last executing test programs: 22.431462436s ago: executing program 2 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000001240)=ANY=[], 0x0) 22.375840457s ago: executing program 2 (id=283): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)="ab", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 22.341137578s ago: executing program 2 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 21.806519371s ago: executing program 2 (id=294): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x21081e, &(0x7f0000000cc0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000001040)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000001540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001580)={0x4, 0x7, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0xfffffffd}) syz_mount_image$vfat(&(0x7f0000001600), &(0x7f0000001640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000016c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='10', 0x2) fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) 21.553761778s ago: executing program 2 (id=302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) syz_usb_disconnect(0xffffffffffffffff) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000100)=@sr0, 0x0, 0x0, 0x10000, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 21.007433391s ago: executing program 2 (id=307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)='GPL\x00'}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001140)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000001180)=r2) write$cgroup_devices(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 20.964902272s ago: executing program 32 (id=307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f00000010c0)='GPL\x00'}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001140)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000001180)=r2) write$cgroup_devices(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 10.698473675s ago: executing program 1 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xa, 0x148, 0x290, 0x10, 0x4b0, 0x2a8, 0x2a8, 0x4b0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x81, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x4, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240, 0x0, 0x8}, {0xfffffffffffffffc}}}, @common=@addrtype={{0x30}, {0xe84, 0x48}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5a8) 10.698137726s ago: executing program 3 (id=349): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000003c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x2, 0x1}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x100, 0x0, 0x2}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000580), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000600)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000640)=""/1}) 10.694477946s ago: executing program 4 (id=350): setns(0xc9, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x20040006) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.:.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 9.186075973s ago: executing program 0 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$mtd(0x0, 0x0, 0x8000) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) 9.173906063s ago: executing program 1 (id=352): syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_clone(0x24010200, &(0x7f0000000500), 0x0, &(0x7f0000000540), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'veth0\x00', {}, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x51, 0xfe, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 9.165438263s ago: executing program 3 (id=353): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000}]}}, 0x0, 0x26}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x300, 0x1, 0x0}, &(0x7f0000000000)=0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) 9.149929004s ago: executing program 4 (id=354): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002280)={0xc, 0x0, &(0x7f00000018c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 7.538511224s ago: executing program 0 (id=355): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=cp949,utf8=1,nonumtail=0,dos1xfloppy,shortname=mixed,iocharset=cp437,uni_xlate=0,utf8=0,,codepage=932,utf8=0,rodir,utf8=1,rodir,utf8=0,rodir,\x00'], 0x1, 0x2a6, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) 5.833644455s ago: executing program 1 (id=356): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=""/1}) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) 5.831608786s ago: executing program 0 (id=357): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x8000) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x14a0, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5f, 0x3}) 5.825445646s ago: executing program 3 (id=358): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000080)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000, &(0x7f0000000000)='\x00\x00\xad\xddP\x04Do\x90\x986\xc7\"K3\xaf\xf3\xe7\xf7Dm\xebD\x04\xf9A\x86_\x8d\x93\xe2\x13\xbf\xc5\xc7c\xe3\xf9(\xfe\x8a\x1c\xa8\x15\xf6\x81\xf6\xfcAM\x86\xc1\xb1\xdaJoI\xef\xf0\xe6U\xc2\r!\x16\xda\x16Y\xc0\x13\xba\xacX\a9@\x00\xac\xd0\xf1\xb3\xa8\xa7\x86h3|\x03\x95@\xebM\xa6i\xb3S\x84\xa0yum\xcbZ$8\xd2e\x19\xdb\xeb\xf3\x1eK\x1a\xad\xc4w\xe5\xcd&f\x9e\xc4') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0xad, 0x0, 0x30, 0x66}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000640)=""/201, 0xc9}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/186, 0xba}], 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000001, 0x3, 0x9, 0x11, 0x1, 0x6, 0xfc, 0x0, 0x4f, 0x0, 0x0, 0x6, 0xff, 0x2, 0x5}}) socket$inet6_tcp(0xa, 0x1, 0x0) 5.825031936s ago: executing program 4 (id=359): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(r0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 3.982467461s ago: executing program 0 (id=360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001900)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001c40)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001c80)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000001cc0)="05", 0x5dc, 0x4009, &(0x7f0000001d00)={0x11, 0x8100, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 3.982214211s ago: executing program 1 (id=361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 3.981754981s ago: executing program 3 (id=362): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000004c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c686561720a000000743d6e6f6e652c75737271756f74612c642174613d77726974656261636b2c6469725f726573765f6c6576656c3d30303030303030303030303030010000003030302c696e6f646536342c00"], 0x0, 0x4714, &(0x7f0000009780)="$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") syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0x4}}}, 0x7) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04250c20"], 0x7) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000480)="55000000200009afb72d13b2a4a2719302000000030b43026c26236925000400fe7f00dc1338d509a9a1f8baeb1898000000000100005a00"/85, 0x55}], 0x1}, 0x4000) 3.963544862s ago: executing program 4 (id=363): syz_open_procfs(0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000480)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x30, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x5}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 2.048049729s ago: executing program 0 (id=364): r0 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x2, @adiantum, 0x1, @auto='\t\x00'}) openat$dir(0xffffffffffffff9c, 0x0, 0x20402, 0xb6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='+p', 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfd3fd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r4, 0x40046, 0x10821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x3c}}, 0x20040894) 2.042925089s ago: executing program 1 (id=365): r0 = socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) 2.042615889s ago: executing program 3 (id=366): bpf$PROG_LOAD(0x5, 0x0, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 2.031822379s ago: executing program 4 (id=367): listen(0xffffffffffffffff, 0x100) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$kcm(0x2, 0x7, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) 15.314309ms ago: executing program 0 (id=368): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 9.957159ms ago: executing program 1 (id=369): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) nanosleep(&(0x7f0000000480)={0x0, 0x10000000}, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) nanosleep(&(0x7f0000000480)={0x0, 0x10000000}, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000400)="840100"/64) nanosleep(&(0x7f0000000480)={0x0, 0x10000000}, 0x0) setns(0xc9, 0x40000000) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000500)="0100000000000000000000000000000000000000ffff0000000000000000000000000000000000000100000000000000000000000000000000000000ffff00000000000000000000000000000000000005000000", 0x54) connect(r1, &(0x7f0000000200)=@generic={0x8, '\x00\x00\x00\x00d\x00'}, 0xc) write(r1, &(0x7f0000000600)="11223344", 0x4) close(r1) 547.42µs ago: executing program 3 (id=370): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) fsopen(&(0x7f0000000140)='erofs\x00', 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 0s ago: executing program 4 (id=371): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r1, r3, 0x25, 0x4, @void}, 0x2a) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts. syzkaller login: [ 29.062825][ T4316] cgroup: Unknown subsys name 'net' [ 29.325287][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.598896][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.330626][ T4341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.332273][ T4341] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.334047][ T4341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.336008][ T4341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.337523][ T4341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.339215][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.340728][ T4341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.342665][ T4341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.343455][ T4344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.344160][ T4341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.345607][ T4344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.347255][ T4341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.348340][ T4344] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.349969][ T4341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.352499][ T4341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.354428][ T4345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.354467][ T4341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.356077][ T4345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.357327][ T4341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.358539][ T4345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.359897][ T4341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.362497][ T4341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.364265][ T4341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.376677][ T4346] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.378283][ T4344] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.386007][ T4346] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.387519][ T4346] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.389099][ T4346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.405969][ T4346] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.413781][ T4329] rdma_rxe: rxe_register_device failed with error -23 [ 30.415313][ T4329] rdma_rxe: failed to add rxe_eth0 [ 30.420932][ T4346] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.424304][ T4336] rdma_rxe: rxe_register_device failed with error -23 [ 30.426522][ T4336] rdma_rxe: failed to add rxe_eth0 [ 30.428134][ T4330] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.429750][ T4330] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.431244][ T4330] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.451011][ T4331] rdma_rxe: rxe_register_device failed with error -23 [ 30.454097][ T4331] rdma_rxe: failed to add rxe_eth0 [ 30.457951][ T4330] infiniband rxe0: set active [ 30.459204][ T4318] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.460412][ T4331] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.470866][ T4330] infiniband rxe0: added rxe_eth0 [ 30.494277][ T4330] RDS/IB: rxe0: added [ 30.495152][ T4330] smc: adding ib device rxe0 with port count 1 [ 30.496345][ T4330] smc: ib device rxe0 port 1 has pnetid [ 30.497540][ T4318] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.515864][ T4329] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.543933][ T4336] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.583611][ T4335] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.604722][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 30.639206][ T4330] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.671316][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.703388][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.705024][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.706872][ T4336] device bridge_slave_0 entered promiscuous mode [ 30.721003][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.722284][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.730398][ T4336] device bridge_slave_1 entered promiscuous mode [ 30.738085][ T3994] infiniband rxe0: set active [ 30.746696][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.759329][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.760836][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.762545][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.766294][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.767649][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.769195][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.775424][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.777976][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.784986][ T4336] team0: Port device team_slave_0 added [ 30.786724][ T4336] team0: Port device team_slave_1 added [ 30.787956][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.799497][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.816570][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.820239][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.823996][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.825476][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.830670][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.833450][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.834857][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.840221][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.865060][ T4331] team0: Port device team_slave_0 added [ 30.875571][ T4331] team0: Port device team_slave_1 added [ 30.880599][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.881866][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.887063][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.889438][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.890837][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.892498][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.915660][ T4336] device hsr_slave_0 entered promiscuous mode [ 30.953093][ T4336] device hsr_slave_1 entered promiscuous mode [ 31.005432][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.006793][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.008459][ T4335] device bridge_slave_1 entered promiscuous mode [ 31.010260][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.011775][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.015225][ T4329] device bridge_slave_0 entered promiscuous mode [ 31.017246][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.018646][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.024281][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.026598][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 31.032456][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.034036][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.035727][ T4329] device bridge_slave_1 entered promiscuous mode [ 31.049625][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.055859][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.060226][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.066818][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.134494][ T4331] device hsr_slave_0 entered promiscuous mode [ 31.173190][ T4331] device hsr_slave_1 entered promiscuous mode [ 31.213018][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.214595][ T4331] Cannot create hsr debugfs directory [ 31.219742][ T4329] team0: Port device team_slave_0 added [ 31.227143][ T4335] team0: Port device team_slave_0 added [ 31.229458][ T4329] team0: Port device team_slave_1 added [ 31.232124][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.236061][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.237872][ T4330] device bridge_slave_0 entered promiscuous mode [ 31.240163][ T4335] team0: Port device team_slave_1 added [ 31.246577][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.248003][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.249767][ T4330] device bridge_slave_1 entered promiscuous mode [ 31.269409][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.270709][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.278780][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.286064][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.287462][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.292542][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.295339][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.296768][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.302128][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.308921][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.311637][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.315787][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.317239][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.322574][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.339949][ T4330] team0: Port device team_slave_0 added [ 31.341900][ T4330] team0: Port device team_slave_1 added [ 31.393972][ T4335] device hsr_slave_0 entered promiscuous mode [ 31.443809][ T4335] device hsr_slave_1 entered promiscuous mode [ 31.482977][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.484445][ T4335] Cannot create hsr debugfs directory [ 31.497983][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.499206][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.506760][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.520775][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.522156][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.528313][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.563831][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.613238][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.653004][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.654559][ T4329] Cannot create hsr debugfs directory [ 31.675100][ T4336] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.753970][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.793259][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.833075][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.834638][ T4330] Cannot create hsr debugfs directory [ 31.845124][ T4336] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.908092][ T4336] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.964287][ T4336] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.003843][ T4331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.043833][ T4331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.099632][ T4331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.145978][ T4331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.241715][ T4335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.273738][ T4335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.316980][ T4335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.346486][ T4335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.389157][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.413160][ T4346] Bluetooth: hci3: command 0x0409 tx timeout [ 32.413356][ T4342] Bluetooth: hci2: command 0x0409 tx timeout [ 32.418968][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.423026][ T4342] Bluetooth: hci1: command 0x0409 tx timeout [ 32.423179][ T4339] Bluetooth: hci0: command 0x0409 tx timeout [ 32.454210][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.484091][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.493073][ T4346] Bluetooth: hci4: command 0x0409 tx timeout [ 32.535546][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.544142][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.587068][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.626065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.628215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.629983][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.668114][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.675753][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.705465][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.712464][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.716578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.718602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.720174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.722031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.724370][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.725768][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.727626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.739354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.741059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.745561][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.746922][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.748711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.750558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.752336][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.753753][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.756373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.758092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.760030][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.761462][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.763938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.774851][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.778692][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.789258][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.797591][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.799539][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.801347][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.805999][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.807980][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.810004][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.816960][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.818820][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.820748][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.822733][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.829052][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.830847][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.832643][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.834764][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.837020][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.840112][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.849790][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.851654][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.854184][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.858533][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.865032][ T4336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.867379][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.869821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.871462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.873898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.875838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.877605][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.879075][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.880826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.882566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.887624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.893870][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.900739][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.902542][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.904889][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.906799][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.908459][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.909796][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.911407][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.913953][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.915689][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.917090][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.918706][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.920666][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.922558][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.926710][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.928140][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.930261][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.941818][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.943915][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.945841][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.947862][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.949725][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.951521][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.956412][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.958387][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.960114][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.970858][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.974480][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.982332][ T4335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.987557][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.989803][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.991346][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.992744][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.995643][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.005174][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.007822][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.009358][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.011406][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.014260][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.016070][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.022113][ T4329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.024654][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.029098][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.030755][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.032617][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.035459][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.037762][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.039500][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.041149][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.044343][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.050188][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.051909][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.054054][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.055475][ T1614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.061602][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.064100][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.065804][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.074631][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.076405][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.078188][ T1614] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.079497][ T1614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.081051][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.098888][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.100459][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.101989][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.117344][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.120782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.122703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.125198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.126948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.131339][ T4331] device veth0_vlan entered promiscuous mode [ 33.141483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.143601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.145240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.148109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.150093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.152002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.154463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.157838][ T4331] device veth1_vlan entered promiscuous mode [ 33.166273][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.168090][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.169787][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.171598][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.178053][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.180049][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.181691][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.184396][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.189785][ T4336] device veth0_vlan entered promiscuous mode [ 33.191904][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.194692][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.197133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.199085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.200847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.202690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.210273][ T4331] device veth0_macvtap entered promiscuous mode [ 33.212037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.213615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.215076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.216482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.218029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.222168][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.226301][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.229208][ T4336] device veth1_vlan entered promiscuous mode [ 33.239085][ T4331] device veth1_macvtap entered promiscuous mode [ 33.251623][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.253766][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.255528][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.257120][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.258815][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.269046][ T4336] device veth0_macvtap entered promiscuous mode [ 33.271480][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.276853][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.278556][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.280405][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.282294][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.287086][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.289015][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.291864][ T4336] device veth1_macvtap entered promiscuous mode [ 33.297449][ T4329] device veth0_vlan entered promiscuous mode [ 33.300366][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.302877][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.305207][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.306935][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.308882][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.310675][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.313254][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.317964][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.319809][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.321905][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.325704][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.327566][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.329756][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.331275][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.332868][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.334849][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.340486][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.341955][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.346186][ T4329] device veth1_vlan entered promiscuous mode [ 33.352143][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.357455][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.359386][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.361947][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.369052][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.370906][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.372680][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.375599][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.377907][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.379577][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.382192][ T4329] device veth0_macvtap entered promiscuous mode [ 33.393677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.396916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.398897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.401378][ T4336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.403543][ T4336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.405204][ T4336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.406747][ T4336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.409551][ T4329] device veth1_macvtap entered promiscuous mode [ 33.436003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.437695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.439313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.443963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.446534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.448187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.449945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.462434][ T4330] device veth0_vlan entered promiscuous mode [ 33.467023][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.469114][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.470945][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.472765][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.476148][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.479817][ T4330] device veth1_vlan entered promiscuous mode [ 33.486847][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.488426][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.492725][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.494482][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.496029][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.497709][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.499606][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.510021][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.512050][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.514903][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.516865][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.519195][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.526121][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.527811][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.538565][ T4335] device veth0_vlan entered promiscuous mode [ 33.545515][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.547257][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.549177][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.550728][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.551549][ T4330] device veth0_macvtap entered promiscuous mode [ 33.555821][ T4335] device veth1_vlan entered promiscuous mode [ 33.558148][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.559821][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.561400][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.564699][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.567666][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.567749][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.569168][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.570436][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.572112][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.576534][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.578443][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.580057][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.581901][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.585035][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.592599][ T4335] device veth0_macvtap entered promiscuous mode [ 33.597520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.599323][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.601336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.605602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.608982][ T4330] device veth1_macvtap entered promiscuous mode [ 33.615752][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.617194][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.620542][ T4335] device veth1_macvtap entered promiscuous mode [ 33.622565][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.624891][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.626507][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.647279][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.649231][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.651110][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.659587][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.661359][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.664795][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.667067][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.671317][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.673490][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.684139][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.685597][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.687085][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.703508][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.705499][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.707389][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.709237][ T4444] device-mapper: table: 248:0: too large device [ 33.709353][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.710473][ T4444] device-mapper: ioctl: error adding target to table [ 33.712253][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.721505][ T4445] binder: 4443:4445 tried to acquire reference to desc 0, got 1 instead [ 33.725307][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.728637][ T4445] binder: release 4443:4445 transaction 5 out, still active [ 33.730113][ T4445] binder: undelivered TRANSACTION_COMPLETE [ 33.731556][ T4445] binder: 4443:4445 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 33.735646][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.739909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.741771][ T4445] binder: 4445 RLIMIT_NICE not set [ 33.741910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.742840][ T4445] binder: 4445 RLIMIT_NICE not set [ 33.745967][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.748078][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.752134][ T4445] binder: send failed reply for transaction 5, target dead [ 33.755733][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.757764][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.759738][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.761669][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.764999][ T4445] binder: 4443:4445 ioctl c0306201 20000680 returned -14 [ 33.772278][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.775387][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.777968][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.779444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.781296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.795578][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.796016][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.797025][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.800318][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.802149][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.806145][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.809379][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.811541][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.813585][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.815597][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.817812][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.820198][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.822315][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.824672][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.827857][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.830510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.832212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.837336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.850741][ T4450] binder: 4449:4450 tried to acquire reference to desc 0, got 1 instead [ 33.852868][ T4450] binder: 4449:4450 got transaction with invalid data ptr [ 33.858889][ T4452] jffs2: notice: (4452) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 33.862559][ T4450] binder: 4449:4450 transaction call to 4449:0 failed 10/29201/-14, size 252-24 line 3350 [ 33.867255][ T4335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.869012][ T4335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.870872][ T4335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.872669][ T4335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.885430][ T4414] binder: undelivered TRANSACTION_ERROR: 29201 [ 33.915317][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.916875][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.918565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.928602][ T4452] FAULT_INJECTION: forcing a failure. [ 33.928602][ T4452] name failslab, interval 1, probability 0, space 0, times 1 [ 33.930734][ T4452] CPU: 1 PID: 4452 Comm: syz.2.8 Not tainted syzkaller #0 [ 33.932034][ T4452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.933861][ T4452] Call trace: [ 33.934473][ T4452] dump_backtrace+0x1c4/0x1f0 [ 33.935391][ T4452] show_stack+0x2c/0x3c [ 33.936246][ T4452] __dump_stack+0x30/0x40 [ 33.937152][ T4452] dump_stack_lvl+0xf4/0x15c [ 33.938091][ T4452] dump_stack+0x1c/0x5c [ 33.938953][ T4452] should_fail_ex+0x3cc/0x524 [ 33.939933][ T4452] __should_failslab+0xc0/0x11c [ 33.940877][ T4452] should_failslab+0x10/0x28 [ 33.941780][ T4452] kmem_cache_alloc+0x88/0x310 [ 33.942723][ T4452] jffs2_alloc_inode_cache+0x20/0x2c [ 33.943844][ T4452] jffs2_do_new_inode+0x38/0x46c [ 33.944861][ T4452] jffs2_new_inode+0x328/0xa54 [ 33.945880][ T4452] jffs2_create+0x88/0x288 [ 33.946832][ T4452] path_openat+0xda8/0x27a0 [ 33.947802][ T4452] do_filp_open+0x198/0x38c [ 33.948741][ T4452] do_sys_openat2+0x134/0x3fc [ 33.949722][ T4452] __arm64_sys_openat+0x11c/0x150 [ 33.950768][ T4452] invoke_syscall+0x98/0x290 [ 33.951690][ T4452] el0_svc_common+0x13c/0x258 [ 33.952647][ T4452] do_el0_svc+0x5c/0x134 [ 33.953536][ T4452] el0_svc+0x58/0x12c [ 33.954254][ T4452] el0t_64_sync_handler+0x84/0xf0 [ 33.955203][ T4452] el0t_64_sync+0x18c/0x190 [ 33.992088][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.998506][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.999943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.001744][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.005640][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.014757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.017959][ T4457] FAULT_INJECTION: forcing a failure. [ 34.017959][ T4457] name failslab, interval 1, probability 0, space 0, times 0 [ 34.020231][ T4457] CPU: 0 PID: 4457 Comm: syz.0.9 Not tainted syzkaller #0 [ 34.021504][ T4457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 34.023427][ T4457] Call trace: [ 34.024117][ T4457] dump_backtrace+0x1c4/0x1f0 [ 34.025116][ T4457] show_stack+0x2c/0x3c [ 34.025970][ T4457] __dump_stack+0x30/0x40 [ 34.026852][ T4457] dump_stack_lvl+0xf4/0x15c [ 34.027798][ T4457] dump_stack+0x1c/0x5c [ 34.028667][ T4457] should_fail_ex+0x3cc/0x524 [ 34.029642][ T4457] __should_failslab+0xc0/0x11c [ 34.030652][ T4457] should_failslab+0x10/0x28 [ 34.031621][ T4457] slab_pre_alloc_hook+0x6c/0x31c [ 34.032666][ T4457] kmem_cache_alloc_lru+0x60/0x284 [ 34.033744][ T4457] __d_alloc+0x40/0x68c [ 34.034602][ T4457] d_alloc_pseudo+0x28/0x8c [ 34.035439][ T4457] alloc_file_pseudo+0xd8/0x1f4 [ 34.036371][ T4457] anon_inode_getfile+0xc4/0x16c [ 34.037376][ T4457] sync_file_create+0x80/0x1e0 [ 34.038336][ T4457] dma_buf_ioctl+0x780/0xa78 [ 34.039221][ T4457] __arm64_sys_ioctl+0x14c/0x1c8 [ 34.040185][ T4457] invoke_syscall+0x98/0x290 [ 34.041076][ T4457] el0_svc_common+0x13c/0x258 [ 34.041974][ T4457] do_el0_svc+0x5c/0x134 [ 34.042804][ T4457] el0_svc+0x58/0x12c [ 34.043603][ T4457] el0t_64_sync_handler+0x84/0xf0 [ 34.044568][ T4457] el0t_64_sync+0x18c/0x190 [ 34.062211][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.063962][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.065394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.075630][ T4463] binder: 4462:4463 tried to acquire reference to desc 0, got 1 instead [ 34.078888][ T4463] binder: 4462:4463 got transaction with invalid offset (0, min 0 max 104) or object. [ 34.080744][ T4463] binder: 4462:4463 transaction call to 4462:0 failed 15/29201/-22, size 104-24 line 3363 [ 34.083937][ T114] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.141814][ T4468] binder: 4467:4468 tried to acquire reference to desc 0, got 1 instead [ 34.151274][ T4468] binder: tried to use weak ref as strong ref [ 34.154999][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 34.155477][ T114] binder: release 4467:4468 transaction 21 out, still active [ 34.158276][ T114] binder: undelivered TRANSACTION_COMPLETE [ 34.160470][ T4471] binder: 4471:4470 cannot find target node [ 34.308822][ T4489] binder: 4488:4489 ioctl c0306201 20000ac0 returned -14 [ 34.310695][ T4489] binder_alloc: 4488: pid 4488 spamming oneway? 1 buffers allocated for a total size of 6144 [ 34.313368][ T4489] binder: 4488:4489 ioctl c0306201 20000c80 returned -14 [ 34.336650][ T4491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.338886][ T4491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.389524][ T4493] process 'syz.4.21' launched './file0' with NULL argv: empty string added [ 34.493298][ T4339] Bluetooth: hci1: command 0x041b tx timeout [ 34.494463][ T4339] Bluetooth: hci2: command 0x041b tx timeout [ 34.495523][ T4339] Bluetooth: hci0: command 0x041b tx timeout [ 34.496645][ T4339] Bluetooth: hci3: command 0x041b tx timeout [ 34.573120][ T4346] Bluetooth: hci4: command 0x041b tx timeout [ 34.756338][ T4501] loop4: detected capacity change from 0 to 8 [ 34.768416][ T4501] SQUASHFS error: zlib decompression failed, data probably corrupt [ 34.770300][ T4501] SQUASHFS error: Failed to read block 0x9b: -5 [ 34.771741][ T4501] SQUASHFS error: Unable to read metadata cache entry [99] [ 34.773696][ T4501] SQUASHFS error: Unable to read inode 0x127 [ 34.840956][ T4503] ======================================================= [ 34.840956][ T4503] WARNING: The mand mount option has been deprecated and [ 34.840956][ T4503] and is ignored by this kernel. Remove the mand [ 34.840956][ T4503] option from the mount to silence this warning. [ 34.840956][ T4503] ======================================================= [ 34.848988][ T4503] jffs2: notice: (4503) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 34.864473][ T4503] jffs2: warning: (4503) jffs2_sum_write_data: Not enough space for summary, padsize = -2 [ 34.942349][ T4510] overlayfs: statfs failed on './file0' [ 34.946700][ T4510] overlayfs: statfs failed on './file0' [ 35.107102][ T4526] loop4: detected capacity change from 0 to 164 [ 35.124133][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.125880][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.541511][ T4518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.551946][ T4518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.809133][ T4518] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.810908][ T4518] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.812488][ T4518] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.814587][ T4518] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.050743][ T4523] bridge0: port 3(syz_tun) entered blocking state [ 36.051980][ T4523] bridge0: port 3(syz_tun) entered disabled state [ 36.054153][ T4523] device syz_tun entered promiscuous mode [ 36.056030][ T4523] bridge0: port 3(syz_tun) entered blocking state [ 36.057382][ T4523] bridge0: port 3(syz_tun) entered forwarding state [ 36.064840][ T4527] device bridge0 entered promiscuous mode [ 36.066142][ T4527] device macsec1 entered promiscuous mode [ 36.281306][ T4549] loop1: detected capacity change from 0 to 512 [ 36.282840][ T4549] EXT4-fs: inline encryption not supported [ 36.289165][ T4549] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.306129][ T4549] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 36.308568][ T4549] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.44: invalid indirect mapped block 2683928664 (level 1) [ 36.312519][ T4549] EXT4-fs (loop1): 1 truncate cleaned up [ 36.313914][ T4549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.572988][ T4346] Bluetooth: hci3: command 0x040f tx timeout [ 36.573064][ T4339] Bluetooth: hci0: command 0x040f tx timeout [ 36.574170][ T4346] Bluetooth: hci2: command 0x040f tx timeout [ 36.843612][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 37.131381][ T4557] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 [ 37.141785][ T4557] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f] [ 37.145937][ T4342] Bluetooth: hci4: command 0x0419 tx timeout [ 37.150037][ T4557] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf] [ 37.193699][ T4557] pci 0000:00:01.0: BAR 1 [mem 0x10110080-0x101100bf]: assigned [ 37.195291][ T4557] pci 0000:00:01.0: BAR 0 [io 0x1000-0x101f]: assigned [ 37.204254][ T4413] virtio-pci 0000:00:01.0: virtio_pci: leaving for legacy driver [ 37.407440][ T4572] loop1: detected capacity change from 0 to 512 [ 37.461736][ T4572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.535343][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 37.540631][ T4583] loop3: detected capacity change from 0 to 4096 [ 37.653247][ T4583] EXT4-fs: test_dummy_encryption requires encrypt feature [ 37.748551][ T4600] loop2: detected capacity change from 0 to 128 [ 37.771559][ T4600] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.259173][ T4612] loop4: detected capacity change from 0 to 128 [ 38.276174][ T4612] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.309071][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 38.580395][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 38.624203][ T4626] loop1: detected capacity change from 0 to 512 [ 38.636614][ T4626] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.639597][ T4626] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.682178][ T4342] Bluetooth: hci0: command 0x0419 tx timeout [ 38.683587][ T4342] Bluetooth: hci2: command 0x0419 tx timeout [ 38.684929][ T27] audit: type=1326 audit(38.660:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4624 comm="syz.2.66" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91378be8 code=0x0 [ 38.695643][ T4626] EXT4-fs (loop1): 1 truncate cleaned up [ 38.696727][ T4626] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.041519][ T4636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.044891][ T4636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.085000][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 39.300033][ T4642] loop1: detected capacity change from 0 to 8 [ 39.334454][ T4322] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 39.446639][ T4644] loop1: detected capacity change from 0 to 2048 [ 39.491421][ T4644] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.543889][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 40.333532][ T4346] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 40.335269][ T4346] Bluetooth: hci1: Injecting HCI hardware error event [ 40.337690][ T4342] Bluetooth: hci1: hardware error 0x00 [ 40.353002][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #215: comm udevd: reading directory lblock 0 [ 40.356382][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 40.359437][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 40.365351][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 40.372356][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1741: comm udevd: reading directory lblock 0 [ 40.375672][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1599: comm udevd: reading directory lblock 0 [ 40.603969][ T4664] loop4: detected capacity change from 0 to 32768 [ 40.637451][ T4664] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.78 (4664) [ 40.663857][ T4664] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 40.668490][ T4664] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 40.670075][ T4664] BTRFS info (device loop4): using free space tree [ 40.689318][ T4677] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1599: comm udevd: reading directory lblock 0 [ 40.698746][ T4677] udevd[4677]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 40.770563][ T4664] BTRFS info (device loop4): enabling ssd optimizations [ 40.851918][ T4335] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 40.854869][ T4666] loop2: detected capacity change from 0 to 131072 [ 40.928799][ T4322] I/O error, dev loop2, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.020033][ T4709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.038831][ T4412] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.041604][ T4710] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #220: comm dhcpcd: reading directory lblock 0 [ 41.125607][ T4716] loop1: detected capacity change from 0 to 16 [ 41.154391][ T4716] erofs: (device loop1): mounted with root inode @ nid 36. [ 41.853529][ T4346] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 41.855414][ T4346] Bluetooth: hci3: Injecting HCI hardware error event [ 41.860817][ T4339] Bluetooth: hci3: hardware error 0x00 [ 42.072434][ T4724] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #220: comm dhcpcd: reading directory lblock 0 [ 42.149041][ T4729] jffs2: notice: (4729) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 42.167500][ T4730] loop3: detected capacity change from 0 to 2048 [ 42.170317][ T4729] FAULT_INJECTION: forcing a failure. [ 42.170317][ T4729] name failslab, interval 1, probability 0, space 0, times 0 [ 42.190030][ T4729] CPU: 1 PID: 4729 Comm: syz.1.92 Not tainted syzkaller #0 [ 42.191470][ T4729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.193758][ T4729] Call trace: [ 42.194448][ T4729] dump_backtrace+0x1c4/0x1f0 [ 42.195469][ T4729] show_stack+0x2c/0x3c [ 42.196383][ T4729] __dump_stack+0x30/0x40 [ 42.197284][ T4729] dump_stack_lvl+0xf4/0x15c [ 42.198236][ T4729] dump_stack+0x1c/0x5c [ 42.199086][ T4729] should_fail_ex+0x3cc/0x524 [ 42.200034][ T4729] __should_failslab+0xc0/0x11c [ 42.201043][ T4729] should_failslab+0x10/0x28 [ 42.202019][ T4729] __kmem_cache_alloc_node+0x7c/0x318 [ 42.203164][ T4729] __kmalloc+0xc4/0x180 [ 42.204040][ T4729] jffs2_alloc_full_dirent+0x28/0x38 [ 42.205191][ T4729] jffs2_write_dirent+0x10c/0xc3c [ 42.206264][ T4729] jffs2_do_create+0x580/0xa7c [ 42.207244][ T4729] jffs2_create+0x178/0x288 [ 42.208096][ T4729] path_openat+0xda8/0x27a0 [ 42.208957][ T4729] do_filp_open+0x198/0x38c [ 42.209820][ T4729] do_sys_openat2+0x134/0x3fc [ 42.210752][ T4729] __arm64_sys_openat+0x11c/0x150 [ 42.211749][ T4729] invoke_syscall+0x98/0x290 [ 42.212681][ T4729] el0_svc_common+0x13c/0x258 [ 42.213639][ T4729] do_el0_svc+0x5c/0x134 [ 42.214515][ T4729] el0_svc+0x58/0x12c [ 42.215268][ T4729] el0t_64_sync_handler+0x84/0xf0 [ 42.216260][ T4729] el0t_64_sync+0x18c/0x190 [ 42.221818][ T4730] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 42.310837][ T4733] Illegal XDP return value 4025708544 on prog (id 7) dev syz_tun, expect packet loss! [ 42.380421][ T4730] loop3: detected capacity change from 2048 to 1 [ 42.451123][ T4329] syz-executor: attempt to access beyond end of device [ 42.451123][ T4329] loop3: rw=2049, sector=128, nr_sectors = 1 limit=1 [ 42.456893][ T4322] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 42.458750][ T4749] input: syz0 as /devices/virtual/input/input2 [ 42.459802][ T4329] Buffer I/O error on dev loop3, logical block 128, lost sync page write [ 42.492977][ T4342] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 42.561702][ T4758] loop1: detected capacity change from 0 to 128 [ 42.591853][ T4753] Boot memory [40000000 48000000] offlining attempted [ 42.621712][ T1591] kworker/u4:4: attempt to access beyond end of device [ 42.621712][ T1591] loop1: rw=1, sector=145, nr_sectors = 6 limit=128 [ 42.646700][ T4760] tipc: Started in network mode [ 42.647613][ T4760] tipc: Node identity 4, cluster identity 4711 [ 42.648716][ T4760] tipc: Node number set to 4 [ 42.651769][ T4760] tipc: Enabled bearer , priority 0 [ 42.654841][ T3904] Aborting journal on device nvme0n1p2-8. [ 42.656181][ T3904] Buffer I/O error on dev nvme0n1p2, logical block 131072, lost sync page write [ 42.658003][ T3904] JBD2: I/O error when updating journal superblock for nvme0n1p2-8. [ 42.659593][ T4770] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 42.660986][ T4759] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 42.664731][ T4768] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 42.666151][ T4770] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 42.666907][ T4759] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 42.674136][ T4759] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 42.676452][ T4762] Boot memory [78000000 80000000] offlining attempted [ 42.685732][ T4753] page:000000003d7ec0f8 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0xffe00 [ 42.687952][ T4753] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff) CMA [ 42.689375][ T4753] raw: 01ffc00000000000 dead000000000100 dead000000000122 0000000000000000 [ 42.690857][ T4753] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 42.692692][ T4753] page dumped because: unmovable page [ 42.694684][ T4752] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 42.708140][ T4773] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 42.708175][ T4772] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 42.710288][ T4752] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 42.717533][ T4774] loop0: detected capacity change from 0 to 1024 [ 42.727683][ T4775] loop3: detected capacity change from 0 to 2048 [ 42.729105][ T4775] EXT4-fs: Ignoring removed orlov option [ 42.730314][ T4775] EXT4-fs: Ignoring removed i_version option [ 42.784842][ T4784] loop1: detected capacity change from 0 to 128 [ 42.789657][ T4775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.805724][ T4784] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.818737][ T4775] fs-verity: sha512 using implementation "sha512-ce" [ 42.831897][ T4774] hfsplus: xattr searching failed [ 42.842292][ T4775] EXT4-fs (loop3): unmounting filesystem. [ 42.886321][ T4789] fuse: Bad value for 'fd' [ 43.020512][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 43.109682][ T4817] loop4: detected capacity change from 0 to 2048 [ 43.244735][ T4829] block device autoloading is deprecated and will be removed. [ 43.318438][ T4836] syz.1.134 uses obsolete (PF_INET,SOCK_PACKET) [ 43.334235][ T4836] TC_ACT_REPEAT abuse ? [ 43.382851][ T4839] overlayfs: failed to clone upperpath [ 43.639567][ T4863] gadgetfs: bound to dummy_udc driver [ 43.687210][ T4866] kAFS: No cell specified [ 43.816096][ T4875] fuse: Bad value for 'fd' [ 43.913103][ T4858] F2FS-fs (loop1): invalid crc value [ 43.913157][ T14] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 43.919112][ C0] gadgetfs: connected [ 43.920408][ T14] gadgetfs: disconnected [ 43.946330][ T4858] F2FS-fs (loop1): Found nat_bits in checkpoint [ 43.952687][ T4881] ext4: Unknown parameter 'noacl' [ 43.959129][ T4858] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 43.973641][ T4858] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 44.038437][ T4861] gadgetfs: suspended from state 2 [ 44.135979][ T4900] bridge0: port 3(syz_tun) entered blocking state [ 44.138118][ T4900] bridge0: port 3(syz_tun) entered disabled state [ 44.140186][ T4900] device syz_tun entered promiscuous mode [ 44.283069][ T14] usb 1-1: device not accepting address 2, error -71 [ 44.292127][ T4906] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 44.294805][ T4906] hpfs: filesystem error: improperly stopped [ 44.296187][ T4906] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 44.297727][ T4906] hpfs: You really don't want any checks? You are crazy... [ 44.299124][ T4906] hpfs: Code page index out of array [ 44.300174][ T4906] hpfs: code page support is disabled [ 44.301696][ T4906] hpfs: hpfs_map_4sectors(): unaligned read [ 44.303626][ T4906] hpfs: hpfs_map_4sectors(): unaligned read [ 44.304807][ T4906] hpfs: filesystem error: unable to find root dir [ 44.374391][ T4911] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 44.423267][ T4339] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 45.014922][ T4931] binder_user_error: 4 callbacks suppressed [ 45.014931][ T4931] binder: 4930:4931 tried to acquire reference to desc 0, got 1 instead [ 45.019185][ T4931] binder: 4930:4931 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 45.021552][ T4703] binder_debug: 7 callbacks suppressed [ 45.021561][ T4703] binder: undelivered TRANSACTION_COMPLETE [ 45.028534][ T4412] binder: undelivered transaction 42, process died. [ 45.201747][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 45.368154][ T4316] EXT4-fs error: 277 callbacks suppressed [ 45.368166][ T4316] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 45.372456][ T4946] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.176: Detected aborted journal [ 45.376609][ T4946] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.176: Detected aborted journal [ 45.383861][ T4949] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.177: Detected aborted journal [ 45.388598][ T4946] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.176: Detected aborted journal [ 45.396585][ T4946] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.176: Detected aborted journal [ 45.405754][ T4316] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 45.409134][ T9] hfsplus: b-tree write err: -5, ino 25 [ 45.410419][ T9] hfsplus: b-tree write err: -5, ino 4 [ 45.414292][ T4951] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.178: Detected aborted journal [ 45.416047][ T9] hfsplus: b-tree write err: -5, ino 2 [ 45.417882][ T4952] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1533: comm kworker/u4:7: reading directory lblock 0 [ 45.423327][ T4951] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.178: Detected aborted journal [ 45.464142][ T4948] fuse: Bad value for 'fd' [ 45.722898][ T4965] set_capacity_and_notify: 4 callbacks suppressed [ 45.725490][ T4965] loop1: detected capacity change from 0 to 32768 [ 45.742524][ T4965] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.182 (4965) [ 45.765777][ T4965] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 45.770289][ T4965] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 45.779147][ T4965] BTRFS info (device loop1): setting nodatasum [ 45.782713][ T4965] BTRFS info (device loop1): use zlib compression, level 3 [ 45.787094][ T4965] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 45.791627][ T4965] BTRFS info (device loop1): trying to use backup root at mount time [ 45.797252][ T4965] BTRFS info (device loop1): allowing degraded mounts [ 45.798699][ T4965] BTRFS info (device loop1): using free space tree [ 45.809712][ T4995] udevd[4995]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 45.876194][ T5006] loop0: detected capacity change from 0 to 8 [ 45.878601][ T4330] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.047695][ T5014] binder: 5013:5014 tried to acquire reference to desc 0, got 1 instead [ 46.051141][ T5014] binder_alloc: 5013: binder_alloc_buf size 12344 failed, no address space [ 46.054046][ T5014] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 46.057130][ T5014] binder: cannot allocate buffer: no space left [ 46.057159][ T5014] binder: 5013:5014 transaction call to 5013:0 failed 53/29201/-28, size 0-59 line 3247 [ 46.062765][ T4415] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.249186][ T4339] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 46.251084][ T4339] CPU: 1 PID: 4339 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 46.252513][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.254644][ T4339] Workqueue: hci0 hci_rx_work [ 46.255641][ T4339] Call trace: [ 46.256307][ T4339] dump_backtrace+0x1c4/0x1f0 [ 46.257271][ T4339] show_stack+0x2c/0x3c [ 46.258141][ T4339] __dump_stack+0x30/0x40 [ 46.259048][ T4339] dump_stack_lvl+0xf4/0x15c [ 46.260021][ T4339] dump_stack+0x1c/0x5c [ 46.260880][ T4339] sysfs_create_dir_ns+0x244/0x264 [ 46.261952][ T4339] kobject_add_internal+0x5a8/0xb18 [ 46.263020][ T4339] kobject_add+0x144/0x20c [ 46.263934][ T4339] device_add+0x3dc/0xe4c [ 46.264819][ T4339] hci_conn_add_sysfs+0xb8/0x1bc [ 46.265738][ T4339] le_conn_complete_evt+0xd08/0x12c8 [ 46.266845][ T4339] hci_le_conn_complete_evt+0x114/0x3b8 [ 46.267973][ T4339] hci_le_meta_evt+0x2c0/0x4a8 [ 46.269009][ T4339] hci_event_packet+0x64c/0xe60 [ 46.269989][ T4339] hci_rx_work+0x310/0xa70 [ 46.270828][ T4339] process_one_work+0x7e4/0x13bc [ 46.271784][ T4339] worker_thread+0x8cc/0xfe8 [ 46.272740][ T4339] kthread+0x254/0x2e0 [ 46.273561][ T4339] ret_from_fork+0x10/0x20 [ 46.275189][ T4339] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 46.277697][ T4339] Bluetooth: hci0: failed to register connection device [ 46.634579][ T5039] device lo entered promiscuous mode [ 46.645967][ T5039] device tunl0 entered promiscuous mode [ 46.651685][ T5039] device gre0 entered promiscuous mode [ 46.671469][ T5039] device gretap0 entered promiscuous mode [ 46.678803][ T5039] device erspan0 entered promiscuous mode [ 46.685831][ T5039] device ip_vti0 entered promiscuous mode [ 46.691163][ T5039] device ip6_vti0 entered promiscuous mode [ 46.698460][ T5039] device sit0 entered promiscuous mode [ 46.710806][ T5039] device ip6tnl0 entered promiscuous mode [ 46.717951][ T5039] device ip6gre0 entered promiscuous mode [ 46.724986][ T5039] device syz_tun entered promiscuous mode [ 46.732869][ T5039] device ip6gretap0 entered promiscuous mode [ 46.740613][ T5039] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.742183][ T5039] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.744173][ T5039] device bridge0 entered promiscuous mode [ 46.751415][ T5039] device vcan0 entered promiscuous mode [ 46.755349][ T5039] device bond0 entered promiscuous mode [ 46.756462][ T5039] device bond_slave_0 entered promiscuous mode [ 46.757842][ T5039] device bond_slave_1 entered promiscuous mode [ 46.768891][ T5039] device team0 entered promiscuous mode [ 46.770016][ T5039] device team_slave_0 entered promiscuous mode [ 46.771673][ T5039] device team_slave_1 entered promiscuous mode [ 46.780701][ T5039] device dummy0 entered promiscuous mode [ 46.792848][ T5039] device nlmon0 entered promiscuous mode [ 46.801576][ T5039] device caif0 entered promiscuous mode [ 46.806888][ T5039] device batadv0 entered promiscuous mode [ 46.815952][ T5039] device vxcan0 entered promiscuous mode [ 46.819898][ T5039] device vxcan1 entered promiscuous mode [ 46.827289][ T5039] device veth0 entered promiscuous mode [ 46.835928][ T5039] device veth1 entered promiscuous mode [ 46.933024][ T5039] device wg0 entered promiscuous mode [ 47.013081][ T5039] device wg1 entered promiscuous mode [ 47.036178][ T5050] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 47.038489][ T5050] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 47.100521][ T5058] binder: 5057:5058 tried to acquire reference to desc 0, got 1 instead [ 47.102586][ T5058] binder: 5057:5058 got transaction with invalid offsets ptr [ 47.104467][ T5039] device wg2 entered promiscuous mode [ 47.105948][ T5058] binder: 5057:5058 transaction call to 5057:0 failed 58/29201/-14, size 0-252 line 3286 [ 47.109026][ T4705] binder: undelivered TRANSACTION_ERROR: 29201 [ 47.114272][ T5039] device veth0_to_bridge entered promiscuous mode [ 47.128044][ T5039] device veth1_to_bridge entered promiscuous mode [ 47.142475][ T5039] device veth0_to_bond entered promiscuous mode [ 47.154893][ T5039] device veth1_to_bond entered promiscuous mode [ 47.168427][ T5039] device veth0_to_team entered promiscuous mode [ 47.178664][ T5063] loop2: detected capacity change from 0 to 1024 [ 47.184321][ T5039] device veth1_to_team entered promiscuous mode [ 47.198006][ T5039] device veth0_to_batadv entered promiscuous mode [ 47.201018][ T5039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.208134][ T5063] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 47.210029][ T5039] device batadv_slave_0 entered promiscuous mode [ 47.222286][ T5039] device veth1_to_batadv entered promiscuous mode [ 47.229947][ T5039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.233870][ T5039] device batadv_slave_1 entered promiscuous mode [ 47.242148][ T5039] device xfrm0 entered promiscuous mode [ 47.251084][ T5039] device veth0_to_hsr entered promiscuous mode [ 47.265714][ T5039] device veth1_to_hsr entered promiscuous mode [ 47.270008][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 47.282677][ T5039] device hsr0 entered promiscuous mode [ 47.293983][ T5039] device veth1_virt_wifi entered promiscuous mode [ 47.301973][ T5039] device veth0_virt_wifi entered promiscuous mode [ 47.305573][ T5039] device virt_wifi0 entered promiscuous mode [ 47.330174][ T5039] device vlan0 entered promiscuous mode [ 47.331634][ T5039] device vlan1 entered promiscuous mode [ 47.393515][ T5039] device macvlan0 entered promiscuous mode [ 47.433634][ T5039] device macvlan1 entered promiscuous mode [ 47.437695][ T5039] device ipvlan0 entered promiscuous mode [ 47.438959][ T5039] device ipvlan1 entered promiscuous mode [ 47.483188][ T5039] device macvtap0 entered promiscuous mode [ 47.491001][ T5039] device macsec0 entered promiscuous mode [ 47.533092][ T5039] device geneve0 entered promiscuous mode [ 47.541249][ T5039] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.543544][ T5039] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.545126][ T5039] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.546853][ T5039] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.593013][ T5039] device geneve1 entered promiscuous mode [ 47.601689][ T5039] device netdevsim0 entered promiscuous mode [ 47.607256][ T5039] device netdevsim1 entered promiscuous mode [ 47.611042][ T5039] device netdevsim2 entered promiscuous mode [ 47.618318][ T5039] device netdevsim3 entered promiscuous mode [ 47.663549][ T5039] device wlan0 entered promiscuous mode [ 47.753191][ T5039] device wlan1 entered promiscuous mode [ 47.759360][ T5056] netlink: 'syz.3.214': attribute type 39 has an invalid length. [ 47.776446][ T5077] EXT4-fs: 398 callbacks suppressed [ 47.776453][ T5077] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 47.789435][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000d9aace40: rx timeout, send abort [ 47.792109][ C1] vxcan1: j1939_xtp_rx_abort_one: 0x00000000d9aace40: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 47.795164][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000beb8f6d4: rx timeout, send abort Jan 1 00:00:47 syzkaller kern.alert kernel: [ 47.789435][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000d9aace40: rx timeout, send abort[ 47.796916][ C1] vxcan1: j1939_xtp_rx_abort_one: 0x00000000beb8f6d4: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. Jan 1 00:00:47 syzkaller kern.alert kernel: [ 47.795164][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000beb8f6d4: rx timeout, send abort[ 47.803024][ T5036] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 47.821982][ T5079] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 47.825688][ T5079] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 47.848407][ T5048] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 47.875596][ T5082] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 47.883878][ T5082] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 47.885985][ T5077] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 47.930931][ T5079] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 47.943445][ T5082] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 48.253061][ T4339] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 48.254852][ T4339] Bluetooth: hci0: Injecting HCI hardware error event [ 48.256573][ T4339] Bluetooth: hci0: hardware error 0x00 [ 48.483974][ T5101] loop2: detected capacity change from 0 to 32768 [ 48.489044][ T5101] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop2 scanned by syz.2.228 (5101) [ 48.492336][ T5101] BTRFS info (device loop2): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 48.495705][ C1] net_ratelimit: 19 callbacks suppressed [ 48.497644][ T5101] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 48.499555][ T5101] BTRFS error (device loop2): unrecognized mount option 'appraise_type=imasig' [ 48.502337][ T5101] BTRFS error (device loop2): open_ctree failed: -22 [ 48.534038][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 48.540168][ T4891] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop2 scanned by udevd (4891) [ 48.548164][ T5104] udevd[5104]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 48.558986][ T5103] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.561084][ T5103] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.562809][ T5103] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.564799][ T5103] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.809707][ T5112] loop4: detected capacity change from 0 to 128 [ 48.827551][ T5112] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 48.870253][ T5112] input: syz1 as /devices/virtual/input/input3 [ 48.923305][ T27] audit: type=1326 audit(48.910:3): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.3.237" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c578be8 code=0x0 [ 49.014635][ T5135] capability: warning: `syz.1.240' uses deprecated v2 capabilities in a way that may be insecure [ 49.148809][ T5140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.241'. [ 50.383147][ T5146] EXT4-fs error: 272 callbacks suppressed [ 50.383156][ T5146] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.243: Detected aborted journal [ 50.428592][ T5153] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.245: Detected aborted journal [ 50.437999][ T5154] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.246: Detected aborted journal [ 50.442475][ T5153] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.245: Detected aborted journal [ 50.449719][ T5157] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.247: Detected aborted journal [ 50.455671][ T5154] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.246: Detected aborted journal [ 50.457961][ T5153] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.245: Detected aborted journal [ 50.472031][ T5153] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.245: Detected aborted journal [ 50.478608][ T5158] loop2: detected capacity change from 0 to 512 [ 50.480018][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #215: comm udevd: reading directory lblock 0 [ 50.482886][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 50.496680][ T5158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.558688][ T5158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.573133][ T4339] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 50.637558][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 51.775214][ T5181] overlayfs: failed to clone upperpath [ 51.792600][ T5181] overlayfs: failed to clone upperpath [ 51.911089][ T5186] Zero length message leads to an empty skb [ 51.938485][ T5188] loop0: detected capacity change from 0 to 512 [ 51.975858][ T5188] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.004745][ T5188] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.005849][ T5188] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 52.009598][ T5188] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.256: attempt to clear invalid blocks 2 len 1 [ 52.015543][ T5188] EXT4-fs (loop0): Remounting filesystem read-only [ 52.028334][ T5188] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 52.040905][ T5188] EXT4-fs (loop0): Remounting filesystem read-only [ 52.042521][ T5188] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.256: invalid indirect mapped block 1819239214 (level 0) [ 52.058277][ T5188] EXT4-fs (loop0): Remounting filesystem read-only [ 52.059765][ T5188] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.256: invalid indirect mapped block 1819239214 (level 1) [ 52.066410][ T5192] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 52.067729][ T5192] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.076652][ T5188] EXT4-fs (loop0): Remounting filesystem read-only [ 52.083247][ T5192] vhci_hcd vhci_hcd.0: Device attached [ 52.086781][ T5188] EXT4-fs (loop0): 1 truncate cleaned up [ 52.087962][ T5188] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.137116][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 52.240197][ T5196] vhci_hcd: connection closed [ 52.242295][ T9] vhci_hcd: stop threads [ 52.243696][ T9] vhci_hcd: release socket [ 52.245122][ T9] vhci_hcd: disconnect device [ 52.263038][ T4705] vhci_hcd: vhci_device speed not set [ 52.297238][ T5202] binder: 5201:5202 tried to acquire reference to desc 0, got 1 instead [ 52.301729][ T5202] binder: 5201:5202 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 52.307306][ T5202] binder: 5202 RLIMIT_NICE not set [ 52.309674][ T5202] binder: undelivered transaction 63, put_user failed [ 52.318693][ T5202] binder: 5201:5202 ioctl c0306201 2000c200 returned -14 [ 52.321789][ T4415] binder: undelivered TRANSACTION_COMPLETE [ 52.395235][ T5199] netlink: 'syz.0.260': attribute type 9 has an invalid length. [ 52.396929][ T5199] netlink: 'syz.0.260': attribute type 6 has an invalid length. [ 52.811146][ T5212] EXT4-fs: 193 callbacks suppressed [ 52.811161][ T5212] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 52.820827][ T5208] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 52.822470][ T5214] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 52.824617][ T5212] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 52.825208][ T5214] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 52.839003][ T5219] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 52.841585][ T5212] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 52.843074][ T5212] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 52.844903][ T5219] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 52.850492][ T5214] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 52.872271][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.138866][ T5241] nvmet_tcp: address family 255 not supported [ 53.260365][ T5258] loop0: detected capacity change from 0 to 3904 [ 53.297729][ T5258] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 53.299642][ T5258] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 53.301013][ T5258] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 53.302308][ T5258] loop0: [ 53.612926][ C1] net_ratelimit: 8 callbacks suppressed [ 53.828836][ T5281] loop2: detected capacity change from 0 to 512 [ 53.855329][ T5285] ip_tables: iptables: counters copy to user failed while replacing table [ 53.897075][ T5281] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.972111][ T5281] FAULT_INJECTION: forcing a failure. [ 53.972111][ T5281] name failslab, interval 1, probability 0, space 0, times 0 [ 53.987860][ T5281] CPU: 1 PID: 5281 Comm: syz.2.294 Not tainted syzkaller #0 [ 53.989582][ T5281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 53.991973][ T5281] Call trace: [ 53.992734][ T5281] dump_backtrace+0x1c4/0x1f0 [ 53.993760][ T5281] show_stack+0x2c/0x3c [ 53.994714][ T5281] __dump_stack+0x30/0x40 [ 53.995684][ T5281] dump_stack_lvl+0xf4/0x15c [ 53.996706][ T5281] dump_stack+0x1c/0x5c [ 53.997645][ T5281] should_fail_ex+0x3cc/0x524 [ 53.998659][ T5281] __should_failslab+0xc0/0x11c [ 53.999778][ T5281] should_failslab+0x10/0x28 [ 54.000792][ T5281] __kmem_cache_alloc_node+0x7c/0x318 [ 54.001980][ T5281] kmalloc_trace+0x48/0x94 [ 54.002981][ T5281] sctp_endpoint_new+0x94/0x838 [ 54.004018][ T5281] sctp_init_sock+0x654/0xf74 [ 54.005040][ T5281] inet_create+0xa24/0xd84 [ 54.006038][ T5281] __sock_create+0x448/0x8a8 [ 54.007006][ T5281] __sys_socket+0xc0/0x1b0 [ 54.007971][ T5281] __arm64_sys_socket+0x7c/0x94 [ 54.009030][ T5281] invoke_syscall+0x98/0x290 [ 54.010018][ T5281] el0_svc_common+0x13c/0x258 [ 54.011038][ T5281] do_el0_svc+0x5c/0x134 [ 54.011867][ T5281] el0_svc+0x58/0x12c [ 54.012702][ T5281] el0t_64_sync_handler+0x84/0xf0 [ 54.013832][ T5281] el0t_64_sync+0x18c/0x190 [ 54.021882][ T5303] overlayfs: failed to clone upperpath [ 54.071286][ T5307] device syzkaller0 entered promiscuous mode [ 54.078823][ T5307] tipc: Enabled bearer , priority 0 [ 54.081654][ T5306] tipc: Resetting bearer [ 54.094970][ T4336] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 54.103921][ T4336] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 54.453941][ T5306] tipc: Disabling bearer [ 54.495667][ T4336] device syz_tun left promiscuous mode [ 54.498970][ T4336] bridge0: port 3(syz_tun) entered disabled state [ 54.575755][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 54.662998][ C0] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 54.665221][ C0] bridge0: topology change detected, propagating [ 55.213319][ T5344] device syzkaller0 entered promiscuous mode [ 55.290775][ T5345] 9pnet_fd: p9_fd_create_unix (5345): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 55.630187][ T4316] EXT4-fs error: 280 callbacks suppressed [ 55.630197][ T4316] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 55.639443][ T5347] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.313: Detected aborted journal [ 55.640623][ T5346] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1531: comm syz-executor: reading directory lblock 0 [ 55.647200][ T5347] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.313: Detected aborted journal [ 55.649941][ T5349] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.323: Detected aborted journal [ 55.659598][ T5349] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.323: Detected aborted journal [ 55.663073][ T5351] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1533: comm kworker/u4:0: reading directory lblock 0 [ 55.671745][ T5352] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1533: comm kworker/u4:0: reading directory lblock 0 [ 56.258175][ T5353] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1531: comm syz-executor: reading directory lblock 0 [ 56.258196][ T5354] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.315: Detected aborted journal [ 56.296674][ T5356] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 56.299008][ T5356] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 57.816640][ T5376] EXT4-fs: 162 callbacks suppressed [ 57.816648][ T5376] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 57.820936][ T5378] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 57.827998][ T5376] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 57.828830][ T5383] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 57.835468][ T5378] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 57.838368][ T5383] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 57.843299][ T5378] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 57.856437][ T5383] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 57.856702][ T5378] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 57.864742][ T5378] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 58.779545][ T5398] binder: BINDER_SET_CONTEXT_MGR already set [ 58.781017][ T5398] binder: 5396:5398 ioctl 4018620d 20000a00 returned -16 [ 58.790066][ T5398] binder: tried to use weak ref as strong ref [ 58.791337][ T5398] binder: 5396:5398 Acquire 1 refcount change on invalid ref 0 ret -22 [ 58.791610][ T5398] binder: 5396:5398 got transaction to invalid handle, 1 [ 58.795429][ T5398] binder: 5398:5396 cannot find target node [ 58.796637][ T5398] binder: 5396:5398 transaction async to 0:0 failed 66/29201/-22, size 0-24 line 3062 [ 58.804170][ T5398] binder: 5396:5398 got transaction to invalid handle, 1 [ 58.809657][ T5398] binder: 5398:5396 cannot find target node [ 58.810792][ T5398] binder: 5396:5398 transaction async to 0:0 failed 67/29201/-22, size 0-0 line 3062 [ 58.812642][ T5398] binder: 5396:5398 ioctl c0306201 20000c80 returned -14 [ 59.212913][ C1] net_ratelimit: 25 callbacks suppressed [ 59.841349][ T5411] loop4: detected capacity change from 0 to 1024 [ 59.848449][ T5411] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.868099][ T5411] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 60.222652][ T5417] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 60.225649][ T5417] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.225649][ T5417] [ 60.227543][ T5417] EXT4-fs (loop4): Total free blocks count 0 [ 60.228705][ T5417] EXT4-fs (loop4): Free/Dirty block details [ 60.229873][ T5417] EXT4-fs (loop4): free_blocks=0 [ 60.230685][ T5417] EXT4-fs (loop4): dirty_blocks=0 [ 60.231671][ T5417] EXT4-fs (loop4): Block reservation details [ 60.232891][ T5417] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 60.484941][ T4068] EXT4-fs warning (device nvme0n1p2): htree_dirblock_to_tree:1083: inode #98: lblock 0: comm crond: error -5 reading directory block [ 60.506609][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 60.886249][ T5418] EXT4-fs error: 78 callbacks suppressed [ 60.886256][ T5418] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1531: comm syz-executor: reading directory lblock 0 [ 60.888881][ T5420] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.336: Detected aborted journal [ 60.892843][ T5419] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.335: Detected aborted journal [ 60.898569][ T5420] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.336: Detected aborted journal [ 60.906577][ T5422] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.337: Detected aborted journal [ 60.906933][ T5423] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.338: Detected aborted journal [ 60.911476][ T5420] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.336: Detected aborted journal [ 60.915060][ T5423] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.338: Detected aborted journal [ 60.915117][ T5419] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.335: Detected aborted journal [ 60.917653][ T5420] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.336: Detected aborted journal [ 60.927018][ T5425] bridge0: port 3(syz_tun) entered blocking state [ 60.928479][ T5425] bridge0: port 3(syz_tun) entered disabled state [ 60.943822][ T5425] device bridge0 left promiscuous mode [ 60.951460][ T5425] bridge0: port 3(syz_tun) entered blocking state [ 60.953242][ T5425] bridge0: port 3(syz_tun) entered forwarding state [ 60.957397][ T5421] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 60.966109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.203625][ T5434] device syzkaller0 entered promiscuous mode [ 62.205805][ T5439] netlink: 58 bytes leftover after parsing attributes in process `syz.4.342'. [ 62.211849][ T5439] device syzkaller0 entered promiscuous mode [ 62.966085][ T5433] EXT4-fs: 63 callbacks suppressed [ 62.966098][ T5433] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 63.456918][ T4316] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 63.467836][ T5443] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 63.470516][ T5444] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 63.473823][ T5443] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 63.479636][ T5447] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 63.483436][ T5449] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 63.483466][ T5447] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 63.487728][ T5444] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 63.492931][ T5444] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 63.495474][ T5446] tipc: Enabling of bearer rejected, failed to enable media [ 63.506117][ T5450] FAULT_INJECTION: forcing a failure. [ 63.506117][ T5450] name failslab, interval 1, probability 0, space 0, times 0 [ 63.508478][ T5450] CPU: 0 PID: 5450 Comm: syz.4.346 Not tainted syzkaller #0 [ 63.509990][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 63.511988][ T5450] Call trace: [ 63.512639][ T5450] dump_backtrace+0x1c4/0x1f0 [ 63.513622][ T5450] show_stack+0x2c/0x3c [ 63.514447][ T5450] __dump_stack+0x30/0x40 [ 63.515318][ T5450] dump_stack_lvl+0xf4/0x15c [ 63.516289][ T5450] dump_stack+0x1c/0x5c [ 63.517216][ T5450] should_fail_ex+0x3cc/0x524 [ 63.518250][ T5450] __should_failslab+0xc0/0x11c [ 63.519302][ T5450] should_failslab+0x10/0x28 [ 63.520298][ T5450] __kmem_cache_alloc_node+0x7c/0x318 [ 63.521422][ T5450] kmalloc_trace+0x48/0x94 [ 63.522318][ T5450] percpu_ref_init+0xc8/0x2f0 [ 63.523307][ T5450] blkg_alloc+0xf8/0x6d4 [ 63.524223][ T5450] blkcg_init_disk+0x1d0/0x480 [ 63.525280][ T5450] __alloc_disk_node+0x234/0x438 [ 63.526388][ T5450] __blk_alloc_disk+0x40/0xb8 [ 63.527434][ T5450] dm_create+0x514/0xf48 [ 63.528378][ T5450] dev_create+0xf4/0x25c [ 63.529300][ T5450] dm_ctl_ioctl+0xaac/0xf1c [ 63.530259][ T5450] __arm64_sys_ioctl+0x14c/0x1c8 [ 63.531298][ T5450] invoke_syscall+0x98/0x290 [ 63.532287][ T5450] el0_svc_common+0x13c/0x258 [ 63.533260][ T5450] do_el0_svc+0x5c/0x134 [ 63.534152][ T5450] el0_svc+0x58/0x12c [ 63.535026][ T5450] el0t_64_sync_handler+0x84/0xf0 [ 63.536080][ T5450] el0t_64_sync+0x18c/0x190 [ 64.342772][ C0] net_ratelimit: 13 callbacks suppressed [ 64.494375][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495636][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.332944][ T5463] mount: server 127. not responding, timed out [ 66.417214][ T5471] EXT4-fs error: 80 callbacks suppressed [ 66.417223][ T5471] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1531: comm syz-executor: reading directory lblock 0 [ 66.418536][ T5472] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.351: Detected aborted journal [ 66.428744][ T5473] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.352: Detected aborted journal [ 66.432787][ T5473] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.352: Detected aborted journal [ 66.437157][ T5475] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.353: Detected aborted journal [ 66.437272][ T5472] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.351: Detected aborted journal [ 66.440823][ T4316] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 66.446680][ T5473] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.352: Detected aborted journal [ 66.457514][ T5473] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.352: Detected aborted journal [ 66.462454][ T5475] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.353: Detected aborted journal [ 66.512001][ T5480] binder: 5478:5480 tried to acquire reference to desc 0, got 1 instead [ 66.514412][ T5480] binder_alloc: 5478: pid 5478 spamming oneway? 2 buffers allocated for a total size of 5120 [ 66.517123][ T5480] binder: 5478:5480 BC_FREE_BUFFER u0000000020ffd000 matched unreturned or currently freeing buffer [ 66.519587][ T4705] binder: release 5478:5480 transaction 74 out, still active [ 66.521127][ T4705] binder: undelivered TRANSACTION_COMPLETE [ 66.522425][ T4705] binder: undelivered TRANSACTION_COMPLETE [ 66.523812][ T4705] binder: undelivered TRANSACTION_COMPLETE [ 66.530854][ T4535] binder: undelivered transaction 73, process died. [ 66.532083][ T4535] binder: undelivered transaction 72, process died. [ 66.535289][ T4535] binder: send failed reply for transaction 74, target dead [ 68.048068][ T4316] EXT4-fs: 37 callbacks suppressed [ 68.048077][ T4316] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 68.056214][ T5482] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 68.060818][ T5483] loop0: detected capacity change from 0 to 256 [ 68.072103][ T5482] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 68.076702][ T5482] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 68.145103][ T5482] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 68.249244][ T5482] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 68.258059][ T5482] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 68.262687][ T5482] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 68.900626][ T5482] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 69.612400][ C1] net_ratelimit: 15 callbacks suppressed [ 69.615034][ T3435] cfg80211: failed to load regulatory.db [ 69.770109][ T5488] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 71.602459][ T4316] EXT4-fs error: 38 callbacks suppressed [ 71.602468][ T4316] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 71.605778][ T4316] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 71.608082][ T5500] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1531: comm syz-executor: reading directory lblock 0 [ 71.610944][ T4316] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 71.620418][ T5503] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.361: Detected aborted journal [ 71.624064][ T5503] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.361: Detected aborted journal [ 71.625644][ T5501] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.360: Detected aborted journal [ 71.627530][ T5502] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.362: Detected aborted journal [ 71.634086][ T4316] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 71.636718][ T5503] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.361: Detected aborted journal [ 71.698200][ T5505] device syzkaller0 entered promiscuous mode [ 71.854630][ T5506] netlink: 'syz.3.362': attribute type 4 has an invalid length. [ 71.856099][ T5506] netlink: 17 bytes leftover after parsing attributes in process `syz.3.362'. [ 73.559853][ T5512] EXT4-fs: 38 callbacks suppressed [ 73.559860][ T5512] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 73.560408][ T5513] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 73.567033][ T5515] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 73.571007][ T5517] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 73.571095][ T5512] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 73.575201][ T5515] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 73.575829][ T5513] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 73.578615][ T5517] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 73.581259][ T5512] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 73.588949][ T5513] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 73.980319][ T5516] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 74.732027][ C1] net_ratelimit: 19 callbacks suppressed SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: repeatedly failed to execute the program proc=5 req=308 state=1 status=67 (errno 9: Bad file descriptor) [ 75.780007][ T5534] bridge0: port 3(syz_tun) entered disabled state [ 75.834178][ T5534] device syz_tun left promiscuous mode [ 75.835289][ T5534] bridge0: port 3(syz_tun) entered disabled state [ 75.928010][ T5532] tipc: Resetting bearer [ 75.966734][ T5532] tipc: Disabling bearer [ 75.970294][ T4335] bridge0: port 3(syz_tun) entered disabled state [ 76.023149][ T4335] device syz_tun left promiscuous mode [ 76.024260][ T4335] bridge0: port 3(syz_tun) entered disabled state [ 76.523282][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.625907][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.628762][ T1] EXT4-fs error: 91 callbacks suppressed [ 76.628771][ T1] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 76.633977][ T1] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 76.636450][ T1] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 76.638648][ T1] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 76.640926][ T1] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 76.643673][ T1] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 76.646233][ T1] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 76.648367][ T1] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 76.650646][ T1] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 76.653444][ T1] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #2: comm init: reading directory lblock 0 [ 76.723126][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.805141][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.053060][ T39] tipc: Left network mode [ 79.188155][ T39] device hsr_slave_0 left promiscuous mode [ 79.224119][ T39] device hsr_slave_1 left promiscuous mode [ 79.302397][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.304011][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.306085][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.307532][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.309346][ T39] device bridge_slave_1 left promiscuous mode [ 79.311210][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.352545][ T39] device bridge_slave_0 left promiscuous mode [ 79.353799][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.471954][ T39] device veth1_macvtap left promiscuous mode [ 79.473383][ T39] device veth0_macvtap left promiscuous mode [ 79.474624][ T39] device veth1_vlan left promiscuous mode [ 79.475864][ T39] device veth0_vlan left promiscuous mode [ 79.547070][ T39] bond1 (unregistering): (slave vlan0): Releasing backup interface [ 79.592513][ T39] bond1 (unregistering): Released all slaves [ 80.011716][ C1] net_ratelimit: 18 callbacks suppressed [ 81.713548][ T39] team0 (unregistering): Port device team_slave_1 removed [ 81.902731][ T39] team0 (unregistering): Port device team_slave_0 removed [ 82.072192][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.151258][ T3939] EXT4-fs error: 86 callbacks suppressed [ 82.151269][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #215: comm udevd: reading directory lblock 0 [ 82.159817][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 82.162475][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 82.164915][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 82.167549][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1741: comm udevd: reading directory lblock 0 [ 82.170009][ T3939] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1599: comm udevd: reading directory lblock 0 [ 82.292208][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.882643][ T39] bond0 (unregistering): Released all slaves [ 85.211378][ C1] net_ratelimit: 3 callbacks suppressed