: Bad value for 'fd' [ 86.047343][ T5948] BTRFS info (device loop1): enabling ssd optimizations [ 86.075238][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.078851][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.100020][ T5972] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 86.104345][ T4780] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 86.110616][ T5972] xt_hashlimit: size too large, truncated to 1048576 [ 86.196303][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.268679][ T5982] BTRFS info (device loop1): balance: start -d -m [ 86.272263][ T5982] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 86.281110][ T5980] netlink: 'syz.0.463': attribute type 10 has an invalid length. [ 86.289075][ T5982] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 86.308967][ T5982] BTRFS info (device loop1): found 10 extents, stage: move data extents [ 86.365468][ T5982] BTRFS info (device loop1): found 1 extents, stage: update data pointers [ 86.394728][ T5980] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 86.400218][ T5982] BTRFS info (device loop1): balance: ended with status: 0 [ 86.461438][ T4626] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.635397][ T5997] loop1: detected capacity change from 0 to 1024 [ 86.661395][ T5997] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 86.688380][ T5997] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.464: lblock 0 mapped to illegal pblock 0 (length 6) [ 86.698383][ T5997] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 86.701319][ T5997] EXT4-fs (loop1): This should not happen!! Data will be lost [ 86.701319][ T5997] [ 86.728052][ T5997] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 7: comm syz.1.464: lblock 7 mapped to illegal pblock 7 (length 9) [ 86.733889][ T5997] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 86.751398][ T5997] EXT4-fs (loop1): This should not happen!! Data will be lost [ 86.751398][ T5997] [ 86.760816][ T5997] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.464: bg 0: block 112: padding at end of block bitmap is not set [ 86.774586][ T5997] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.464: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.807168][ T4626] EXT4-fs (loop1): unmounting filesystem. [ 87.712301][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.726747][ T6025] __nla_validate_parse: 8 callbacks suppressed [ 87.726763][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'. [ 87.771257][ T6025] netlink: 'syz.1.476': attribute type 10 has an invalid length. [ 87.843390][ T6025] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.856649][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 87.872017][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 87.874011][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 87.880414][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 87.882981][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 87.908010][ T6037] loop1: detected capacity change from 0 to 256 [ 87.938602][ T6031] loop0: detected capacity change from 0 to 32768 [ 87.942421][ T6031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.479 (6031) [ 87.951157][ T6031] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.953934][ T6031] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 87.957332][ T6031] BTRFS info (device loop0): disabling tree log [ 87.959317][ T6031] BTRFS info (device loop0): using free space tree [ 87.966663][ T6031] BTRFS info (device loop0): enabling ssd optimizations [ 87.994713][ T4780] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 88.049964][ T6061] loop1: detected capacity change from 0 to 128 [ 88.069929][ T6062] BTRFS info (device loop0): balance: start -d -m [ 88.079123][ T6062] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 88.081963][ T6061] EXT4-fs (loop1): Test dummy encryption mode enabled [ 88.101289][ T6061] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 88.115833][ T6062] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 88.201865][ T6062] BTRFS info (device loop0): found 10 extents, stage: move data extents [ 88.221852][ T6062] BTRFS info (device loop0): found 1 extents, stage: update data pointers [ 88.230783][ T6062] BTRFS info (device loop0): balance: ended with status: 0 [ 88.281575][ T4604] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.523058][ T6081] loop0: detected capacity change from 0 to 128 [ 88.540333][ T6081] FAT-fs (loop0): Directory bread(block 524322) failed [ 88.541744][ T6081] FAT-fs (loop0): Directory bread(block 524323) failed [ 88.543173][ T6081] FAT-fs (loop0): Directory bread(block 524324) failed [ 88.544694][ T6081] FAT-fs (loop0): Directory bread(block 524325) failed [ 88.546226][ T6081] FAT-fs (loop0): Directory bread(block 524326) failed [ 88.547822][ T6081] FAT-fs (loop0): Directory bread(block 524327) failed [ 88.549358][ T6081] FAT-fs (loop0): Directory bread(block 524328) failed [ 88.550796][ T6081] FAT-fs (loop0): Directory bread(block 524329) failed [ 88.831109][ T6088] loop2: detected capacity change from 0 to 512 [ 88.839159][ T6088] EXT4-fs: Ignoring removed bh option [ 88.850335][ T6088] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 88.859401][ T6088] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.494: corrupted in-inode xattr [ 88.862481][ T6088] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.494: couldn't read orphan inode 15 (err -117) [ 88.865231][ T6088] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.886738][ T4626] EXT4-fs (loop1): unmounting filesystem. [ 88.925477][ T6088] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.494: Unrecognised inode hash code 4 [ 88.928404][ T6088] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.494: Corrupt directory, running e2fsck is recommended [ 88.931672][ T6088] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #12: comm syz.2.494: corrupted in-inode xattr [ 88.945985][ T6088] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.494: Unrecognised inode hash code 4 [ 88.950055][ T6088] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.494: Corrupt directory, running e2fsck is recommended [ 88.956197][ T6088] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.494: Unrecognised inode hash code 4 [ 88.958720][ T6088] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.494: Corrupt directory, running e2fsck is recommended [ 88.961596][ T6088] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #12: comm syz.2.494: corrupted in-inode xattr [ 88.970763][ T6088] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.494: Unrecognised inode hash code 4 [ 88.973365][ T6088] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.494: Corrupt directory, running e2fsck is recommended [ 88.978109][ T6088] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #12: comm syz.2.494: corrupted in-inode xattr [ 88.984232][ T6088] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.494: Unrecognised inode hash code 4 [ 88.986497][ T6088] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.494: Corrupt directory, running e2fsck is recommended [ 89.024210][ T4646] EXT4-fs (loop2): unmounting filesystem. [ 89.224941][ T6106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.298294][ T6107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.355957][ T6106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.381481][ T6117] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 89.383037][ T6117] overlayfs: failed to set xattr on upper [ 89.384368][ T6117] overlayfs: ...falling back to index=off,metacopy=off. [ 90.015993][ T6140] overlayfs: failed to clone upperpath [ 90.093685][ T6150] netlink: 'syz.3.518': attribute type 39 has an invalid length. [ 90.888333][ T4340] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 90.890521][ T4340] Bluetooth: hci2: Injecting HCI hardware error event [ 90.893509][ T4336] Bluetooth: hci2: hardware error 0x00 [ 91.360796][ T6146] Set syz1 is full, maxelem 65536 reached [ 91.777287][ T6186] netlink: 'syz.4.531': attribute type 4 has an invalid length. [ 91.863385][ T6206] binder: 6204:6206 tried to acquire reference to desc 0, got 1 instead [ 91.865370][ T6206] binder: 6204:6206 got transaction with invalid data ptr [ 91.869423][ T6206] binder: 6204:6206 transaction call to 6204:0 failed 82/29201/-14, size 120-3976 line 3350 [ 91.871748][ T4490] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.898234][ T6211] ip_tables: iptables: counters copy to user failed while replacing table [ 91.941363][ T6214] binder: 6213:6214 tried to acquire reference to desc 0, got 1 instead [ 91.943552][ T6214] binder: cannot allocate buffer [ 91.943571][ T6214] binder: 6213:6214 transaction async to 6213:0 failed 87/29201/-22, size 104--6 line 3247 [ 91.948502][ T5991] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.994653][ T6216] set_capacity_and_notify: 1 callbacks suppressed [ 91.994662][ T6216] loop2: detected capacity change from 0 to 8192 [ 92.050702][ T6216] loop2: p1 p2 p4 [ 92.051669][ T6216] loop2: partition table partially beyond EOD, truncated [ 92.053858][ T6216] loop2: p1 start 838860800 is beyond EOD, truncated [ 92.060810][ T6216] loop2: p2 start 50331648 is beyond EOD, truncated [ 92.062369][ T6216] loop2: p4 start 4278190080 is beyond EOD, truncated [ 92.185761][ T6230] netlink: 'syz.1.550': attribute type 11 has an invalid length. [ 92.252112][ T27] audit: type=1326 audit(92.240:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.549" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d7a228 code=0x7fc00000 [ 92.267895][ T27] audit: type=1326 audit(92.250:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.2.549" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa0d7a228 code=0x7fc00000 [ 92.320207][ T6241] netlink: 36 bytes leftover after parsing attributes in process `syz.4.552'. [ 92.669633][ T6245] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.127106][ T4336] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 93.327037][ T6289] loop2: detected capacity change from 0 to 8 [ 93.350242][ T6289] SQUASHFS error: xz decompression failed, data probably corrupt [ 93.352165][ T6289] SQUASHFS error: Failed to read block 0x108: -5 [ 93.353526][ T6289] SQUASHFS error: Unable to read metadata cache entry [106] [ 93.355128][ T6289] SQUASHFS error: Unable to read inode 0x11f [ 93.650179][ T5179] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.087697][ T6306] TC_ACT_REPEAT abuse ? [ 94.285553][ T6318] device syzkaller0 entered promiscuous mode [ 94.727997][ T6349] FAULT_INJECTION: forcing a failure. [ 94.727997][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 94.730563][ T6349] CPU: 1 PID: 6349 Comm: syz.2.595 Not tainted syzkaller #0 [ 94.732197][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 94.734241][ T6349] Call trace: [ 94.734882][ T6349] dump_backtrace+0x1c4/0x1f0 [ 94.735908][ T6349] show_stack+0x2c/0x3c [ 94.736887][ T6349] __dump_stack+0x30/0x40 [ 94.737894][ T6349] dump_stack_lvl+0xf4/0x15c [ 94.738845][ T6349] dump_stack+0x1c/0x5c [ 94.739768][ T6349] should_fail_ex+0x3cc/0x524 [ 94.740890][ T6349] __should_failslab+0xc0/0x11c [ 94.741869][ T6349] should_failslab+0x10/0x28 [ 94.742884][ T6349] kmem_cache_alloc+0x88/0x310 [ 94.743962][ T6349] __kernfs_new_node+0xec/0x5fc [ 94.745036][ T6349] kernfs_new_node+0x120/0x230 [ 94.746098][ T6349] __kernfs_create_file+0x60/0x2e0 [ 94.747093][ T6349] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 94.748303][ T6349] internal_create_group+0x3e8/0xb24 [ 94.749468][ T6349] sysfs_create_group+0x2c/0x3c [ 94.750519][ T6349] sysfs_slab_add+0x160/0x298 [ 94.751617][ T6349] __kmem_cache_create+0x628/0x72c [ 94.752784][ T6349] kmem_cache_create_usercopy+0x184/0x2fc [ 94.753990][ T6349] kmem_cache_create+0x1c/0x28 [ 94.754969][ T6349] bioset_init+0x2c0/0x5c0 [ 94.755801][ T6349] dm_table_complete+0x1860/0x1e40 [ 94.756823][ T6349] table_load+0x2f4/0x690 [ 94.757729][ T6349] dm_ctl_ioctl+0xaac/0xf1c [ 94.758649][ T6349] __arm64_sys_ioctl+0x14c/0x1c8 [ 94.759694][ T6349] invoke_syscall+0x98/0x290 [ 94.760716][ T6349] el0_svc_common+0x13c/0x258 [ 94.761661][ T6349] do_el0_svc+0x5c/0x134 [ 94.762545][ T6349] el0_svc+0x58/0x12c [ 94.763385][ T6349] el0t_64_sync_handler+0x84/0xf0 [ 94.764457][ T6349] el0t_64_sync+0x18c/0x190 [ 94.790083][ T6349] kmem_cache_create_usercopy(bio-408) failed with error -12 [ 94.791649][ T6349] CPU: 0 PID: 6349 Comm: syz.2.595 Not tainted syzkaller #0 [ 94.793028][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 94.795006][ T6349] Call trace: [ 94.795779][ T6349] dump_backtrace+0x1c4/0x1f0 [ 94.796858][ T6349] show_stack+0x2c/0x3c [ 94.797758][ T6349] __dump_stack+0x30/0x40 [ 94.798731][ T6349] dump_stack_lvl+0xf4/0x15c [ 94.799750][ T6349] dump_stack+0x1c/0x5c [ 94.800650][ T6349] kmem_cache_create_usercopy+0x24c/0x2fc [ 94.801841][ T6349] kmem_cache_create+0x1c/0x28 [ 94.802718][ T6349] bioset_init+0x2c0/0x5c0 [ 94.803600][ T6349] dm_table_complete+0x1860/0x1e40 [ 94.804663][ T6349] table_load+0x2f4/0x690 [ 94.805551][ T6349] dm_ctl_ioctl+0xaac/0xf1c [ 94.806458][ T6349] __arm64_sys_ioctl+0x14c/0x1c8 [ 94.807452][ T6349] invoke_syscall+0x98/0x290 [ 94.808428][ T6349] el0_svc_common+0x13c/0x258 [ 94.809435][ T6349] do_el0_svc+0x5c/0x134 [ 94.810357][ T6349] el0_svc+0x58/0x12c [ 94.811229][ T6349] el0t_64_sync_handler+0x84/0xf0 [ 94.812313][ T6349] el0t_64_sync+0x18c/0x190 [ 94.823511][ T6349] device-mapper: table: unable to allocate mempools [ 95.081644][ T6373] ip_tables: iptables: counters copy to user failed while replacing table [ 95.631741][ T6387] loop1: detected capacity change from 0 to 128 [ 95.645035][ T6387] FAT-fs (loop1): Directory bread(block 524322) failed [ 95.646522][ T6387] FAT-fs (loop1): Directory bread(block 524323) failed [ 95.648124][ T6387] FAT-fs (loop1): Directory bread(block 524324) failed [ 95.649754][ T6387] FAT-fs (loop1): Directory bread(block 524325) failed [ 95.651322][ T6387] FAT-fs (loop1): Directory bread(block 524326) failed [ 95.652895][ T6387] FAT-fs (loop1): Directory bread(block 524327) failed [ 95.654380][ T6387] FAT-fs (loop1): Directory bread(block 524328) failed [ 95.655882][ T6387] FAT-fs (loop1): Directory bread(block 524329) failed [ 96.435905][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 96.438967][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 96.473987][ T6422] block nbd2: shutting down sockets [ 96.514109][ T6433] loop1: detected capacity change from 0 to 8 [ 96.578532][ T6433] SQUASHFS error: xz decompression failed, data probably corrupt [ 96.580064][ T6433] SQUASHFS error: Failed to read block 0x108: -5 [ 96.581361][ T6433] SQUASHFS error: Unable to read metadata cache entry [106] [ 96.582909][ T6433] SQUASHFS error: Unable to read inode 0x11f [ 97.012265][ T6446] loop2: detected capacity change from 0 to 32768 [ 97.022073][ T6446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.636 (6446) [ 97.032824][ T6446] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.034983][ T6446] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 97.036620][ T6446] BTRFS info (device loop2): setting nodatasum [ 97.048414][ T6446] BTRFS info (device loop2): force zlib compression, level 3 [ 97.049849][ T6446] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 97.051806][ T6446] BTRFS info (device loop2): use lzo compression, level 0 [ 97.053306][ T6446] BTRFS info (device loop2): turning on flush-on-commit [ 97.054810][ T6446] BTRFS info (device loop2): enabling auto defrag [ 97.056122][ T6446] BTRFS info (device loop2): max_inline at 4096 [ 97.068549][ T6446] BTRFS info (device loop2): using free space tree [ 97.152528][ T6446] BTRFS info (device loop2): enabling ssd optimizations [ 97.496092][ T6486] tipc: Failed to remove unknown binding: 66,0,0/0:3208135134/3208135135 [ 97.500185][ T6486] tipc: Failed to remove unknown binding: 66,0,0/0:3208135134/3208135135 [ 97.580447][ T6493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.643'. [ 97.599437][ T4646] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.846235][ T6505] tipc: Started in network mode [ 97.847741][ T6505] tipc: Node identity 080211000001, cluster identity 4711 [ 97.849194][ T6505] tipc: Enabled bearer , priority 0 [ 97.861243][ T6507] ip_tables: iptables: counters copy to user failed while replacing table [ 97.908995][ T6511] TC_ACT_REPEAT abuse ? [ 97.968159][ T6514] FAULT_INJECTION: forcing a failure. [ 97.968159][ T6514] name failslab, interval 1, probability 0, space 0, times 0 [ 97.970540][ T6514] CPU: 0 PID: 6514 Comm: syz.2.652 Not tainted syzkaller #0 [ 97.972041][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 97.974060][ T6514] Call trace: [ 97.974754][ T6514] dump_backtrace+0x1c4/0x1f0 [ 97.975788][ T6514] show_stack+0x2c/0x3c [ 97.976698][ T6514] __dump_stack+0x30/0x40 [ 97.977662][ T6514] dump_stack_lvl+0xf4/0x15c [ 97.978688][ T6514] dump_stack+0x1c/0x5c [ 97.979559][ T6514] should_fail_ex+0x3cc/0x524 [ 97.980596][ T6514] __should_failslab+0xc0/0x11c [ 97.981669][ T6514] should_failslab+0x10/0x28 [ 97.982694][ T6514] __kmem_cache_alloc_node+0x7c/0x318 [ 97.983885][ T6514] __kmalloc_node+0xc8/0x184 [ 97.984893][ T6514] memcg_alloc_slab_cgroups+0x90/0x164 [ 97.986053][ T6514] slab_post_alloc_hook+0xc0/0x430 [ 97.987122][ T6514] __kmem_cache_alloc_node+0x278/0x318 [ 97.988384][ T6514] __kmalloc+0xc4/0x180 [ 97.989356][ T6514] load_msg+0xc4/0x55c [ 97.990317][ T6514] do_msgsnd+0x170/0xfd4 [ 97.991285][ T6514] __arm64_sys_msgsnd+0x174/0x1b0 [ 97.992398][ T6514] invoke_syscall+0x98/0x290 [ 97.993417][ T6514] el0_svc_common+0x13c/0x258 [ 97.994456][ T6514] do_el0_svc+0x5c/0x134 [ 97.995417][ T6514] el0_svc+0x58/0x12c [ 97.996275][ T6514] el0t_64_sync_handler+0x84/0xf0 [ 97.997381][ T6514] el0t_64_sync+0x18c/0x190 [ 98.347995][ T6522] block device autoloading is deprecated and will be removed. [ 98.362260][ T6517] bond0: (slave bridge0): Releasing backup interface [ 98.418706][ T6517] device bridge_slave_0 left promiscuous mode [ 98.421848][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.450110][ T6517] device bridge_slave_1 left promiscuous mode [ 98.451666][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.459159][ T6529] binder: 6528:6529 ioctl c0306201 20000280 returned -14 [ 98.466136][ T6529] binder: 6528:6529 tried to acquire reference to desc 0, got 1 instead [ 98.468333][ T6529] binder: 6528:6529 ioctl c0306201 200003c0 returned -14 [ 98.469566][ T6527] loop2: detected capacity change from 0 to 4096 [ 98.475889][ T6529] binder: 6528:6529 got transaction with too large buffer [ 98.479734][ T6529] binder: 6528:6529 transaction call to 6528:0 failed 92/29201/-22, size 104-24 line 3521 [ 98.488143][ T6517] bond0: (slave bond_slave_0): Releasing backup interface [ 98.490124][ T3902] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.502481][ T6527] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.519655][ T6517] bond0: (slave bond_slave_1): Releasing backup interface [ 98.527439][ T4646] EXT4-fs (loop2): unmounting filesystem. [ 98.562286][ T6517] team0: Port device team_slave_0 removed [ 98.564605][ T6517] team0: Port device team_slave_1 removed [ 98.566479][ T6517] bond0: (slave wlan1): Releasing backup interface [ 98.619208][ T6517] bond1: (slave veth3): Releasing active interface [ 98.661595][ T6517] bond2: (slave bond3): Releasing backup interface [ 98.691713][ T6520] team0: Mode changed to "activebackup" [ 98.693102][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 98.695113][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 98.698387][ T6540] netlink: 'syz.0.662': attribute type 3 has an invalid length. [ 98.700319][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 98.807106][ T6554] loop1: detected capacity change from 0 to 256 [ 98.819733][ T6554] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.887476][ T6543] netlink: 'syz.0.662': attribute type 2 has an invalid length. [ 98.890697][ T4406] tipc: Node number set to 134418688 [ 99.036266][ T6564] loop2: detected capacity change from 0 to 128 [ 99.092445][ T6564] FAT-fs (loop2): Directory bread(block 524322) failed [ 99.093988][ T6564] FAT-fs (loop2): Directory bread(block 524323) failed [ 99.095469][ T6564] FAT-fs (loop2): Directory bread(block 524324) failed [ 99.097041][ T6564] FAT-fs (loop2): Directory bread(block 524325) failed [ 99.098525][ T6564] FAT-fs (loop2): Directory bread(block 524326) failed [ 99.100075][ T6564] FAT-fs (loop2): Directory bread(block 524327) failed [ 99.101594][ T6564] FAT-fs (loop2): Directory bread(block 524328) failed [ 99.103135][ T6564] FAT-fs (loop2): Directory bread(block 524329) failed [ 100.398636][ T6615] ip_tables: iptables: counters copy to user failed while replacing table [ 100.411694][ T6621] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.414468][ T6621] xt_hashlimit: size too large, truncated to 1048576 [ 100.898652][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.767550][ T6681] binder: 6680:6681 tried to acquire reference to desc 0, got 1 instead [ 102.777392][ T6681] binder: 6680:6681 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 102.781356][ T6681] binder: 6681 RLIMIT_NICE not set [ 102.782638][ T6681] binder: undelivered transaction 98, put_user failed [ 102.784043][ T6681] binder: 6680:6681 ioctl c0306201 20000180 returned -14 [ 102.785974][ T4490] binder: undelivered TRANSACTION_COMPLETE [ 102.884321][ T6697] netlink: 'syz.4.716': attribute type 4 has an invalid length. [ 102.903033][ T6697] netlink: 'syz.4.716': attribute type 4 has an invalid length. [ 102.943454][ T6699] loop2: detected capacity change from 0 to 128 [ 103.006234][ T6699] FAT-fs (loop2): Directory bread(block 524322) failed [ 103.007671][ T6699] FAT-fs (loop2): Directory bread(block 524323) failed [ 103.009221][ T6699] FAT-fs (loop2): Directory bread(block 524324) failed [ 103.010737][ T6699] FAT-fs (loop2): Directory bread(block 524325) failed [ 103.012260][ T6699] FAT-fs (loop2): Directory bread(block 524326) failed [ 103.013674][ T6699] FAT-fs (loop2): Directory bread(block 524327) failed [ 103.015167][ T6699] FAT-fs (loop2): Directory bread(block 524328) failed [ 103.016684][ T6699] FAT-fs (loop2): Directory bread(block 524329) failed [ 103.196029][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.566098][ T6713] 9pnet_fd: Insufficient options for proto=fd [ 103.786209][ T27] audit: type=1326 audit(103.770:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6718 comm="syz.2.725" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0d7a228 code=0x0 [ 104.003297][ T6735] ------------[ cut here ]------------ [ 104.004545][ T6735] WARNING: CPU: 1 PID: 6735 at net/mac80211/iface.c:532 ieee80211_do_stop+0xb2c/0x1bd4 [ 104.006762][ T6735] Modules linked in: [ 104.007645][ T6735] CPU: 1 PID: 6735 Comm: syz.3.733 Not tainted syzkaller #0 [ 104.009260][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 104.011494][ T6735] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 104.013255][ T6735] pc : ieee80211_do_stop+0xb2c/0x1bd4 [ 104.014419][ T6735] lr : ieee80211_do_stop+0xb2c/0x1bd4 [ 104.015509][ T6735] sp : ffff8000230e7400 [ 104.016376][ T6735] x29: ffff8000230e75d0 x28: dfff800000000000 x27: ffff0000cd3c8e80 [ 104.018038][ T6735] x26: dfff800000000000 x25: ffff0000f6d08000 x24: 0000000000000007 [ 104.019699][ T6735] x23: ffff8000230e74c0 x22: ffff0000f6d0a760 x21: 0000000000000001 [ 104.021520][ T6735] x20: ffff70000461ce94 x19: ffff0000f6d08c80 x18: 1fffe00033c1c97e [ 104.023048][ T6735] x17: ffff80001641d000 x16: ffff800011bcec98 x15: ffff800008a03020 [ 104.024539][ T6735] x14: 0000000000000001 x13: 1ffff0000461ce48 x12: 0000000000080000 [ 104.026134][ T6735] x11: 0000000000030816 x10: ffff80002a790000 x9 : ffff800011422050 [ 104.027743][ T6735] x8 : 0000000000030817 x7 : ffff80000805a5e8 x6 : ffff80000805a7f8 [ 104.029399][ T6735] x5 : ffff0000ddde8a20 x4 : ffff8000230e6f38 x3 : ffff800011ca5408 [ 104.031053][ T6735] x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 [ 104.032627][ T6735] Call trace: [ 104.033310][ T6735] ieee80211_do_stop+0xb2c/0x1bd4 [ 104.034326][ T6735] ieee80211_stop+0x398/0x400 [ 104.035286][ T6735] __dev_close_many+0x2ac/0x3a0 [ 104.036255][ T6735] __dev_change_flags+0x25c/0x560 [ 104.037227][ T6735] dev_change_flags+0x80/0x15c [ 104.038164][ T6735] devinet_ioctl+0x874/0x18e8 [ 104.039063][ T6735] inet_ioctl+0x328/0x518 [ 104.039903][ T6735] sock_do_ioctl+0x100/0x258 [ 104.040825][ T6735] sock_ioctl+0x234/0x828 [ 104.041713][ T6735] __arm64_sys_ioctl+0x14c/0x1c8 [ 104.042702][ T6735] invoke_syscall+0x98/0x290 [ 104.043594][ T6735] el0_svc_common+0x13c/0x258 [ 104.044517][ T6735] do_el0_svc+0x5c/0x134 [ 104.045334][ T6735] el0_svc+0x58/0x12c [ 104.046116][ T6735] el0t_64_sync_handler+0x84/0xf0 [ 104.047195][ T6735] el0t_64_sync+0x18c/0x190 [ 104.048160][ T6735] irq event stamp: 1572 [ 104.049099][ T6735] hardirqs last enabled at (1571): [] kasan_quarantine_put+0xc4/0x200 [ 104.051413][ T6735] hardirqs last disabled at (1572): [] el1_dbg+0x24/0x80 [ 104.053114][ T6735] softirqs last enabled at (1530): [] mesh_path_flush_by_nexthop+0x108/0x124 [ 104.055329][ T6735] softirqs last disabled at (1504): [] mesh_path_flush_by_nexthop+0x54/0x124 [ 104.057421][ T6735] ---[ end trace 0000000000000000 ]--- [ 104.093633][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready