last executing test programs: 57.449276007s ago: executing program 3 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 57.183082864s ago: executing program 3 (id=10): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0x1, 0x12) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 57.020428551s ago: executing program 3 (id=11): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x0, 0xe, 0x0, &(0x7f0000000c00)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 56.54095202s ago: executing program 3 (id=20): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x210000, &(0x7f0000000200), 0x1, 0x56f, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000bc0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000c00)='./bus\x00', &(0x7f0000000c40), 0x8, &(0x7f0000000c80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103a42, 0x32) syz_mount_image$fuse(0x0, &(0x7f0000003900)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000060c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ftruncate(r0, 0x6000000) chdir(&(0x7f00000002c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x8042, 0x34) 54.21694432s ago: executing program 3 (id=33): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xacd6a4e1331c8c5c, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 53.966804646s ago: executing program 1 (id=44): bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@local, 0x0, 0x0, 0x4e21, 0xf955, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa03, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="18010000210001000400000000000000e0000002000000000000000000000000fc0200000000000000000000000000004e230000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011007f000001000000000000000000000000fe880000000000000000000000000101fe80000000000000efff0000000000aae000000100000000000000000000000032000000020000000a0000007f0000010000000000000000000000007f00000100000000000000000000000064010102000000000000000000000000fc02000000"], 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 53.848299527s ago: executing program 1 (id=46): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 53.636294329s ago: executing program 1 (id=49): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4100, 0x1004}], 0x1}, 0x406) 53.53145208s ago: executing program 1 (id=51): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x210000, &(0x7f0000000200), 0x1, 0x56f, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000bc0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000c00)='./bus\x00', &(0x7f0000000c40), 0x8, &(0x7f0000000c80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103a42, 0x32) syz_mount_image$fuse(0x0, &(0x7f0000003900)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000060c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ftruncate(r0, 0x6000000) chdir(&(0x7f00000002c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x8042, 0x34) 52.08441307s ago: executing program 3 (id=60): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x100000, 0xe, 0x0, &(0x7f0000000280)="000600000000000000af5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 51.718167647s ago: executing program 32 (id=60): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x100000, 0xe, 0x0, &(0x7f0000000280)="000600000000000000af5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 51.654826044s ago: executing program 1 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) capset(0x0, &(0x7f00000003c0)={0x200000, 0x200000}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x18e) close(r4) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x16, 0xf, &(0x7f0000000ac0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000780)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./config/usb_gadget/g1/functions/SourceSink.0/iso_qlen\x00', 0x2, 0x8) write(r7, &(0x7f0000000c00)='5\x00', 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r6, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, 0x10, &(0x7f00000009c0), 0x0, 0x0, 0x11, 0x8, 0x0, 0x0}}, 0x9) 49.617371554s ago: executing program 1 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="38000000010a01080000000000000000050000000900010073797aff18ae31"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008044) 49.373181709s ago: executing program 33 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="38000000010a01080000000000000000050000000900010073797aff18ae31"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008044) 43.93004641s ago: executing program 0 (id=115): socket$netlink(0x10, 0x3, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[], 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000001700)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000001740)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000001780), 0x3) 42.223297416s ago: executing program 0 (id=117): r0 = fsopen(&(0x7f0000000200)='fuseblk\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x100}) mount$9p_fd(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 42.036192665s ago: executing program 0 (id=118): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000001c0)=0x100, 0x4) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4004004) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 41.848296165s ago: executing program 0 (id=122): syz_mount_image$ext4(&(0x7f0000002bc0)='ext4\x00', &(0x7f0000002c00)='./file2\x00', 0x2000410, &(0x7f0000002c40)={[{@noinit_itable}, {@jqfmt_vfsv1}]}, 0xc1, 0x7eb, &(0x7f0000002c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000003480)='./file1\x00', 0x80042, 0x121) mkdirat(0xffffffffffffff9c, &(0x7f00000034c0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000003500)='./proc\x00', &(0x7f0000003540)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000003580)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write$cgroup_int(r1, &(0x7f00000035c0)=0x8, 0x12) pwrite64(r0, &(0x7f0000003600)='\"', 0x1, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc4}}) 40.007720985s ago: executing program 0 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x20000000) 39.368073291s ago: executing program 0 (id=133): socket$inet(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "b1d5562d4053a7eaf787ede3aa38f355"}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008010) 38.642554755s ago: executing program 34 (id=133): socket$inet(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "b1d5562d4053a7eaf787ede3aa38f355"}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008010) 37.14723993s ago: executing program 4 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000500)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1}, 0x50) 35.955993472s ago: executing program 4 (id=146): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 35.484513001s ago: executing program 4 (id=150): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000f80)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000fc0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001000)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001040)=0x5) fsopen(&(0x7f0000000000)='hfsplus\x00', 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000240)="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", 0x557, 0xfffffffffffffffb) connect$unix(0xffffffffffffffff, &(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000001180), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000011c0)=0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) 35.445362955s ago: executing program 4 (id=151): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x589, &(0x7f0000000880)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000540)='7', 0x1) keyctl$read(0xb, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002e80)={0x50, 0x0, 0x0, {0x7, 0x2d, 0xffffffff, 0x400000, 0xb3bb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x7fffffff}}, 0x50) 34.176464226s ago: executing program 4 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) move_mount(r0, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x262) 31.279662385s ago: executing program 4 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0xffffffffffffffff, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$tun(r0, &(0x7f0000000300)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0x8, 0x1}}}}}, 0x1d) 31.014822792s ago: executing program 35 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0xffffffffffffffff, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$tun(r0, &(0x7f0000000300)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0x8, 0x1}}}}}, 0x1d) 19.569625282s ago: executing program 2 (id=202): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x24}, @hci_rp_read_local_oob_data={{0x9}, {0x3, "cb5b02250c92891b4d2e9b3648cf23f7", "47cab593a4381c9d02e3167f4185a7ed"}}}}, 0x27) 18.368412016s ago: executing program 2 (id=204): syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0), 0x0, 0x0) add_key(&(0x7f0000000700)='asymmetric\x00', 0x0, &(0x7f0000000740)="30820110", 0x4, 0xfffffffffffffffe) mount(0x0, &(0x7f00000008c0)='./sys\x00', 0x0, 0x800004, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 18.155982368s ago: executing program 2 (id=208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000100)=0xa40, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000000000014f194e20002b"], 0x65) 13.240622965s ago: executing program 2 (id=218): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x210000, &(0x7f0000000200), 0x1, 0x56f, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000bc0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000c00)='./bus\x00', &(0x7f0000000c40), 0x8, &(0x7f0000000c80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103a42, 0x32) syz_mount_image$fuse(0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000060c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ftruncate(r0, 0x6000000) chdir(&(0x7f00000002c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x8042, 0x34) 12.087420644s ago: executing program 2 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000840)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000900)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000980)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a00), 0x40000000000003e, 0xc000) recvmmsg(r1, &(0x7f0000000a40), 0x4000087, 0x2, 0x0) add_key(&(0x7f0000000740)='pkcs7_test\x00', &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file0\x00', 0x0, &(0x7f0000000b80), 0x1, 0x44b, &(0x7f0000000bc0)="$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") r3 = open(&(0x7f0000001080)='.\x00', 0x8000, 0x112) getdents(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3e0, 0x100, 0x100, 0x1e8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @local, 0xff000000, 0xffffff00, 0x8, 0x2, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0xa624, 0x4fd5, 0x5, 0x3, 0x2, 0x401, 'pim6reg1\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x0, 0x4}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c212cb1fe1b16c00e51abdc3f2a502e059e562d94b2881c38ba41898a8c9"}}, {{@arp={@multicast1, @local, 0xffffffff, 0x0, 0x0, 0x4, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x5, 0xfffc, 0x1ff, 0x2, 0x1, 0xf001, 'veth0\x00', 'tunl0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@broadcast, @multicast1, 0xff, 0xff000000, 0x7, 0x7, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x521, 0xffff, 0x8, 0xc80b, 0x40, 'vcan0\x00', 'netdevsim0\x00', {}, {0x461919d8c8d4b5e9}, 0x0, 0x12}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private=0xa010101, @multicast1, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000001400000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000700)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) 9.611960859s ago: executing program 5 (id=231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELSET={0x114, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_USERDATA={0xc3, 0xd, 0x1, 0x0, "e77e92a13f4e90bf289818ed9a7d8dab7eeba035a9a1e47f5c7aeb321bd7bb1d37e58705bf548a2bf18025b4f0d7e633e1ef1a994046342cf35cf870676ae26338f334ffb1b65b56d1e13ce7da39a2aac4db42971f0329601e9d805566780c8ce952c2892bc11d3f2b2ee3c66b2bd1bc278abe3bd3ddacf194400664776fe311d5ae131081e29ff7a97322897a4e3a8a91f704f6a25e1fcaf1db3a0064e70b42918c0d2923ca50231a16f8f7dd3995c2a83af344ca9df53624376e3f38b147"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x4c}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x180}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0x228}}, 0x40000c0) 9.50495548s ago: executing program 5 (id=232): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0x7, 0x4) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r0, 0xee309000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0xa, 0x4e1f, 0xffffffff, @loopback, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00000000c0)=0x5, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 9.474846253s ago: executing program 5 (id=233): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x5) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x1, 0x0, 0x5, &(0x7f00000003c0)={0x9, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c70400000000000000eb8393"}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x1000040, &(0x7f0000000680)={[{@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@noquota}, {@delalloc}, {@noacl}, {@nodioread_nolock}, {@errors_remount}, {@dioread_nolock}]}, 0x11, 0x5a3, &(0x7f0000000700)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r6 = syz_open_procfs(0x0, &(0x7f0000000cc0)='fdinfo\x00') getdents64(r6, &(0x7f0000000d00)=""/4098, 0x1002) 8.209118913s ago: executing program 5 (id=236): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000540)=0x0) timer_settime(r1, 0x1, &(0x7f0000000580)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./bus\x00', 0x4006, &(0x7f0000000780)={[{}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@discard}, {@nouid32}, {@data_journal}, {@jqfmt_vfsold}, {@jqfmt_vfsv1}, {@sysvgroups}, {@nobh}, {@journal_dev={'journal_dev', 0x3d, 0x5074}}, {@auto_da_alloc_val}]}, 0x4, 0x46b, &(0x7f0000000840)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000cc0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000d00)='./bus\x00', &(0x7f0000000d40), 0x8, &(0x7f0000000d80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000dc0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file2\x00', 0x70002, 0x2d) 7.517575265s ago: executing program 5 (id=243): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/vlan_protocol\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='0x8100', 0x6) 6.529352207s ago: executing program 6 (id=246): r0 = memfd_create(&(0x7f0000000000)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000001480)='\x00', 0x0, 0x0, 0x1000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0xffff, @multicast1=0xe0000306}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001500)="be", 0x1}], 0x1}, 0x0) 5.618185931s ago: executing program 6 (id=247): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_setup(0xd, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f00000005c0)={0x1000000, 0x0, 0x0, 0x8, 0x8001, r0, 0x0}]) 5.464276987s ago: executing program 2 (id=248): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x210000, &(0x7f0000000200), 0x1, 0x56f, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000bc0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000c00)='./bus\x00', &(0x7f0000000c40), 0x8, &(0x7f0000000c80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103a42, 0x32) syz_mount_image$fuse(0x0, &(0x7f0000003900)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000440, 0x0, 0xff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ftruncate(r0, 0x6000000) chdir(&(0x7f00000002c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x8042, 0x34) 5.464026516s ago: executing program 6 (id=249): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x600081, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 5.366751597s ago: executing program 36 (id=248): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x210000, &(0x7f0000000200), 0x1, 0x56f, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000bc0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000c00)='./bus\x00', &(0x7f0000000c40), 0x8, &(0x7f0000000c80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103a42, 0x32) syz_mount_image$fuse(0x0, &(0x7f0000003900)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000440, 0x0, 0xff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ftruncate(r0, 0x6000000) chdir(&(0x7f00000002c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x8042, 0x34) 5.2330825s ago: executing program 5 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x7c, r1, 0x5, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x6d, 0x1, @void, @val, @val={0x3, 0x1, 0xc}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f, 0x11}}, @void}}], @NL80211_ATTR_HE_BSS_COLOR={0x4}]}, 0x7c}}, 0x20040010) 5.03443186s ago: executing program 37 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x7c, r1, 0x5, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x6d, 0x1, @void, @val, @val={0x3, 0x1, 0xc}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f, 0x11}}, @void}}], @NL80211_ATTR_HE_BSS_COLOR={0x4}]}, 0x7c}}, 0x20040010) 4.872222257s ago: executing program 7 (id=254): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffee}, 0x94) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r3, 0x1f}, 0x14) getsockname(r0, 0x0, &(0x7f0000000200)) 4.776696578s ago: executing program 7 (id=255): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8090) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f0000000300)=0x18) add_key(0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x4000) unshare(0x20000400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x18, 0x1, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000f40)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0xd2f47b3efeeb54bb}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001000)={0x1c, r5, 0x1, 0x74bd2c, 0x25dfcbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20040090}, 0x8000) 3.789281009s ago: executing program 7 (id=256): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0xffff, @multicast1=0xe0000306}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001500)="be", 0x1}], 0x1}, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000001540)={0xd, 0x80}, 0x2) 3.702223878s ago: executing program 7 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000840)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000900)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000980)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a00), 0x40000000000003e, 0xc000) recvmmsg(r1, &(0x7f0000000a40), 0x4000087, 0x2, 0x0) add_key(&(0x7f0000000740)='pkcs7_test\x00', &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file0\x00', 0x0, &(0x7f0000000b80), 0x1, 0x44b, &(0x7f0000000bc0)="$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") r3 = open(&(0x7f0000001080)='.\x00', 0x8000, 0x112) getdents(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3e0, 0x100, 0x100, 0x1e8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @local, 0xff000000, 0xffffff00, 0x8, 0x2, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0xa624, 0x4fd5, 0x5, 0x3, 0x2, 0x401, 'pim6reg1\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x0, 0x4}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c212cb1fe1b16c00e51abdc3f2a502e059e562d94b2881c38ba41898a8c9"}}, {{@arp={@multicast1, @local, 0xffffffff, 0x0, 0x0, 0x4, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x5, 0xfffc, 0x1ff, 0x2, 0x1, 0xf001, 'veth0\x00', 'tunl0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@broadcast, @multicast1, 0xff, 0xff000000, 0x7, 0x7, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x521, 0xffff, 0x8, 0xc80b, 0x40, 'vcan0\x00', 'netdevsim0\x00', {}, {0x461919d8c8d4b5e9}, 0x0, 0x12}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private=0xa010101, @multicast1, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000700)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) 3.637327765s ago: executing program 8 (id=168): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x602, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x6a804) 3.58608023s ago: executing program 6 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='27', 0x2) socket$inet6_udp(0xa, 0x2, 0x0) setns(0xc9, 0x0) r1 = syz_open_dev$video(&(0x7f0000000600), 0x7, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, 0x0) 3.013426139s ago: executing program 8 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc_mnt/sys/net/ipv4/vs/svc_lfactor\x00', 0x101002, 0x0) sendfile(r0, r0, 0x0, 0xf2) r1 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x0) r2 = io_uring_setup(0x38a0, &(0x7f0000000700)={0x0, 0x38d3, 0x1000, 0x1, 0x39f}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r2, 0x19, 0xfffffffffffffffe, 0x0) fanotify_init(0x4, 0x1000) syz_io_uring_setup(0xf02, &(0x7f0000000400)={0x0, 0xbf36, 0x10000, 0x0, 0x55}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000000a1401022abd7000fddbdf25080003000100000008000100f5ffffff080001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x2020040, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 2.010024593s ago: executing program 6 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000034000000030a01020000000000000000020000030900010073797a300000000013000300fd7c400f2ffd10ac56a901205b56f40014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) 1.16464024s ago: executing program 7 (id=261): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x4e20, @local}]}, &(0x7f00000006c0)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000700), 0x4) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{0x0, 0xf, &(0x7f0000000880)=[{&(0x7f00000008c0)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 1.137093303s ago: executing program 8 (id=262): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000280)={[{@barrier_val={'barrier', 0x3d, 0x1000007}}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f00000017c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000dc0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e00)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000e40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ec0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000f40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000f80), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x211000, 0x47) sched_setscheduler(0x0, 0x2, &(0x7f0000000fc0)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101842, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x121000, 0x0) brk(0xdc0000000000) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000004000)=ANY=[@ANYBLOB], 0x24, 0x1) 808.316596ms ago: executing program 6 (id=263): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 75.758862ms ago: executing program 7 (id=264): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x1000}) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) sched_setscheduler(r2, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./trace\x00', &(0x7f0000000840)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f00000008c0)='*ub:*v', 0x6) fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]}) setrlimit(0x5, &(0x7f0000000800)={0x7, 0x8001}) 0s ago: executing program 8 (id=265): syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x26, 0x34b, &(0x7f0000000e00)="$eJzs3TtoZNUbAPBv9uYN+0+KPwStRjtBlk3EQquEZYXFFLoy+GocTNZH7riQwYFskdlpFEvFRtDKzkLLrcVCxM7C1hVkVWzcbmEXr8zcm5k7j2hWTOKyv18RPr5zvjnn3HvC3LxOXlmL7c3puHTz5o2Ym6vE1Nq5tbhViaU4FUnkrsaIzmgCALiX3Mqy+D3LldLLk3t/sLAfzRzD3ACAo9F7/3/t9CAxe5KzAQCOwwFf/496ZmL28pFNCwA4QmPv/w8PNY98m3+q/zsBAMC967kXX3p6fSPiYrU6F9F4t1Vr1eLJQfv6pXgj0tiKs7EYdyLyB4X8aaH78akLG+fPVrt+Xopat6JVi2i0W7X8SWE96dXPxkosxlJRn/Xrk279Sq++GhFX273xo1Fp1aZjoRj/h4XYitVYjP+P1Udc2Di/Wi1eoNbYr29HdGJufxHd+Z+Jxfju1bgcaWxGt3Yw/72VavVctlGqr/d+ELJ5EjcEAAAAAAAAAAAAAAAAAAAAAID7wplq31L//Jus0W69c3G0w1L5fJ1WLW8uzgfq5OcDZbP7p/O8l4yeDzR8Pk+rNhWnTnTlAAAAAAAAAAAAAAAAAAAA8N/R3J2Jeppu7TR3r2yXg3Yp89Y3n381H6N93kwGmZjKX26oT5GLUlUS/fKsX54lQ32KIIkYdP7sWn/GeSaZsJaxVcz2FljOVIo51dP09EM/fTw26O6V7T8GmSTGLstwUClGLjU1/pen/qLq4GD1b/pcz7LsoPK9j8arohIxNXbj/o3g6xuvP/BYc/nxXubL4tCHRx5dfP76h5/+ul1Po7g0aTqz07yT/eOxktL+qRTXuRITNtvEoDPIdHaau/Xk+99eePD9b4f6zI9tkiLIypm394O54dtdT9MvRkefyYPuNA+z0ukJm39y8PLt/u69+4u5/Mla/drej78ctqr0ieWgDgAAAAAAAAAAAAAAAAAAOBalvxW/C088e3QzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjN/j//6WgM5Y5THC7HeNNs1s7zQMHnz/WpQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcB/7MwAA//+xzHAn") getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000000c0)={[{@grpid}, {@noacl}, {@nodioread_nolock}, {@dioread_lock}, {@stripe}, {@init_itable}, {@grpjquota_path={'grpjquota', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@orlov}, {@nouser_xattr}]}, 0x1, 0xbd0, &(0x7f0000001180)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001d80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001dc0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f0000001e00)=0x20000002) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001ec0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001f40), 0x651, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$sock(r3, &(0x7f0000002000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002040)=[@txtime={{0x14}}], 0x14}}], 0x1, 0x20000000) recvmmsg(r1, &(0x7f0000002080), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000020c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f0000002100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000002140), 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r8, 0x8008976) kernel console output (not intermixed with test programs): NF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.459305][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.468963][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.476269][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.493443][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.501817][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.510731][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.520356][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.527479][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.535543][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.544258][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.562754][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.588616][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.596789][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.606661][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.617613][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.628370][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.651825][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.660959][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.679458][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.689842][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.723420][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.730420][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.743059][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.755273][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.763720][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.771422][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.781334][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.810864][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.823636][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.835041][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.844200][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.851287][ T3057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.862072][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.876245][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.885205][ T3057] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.892327][ T3057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.903367][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.910245][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.928894][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.962041][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.981627][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.006766][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.017327][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.025660][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.035364][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.043289][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.051951][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.060699][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.069638][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.078495][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.087260][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.096283][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.106828][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.126433][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.135789][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.145330][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.155342][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.164987][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.172041][ T3057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.180207][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.189601][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.198179][ T3057] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.205321][ T3057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.213164][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.221763][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.234217][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.256906][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.269706][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.277748][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.285852][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.300210][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.328771][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.359350][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.369415][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.378307][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.385454][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.395491][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.405499][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.414289][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.423529][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.431917][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.439835][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.447755][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.457367][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.466023][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.473123][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.481169][ T4260] Bluetooth: hci2: command 0x041b tx timeout [ 65.486254][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.487959][ T4260] Bluetooth: hci4: command 0x041b tx timeout [ 65.496357][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.510872][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.518305][ T4260] Bluetooth: hci3: command 0x041b tx timeout [ 65.527370][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.535730][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 65.538382][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.550949][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.558076][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.565586][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 65.583864][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.597967][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.608898][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.626500][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.636476][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.645779][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.655080][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.663872][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.672953][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.680036][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.700811][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.711360][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.737704][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.746630][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.758301][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.767853][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.776990][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.785535][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.794057][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.803323][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.811910][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.819681][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.827245][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.835856][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.844520][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.853155][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.861397][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.877342][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.890872][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.904390][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.948812][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.964652][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.006185][ T4191] device veth0_vlan entered promiscuous mode [ 66.025165][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.035760][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.044382][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.054314][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.064168][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.072925][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.081515][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.090471][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.099503][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.108043][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.116836][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.136856][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.149029][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.163655][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.183360][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.197901][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.206911][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.225537][ T4196] device veth0_vlan entered promiscuous mode [ 66.245249][ T4191] device veth1_vlan entered promiscuous mode [ 66.262095][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.269930][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.281857][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.290180][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.297985][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.310580][ T4196] device veth1_vlan entered promiscuous mode [ 66.346925][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.372068][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.389245][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.409359][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.423032][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.437452][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.447985][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.458985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.470314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.486560][ T4196] device veth0_macvtap entered promiscuous mode [ 66.509301][ T4191] device veth0_macvtap entered promiscuous mode [ 66.533535][ T4196] device veth1_macvtap entered promiscuous mode [ 66.555488][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.574614][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.589343][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.599110][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.608178][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.624170][ T4191] device veth1_macvtap entered promiscuous mode [ 66.641731][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.660353][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.673443][ T4190] device veth0_vlan entered promiscuous mode [ 66.684179][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.693426][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.701690][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.711162][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.721967][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.731364][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.740816][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.749900][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.758745][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.781817][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.798446][ T4190] device veth1_vlan entered promiscuous mode [ 66.807994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.816448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.825521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.834627][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.845592][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.857054][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.865907][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.875798][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.884611][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.893988][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.928679][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.940185][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.953357][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.960788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.969652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.979169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.988574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.997835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.008330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.018205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.039712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.049548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.065937][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.082948][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.091670][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.100794][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.123742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.133225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.148838][ T4190] device veth0_macvtap entered promiscuous mode [ 67.177442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.185554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.196321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.205491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.215019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.226945][ T4190] device veth1_macvtap entered promiscuous mode [ 67.243343][ T4188] device veth0_vlan entered promiscuous mode [ 67.250654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.259844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.271035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.279870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.289076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.328622][ T4189] device veth0_vlan entered promiscuous mode [ 67.347997][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.358817][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.372350][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.384389][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.397453][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.410866][ T4188] device veth1_vlan entered promiscuous mode [ 67.428027][ T4189] device veth1_vlan entered promiscuous mode [ 67.437036][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.446116][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.455455][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.464464][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.485167][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.496355][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.507318][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.517841][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.528956][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.559097][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 67.565276][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 67.565350][ T4260] Bluetooth: hci4: command 0x040f tx timeout [ 67.565418][ T4260] Bluetooth: hci2: command 0x040f tx timeout [ 67.585625][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.595231][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.603883][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.614567][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.625922][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.635689][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.644949][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.645260][ T4259] Bluetooth: hci1: command 0x040f tx timeout [ 67.654140][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.685972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.696425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.708716][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.719625][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.728194][ T4188] device veth0_macvtap entered promiscuous mode [ 67.760272][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.769061][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.800086][ T4188] device veth1_macvtap entered promiscuous mode [ 67.815896][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.826394][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.837559][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.849950][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.875991][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.885206][ T4189] device veth0_macvtap entered promiscuous mode [ 67.894810][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.907400][ T4189] device veth1_macvtap entered promiscuous mode [ 67.915538][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.924509][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.937801][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.946345][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.958926][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.972968][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.991078][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.001237][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.012043][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.022006][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.033146][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.046639][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.062540][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.069590][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.081142][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.085848][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.093251][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.109918][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.133070][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.149130][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.162743][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.171853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.186048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.195913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.206787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.216007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.231501][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.240226][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.258817][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.271623][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.291480][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.300520][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.311130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.337213][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.361628][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.378720][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.389565][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.405234][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.415979][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.425934][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.437709][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.449283][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.490537][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.503371][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.514425][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.526107][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.557740][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.584596][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.601481][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.620343][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.650949][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.671246][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.682515][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.698867][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.708542][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.726486][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.735986][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.745714][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.756782][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.769797][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.779017][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.827108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.940722][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.959375][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.988885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.023115][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.034442][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.048495][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.057221][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.088239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.105087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.136232][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.155052][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.195717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.334326][ T4326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 69.526151][ T4339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 69.558176][ T4342] loop3: detected capacity change from 0 to 1024 [ 69.632747][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 69.649802][ T4260] Bluetooth: hci4: command 0x0419 tx timeout [ 69.668971][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 69.692364][ T4342] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.720873][ T4260] Bluetooth: hci0: command 0x0419 tx timeout [ 69.756937][ T4260] Bluetooth: hci1: command 0x0419 tx timeout [ 69.845648][ T4356] loop1: detected capacity change from 0 to 256 [ 70.784819][ T4342] syz.3.20 (4342) used greatest stack depth: 18096 bytes left [ 70.950301][ T4196] EXT4-fs error (device loop3): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /7/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 71.000479][ T4378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 71.091922][ T4196] EXT4-fs error (device loop3): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /7/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 71.215967][ T4196] EXT4-fs error (device loop3): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 71.341188][ T4196] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 71.407070][ T4196] EXT4-fs error (device loop3): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /7/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 71.499476][ T4393] device syzkaller0 entered promiscuous mode [ 71.507227][ T4196] EXT4-fs error (device loop3): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /7/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 71.591107][ T4196] EXT4-fs error (device loop3): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 71.682655][ T4196] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 71.786672][ T4363] sched: RT throttling activated [ 71.792910][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.811104][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.820534][ T4196] EXT4-fs error (device loop3): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /7/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 71.849500][ T4196] EXT4-fs error (device loop3): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /7/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 71.894118][ T4196] EXT4-fs error (device loop3): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 71.932565][ T4196] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 71.955454][ T4196] EXT4-fs error (device loop3): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /7/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 71.991201][ T4196] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.014179][ T4196] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.036249][ T4196] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.065284][ T4196] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.080014][ T4405] netlink: 44 bytes leftover after parsing attributes in process `syz.1.44'. [ 72.105011][ T4196] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.148084][ T4196] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.186839][ T4196] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 72.567159][ T4423] loop1: detected capacity change from 0 to 1024 [ 72.660681][ T4427] loop4: detected capacity change from 0 to 256 [ 72.703121][ T4423] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.775814][ T4423] EXT4-fs error (device loop1): ext4_find_dest_de:2117: inode #12: block 7: comm syz.1.51: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 73.867390][ T4369] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.140874][ T4369] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.168867][ T4188] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /10/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 74.309645][ T4369] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.334461][ T4188] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /10/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 74.446337][ T4188] EXT4-fs error (device loop1): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 74.529449][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 74.591131][ T4188] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /10/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 74.643614][ T4188] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /10/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 74.671114][ T4188] EXT4-fs error (device loop1): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 74.702552][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 74.720610][ T4369] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.762601][ T4188] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /10/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 74.787231][ T4309] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.857692][ T4188] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /10/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 74.978254][ T4188] EXT4-fs error (device loop1): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 75.009701][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 75.056721][ T4470] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.117830][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 75.173869][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 75.216867][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 75.267456][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 75.308874][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 75.339512][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 75.378580][ T4188] EXT4-fs warning (device loop1): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 75.640502][ T4470] chnl_net:caif_netlink_parms(): no params data found [ 75.833785][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.841598][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.850400][ T4470] device bridge_slave_0 entered promiscuous mode [ 75.868999][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.932374][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.940370][ T4470] device bridge_slave_1 entered promiscuous mode [ 76.017782][ T4470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.090887][ T4515] netlink: 'syz.2.74': attribute type 5 has an invalid length. [ 76.115106][ T4470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.209983][ T4470] team0: Port device team_slave_0 added [ 76.296000][ T4470] team0: Port device team_slave_1 added [ 76.432146][ T4470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.440867][ T4470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.531809][ T4470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.585997][ T4470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.599748][ T4470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.663610][ T4470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.825736][ T4470] device hsr_slave_0 entered promiscuous mode [ 76.859452][ T4470] device hsr_slave_1 entered promiscuous mode [ 76.992497][ T4309] Bluetooth: hci4: command 0x0409 tx timeout [ 77.071293][ T4470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.104586][ T4470] Cannot create hsr debugfs directory [ 77.260375][ T4369] device hsr_slave_0 left promiscuous mode [ 77.280169][ T4369] device hsr_slave_1 left promiscuous mode [ 77.691030][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.943463][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.956753][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.967226][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.012965][ T4369] device bridge_slave_1 left promiscuous mode [ 78.020732][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.119346][ T4369] device bridge_slave_0 left promiscuous mode [ 78.146307][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.227503][ T4369] device veth1_macvtap left promiscuous mode [ 78.234205][ T4369] device veth0_macvtap left promiscuous mode [ 78.240457][ T4369] device veth1_vlan left promiscuous mode [ 78.251605][ T4369] device veth0_vlan left promiscuous mode [ 78.796702][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 78.811614][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 78.826257][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.843084][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.908878][ T4369] bond0 (unregistering): Released all slaves [ 79.020760][ T4614] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.075160][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 79.952404][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 80.051296][ T4470] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.109455][ T4470] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.190232][ T4470] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.215578][ T4470] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.336578][ T4674] loop0: detected capacity change from 0 to 256 [ 80.413963][ T4674] FAT-fs (loop0): Unrecognized mount option "shortname" or missing value [ 80.936312][ T4678] loop4: detected capacity change from 0 to 256 [ 81.112668][ T4614] chnl_net:caif_netlink_parms(): no params data found [ 81.152476][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 81.161997][ T4690] loop2: detected capacity change from 0 to 256 [ 81.178200][ T4690] exfat: Deprecated parameter 'utf8' [ 81.184881][ T4470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.204544][ T4690] exfat: Deprecated parameter 'namecase' [ 81.238632][ T4690] exfat: Deprecated parameter 'utf8' [ 81.289435][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.311668][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.333972][ T4470] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.357309][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.390864][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.431447][ T4614] device bridge_slave_0 entered promiscuous mode [ 81.470411][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.485125][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.503954][ T4602] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.511103][ T4602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.540694][ T4614] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.550207][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.577537][ T4614] device bridge_slave_1 entered promiscuous mode [ 81.607127][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.618716][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.661884][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.671398][ T4602] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.678525][ T4602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.714819][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.735489][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.769535][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.794420][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.813066][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.849556][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.858610][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.919573][ T4470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.952379][ T4470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.004995][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.056085][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.064174][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 82.101852][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.123885][ T4690] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 82.159400][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.168742][ T4701] FAULT_INJECTION: forcing a failure. [ 82.168742][ T4701] name fail_futex, interval 1, probability 0, space 0, times 1 [ 82.214431][ T4614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.246462][ T4701] CPU: 1 PID: 4701 Comm: syz.0.115 Not tainted syzkaller #0 [ 82.253890][ T4701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 82.263985][ T4701] Call Trace: [ 82.267407][ T4701] [ 82.270352][ T4701] dump_stack_lvl+0x188/0x250 [ 82.275080][ T4701] ? show_regs_print_info+0x20/0x20 [ 82.280303][ T4701] ? load_image+0x410/0x410 [ 82.281675][ T4614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.284840][ T4701] should_fail+0x383/0x4b0 [ 82.284874][ T4701] get_futex_key+0x1a0/0x1200 [ 82.303002][ T4701] ? __lock_acquire+0x13b3/0x7d40 [ 82.308050][ T4701] ? futex_wait_restart+0x250/0x250 [ 82.313297][ T4701] futex_wake+0x101/0x540 [ 82.317658][ T4701] ? futex_wait+0x680/0x680 [ 82.322182][ T4701] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 82.328188][ T4701] ? verify_lock_unused+0x140/0x140 [ 82.333422][ T4701] ? verify_lock_unused+0x140/0x140 [ 82.338656][ T4701] do_futex+0xd83/0x12b0 [ 82.341626][ T4614] team0: Port device team_slave_0 added [ 82.343009][ T4701] ? __local_bh_enable_ip+0x136/0x1c0 [ 82.343035][ T4701] ? _local_bh_enable+0xa0/0xa0 [ 82.343059][ T4701] ? futex_exit_release+0x1c0/0x1c0 [ 82.343085][ T4701] ? __context_tracking_exit+0x4c/0x80 [ 82.343113][ T4701] __se_sys_futex+0x389/0x420 [ 82.343133][ T4701] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 82.343159][ T4701] ? __x64_sys_futex+0xf0/0xf0 [ 82.343185][ T4701] ? __x64_sys_futex+0x1d/0xf0 [ 82.343207][ T4701] do_syscall_64+0x4c/0xa0 [ 82.343223][ T4701] ? clear_bhb_loop+0x30/0x80 [ 82.343239][ T4701] ? clear_bhb_loop+0x30/0x80 [ 82.343259][ T4701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.343294][ T4701] RIP: 0033:0x7feb008ff559 [ 82.343314][ T4701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.343329][ T4701] RSP: 002b:00007feafeb560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 82.343352][ T4701] RAX: ffffffffffffffda RBX: 00007feb00b85fa8 RCX: 00007feb008ff559 [ 82.343365][ T4701] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feb00b85fac [ 82.457997][ T4701] RBP: 00007feb00b85fa0 R08: 000780f14b3e0740 R09: 0000000000000000 [ 82.465977][ T4701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.473954][ T4701] R13: 00007feb00b86038 R14: 00007ffcdc69a3e0 R15: 00007ffcdc69a4c8 [ 82.481954][ T4701] [ 83.171942][ T4614] team0: Port device team_slave_1 added [ 83.240154][ T4614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.247502][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 83.304405][ T4614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.412037][ T4614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.463259][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.843232][ T4614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.852313][ T4614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.998141][ T4614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.062054][ T4614] device hsr_slave_0 entered promiscuous mode [ 84.112569][ T4239] Bluetooth: hci0: command 0x040f tx timeout [ 84.143263][ T4614] device hsr_slave_1 entered promiscuous mode [ 84.158136][ T4720] loop4: detected capacity change from 0 to 2048 [ 84.172323][ T4614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.180029][ T4614] Cannot create hsr debugfs directory [ 84.268951][ T4726] loop0: detected capacity change from 0 to 2048 [ 84.298487][ T4720] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,noblock_validity,quota,. Quota mode: writeback. [ 84.322949][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.330499][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.383126][ T4470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.434347][ T4735] loop2: detected capacity change from 0 to 4096 [ 84.492022][ T4726] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 84.551929][ T4735] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 84.586721][ T4735] EXT4-fs (loop2): shut down requested (0) [ 84.624567][ T4726] FAULT_INJECTION: forcing a failure. [ 84.624567][ T4726] name failslab, interval 1, probability 0, space 0, times 1 [ 84.733300][ T4726] CPU: 0 PID: 4726 Comm: syz.0.122 Not tainted syzkaller #0 [ 84.740642][ T4726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 84.750805][ T4726] Call Trace: [ 84.754143][ T4726] [ 84.757093][ T4726] dump_stack_lvl+0x188/0x250 [ 84.761806][ T4726] ? show_regs_print_info+0x20/0x20 [ 84.767075][ T4726] ? load_image+0x410/0x410 [ 84.771618][ T4726] ? __might_sleep+0xf0/0xf0 [ 84.776237][ T4726] ? __lock_acquire+0x7d40/0x7d40 [ 84.781293][ T4726] ? ext4_find_extent+0x372/0xde0 [ 84.786350][ T4726] should_fail+0x383/0x4b0 [ 84.790797][ T4726] should_failslab+0x5/0x20 [ 84.795324][ T4726] slab_pre_alloc_hook+0x51/0xc0 [ 84.800340][ T4726] ? ext4_mb_new_blocks+0x538/0x47c0 [ 84.805656][ T4726] kmem_cache_alloc+0x3d/0x280 [ 84.810447][ T4726] ext4_mb_new_blocks+0x538/0x47c0 [ 84.815617][ T4726] ? memset+0x1e/0x40 [ 84.819625][ T4726] ? ext4_mb_pa_callback+0xd0/0xd0 [ 84.824873][ T4726] ? ext4_inode_to_goal_block+0x313/0x450 [ 84.830626][ T4726] ext4_ext_map_blocks+0x17d1/0x63d0 [ 84.835972][ T4726] ? ext4_ext_release+0x10/0x10 [ 84.840863][ T4726] ? rwsem_write_trylock+0x135/0x1c0 [ 84.846619][ T4726] ? ext4_es_lookup_extent+0x5fd/0x9f0 [ 84.852112][ T4726] ext4_map_blocks+0x97f/0x1a50 [ 84.856992][ T4726] ? slab_post_alloc_hook+0x68/0x380 [ 84.860864][ T4614] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 84.862308][ T4726] ? ext4_issue_zeroout+0x250/0x250 [ 84.862425][ T4726] ext4_writepages+0x124a/0x2d40 [ 84.862467][ T4726] ? mark_lock+0x94/0x320 [ 84.883615][ T4726] ? ext4_readpage+0x2e0/0x2e0 [ 84.888415][ T4726] ? verify_lock_unused+0x140/0x140 [ 84.893684][ T4726] ? __lock_acquire+0x7d40/0x7d40 [ 84.898746][ T4726] ? do_raw_spin_lock+0x128/0x2f0 [ 84.903815][ T4726] ? do_raw_spin_unlock+0x11d/0x230 [ 84.909043][ T4726] ? ext4_readpage+0x2e0/0x2e0 [ 84.913838][ T4726] do_writepages+0x493/0x700 [ 84.918597][ T4726] ? filemap_fdatawrite_wbc+0x1e0/0x240 [ 84.924194][ T4726] ? __writepage+0x130/0x130 [ 84.928821][ T4726] ? __lock_acquire+0x7d40/0x7d40 [ 84.933879][ T4726] ? __rwlock_init+0x140/0x140 [ 84.938666][ T4726] ? generic_write_end+0x24d/0x3d0 [ 84.943814][ T4726] ? do_raw_spin_unlock+0x11d/0x230 [ 84.949051][ T4726] filemap_fdatawrite_wbc+0x1eb/0x240 [ 84.954584][ T4726] file_write_and_wait_range+0x14d/0x220 [ 84.960253][ T4726] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 84.965773][ T4726] ? grab_cache_page_write_begin+0xa0/0xa0 [ 84.971465][ T4754] EXT4-fs (loop0): shut down requested (1) [ 84.971603][ T4726] ? rwsem_write_trylock+0x135/0x1c0 [ 84.982689][ T4726] ext4_sync_file+0x20e/0xb10 [ 84.987401][ T4726] ext4_buffered_write_iter+0x32b/0x3a0 [ 84.992981][ T4726] ext4_file_write_iter+0x73f/0x1720 [ 84.998314][ T4726] ? rcu_read_lock_any_held+0xb0/0x130 [ 85.003810][ T4726] ? ext4_file_read_iter+0x6f0/0x6f0 [ 85.009131][ T4726] ? end_current_label_crit_section+0x14b/0x170 [ 85.015409][ T4726] ? memset+0x1e/0x40 [ 85.019530][ T4726] ? iov_iter_init+0xb4/0x170 [ 85.024240][ T4726] vfs_write+0x748/0xd70 [ 85.028543][ T4726] ? file_end_write+0x250/0x250 [ 85.033432][ T4726] ? __fget_files+0x402/0x470 [ 85.038153][ T4726] ? __fdget+0x18b/0x210 [ 85.042421][ T4726] ? __x64_sys_pwrite64+0xf3/0x220 [ 85.047565][ T4726] __x64_sys_pwrite64+0x197/0x220 [ 85.052629][ T4726] ? ksys_pwrite64+0x1c0/0x1c0 [ 85.057430][ T4726] ? lockdep_hardirqs_on+0x94/0x140 [ 85.062662][ T4726] do_syscall_64+0x4c/0xa0 [ 85.067110][ T4726] ? clear_bhb_loop+0x30/0x80 [ 85.071814][ T4726] ? clear_bhb_loop+0x30/0x80 [ 85.076517][ T4726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.082432][ T4726] RIP: 0033:0x7feb008ff559 [ 85.086874][ T4726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.106495][ T4726] RSP: 002b:00007feafeb56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 85.114908][ T4726] RAX: ffffffffffffffda RBX: 00007feb00b85fa0 RCX: 00007feb008ff559 [ 85.122896][ T4726] RDX: 0000000000000001 RSI: 0000200000003600 RDI: 0000000000000004 [ 85.130875][ T4726] RBP: 00007feb00996b20 R08: 0000000000000000 R09: 0000000000000000 [ 85.138841][ T4726] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 85.146804][ T4726] R13: 00007feb00b86038 R14: 00007feb00b85fa0 R15: 00007ffcdc69a4c8 [ 85.154837][ T4726] [ 85.210663][ T4614] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 85.991583][ T4614] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 86.063292][ T4614] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 86.213150][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 86.271567][ T4768] device syzkaller0 entered promiscuous mode [ 86.306796][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.318970][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.391059][ T4369] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.423911][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.440962][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.467418][ T4470] device veth0_vlan entered promiscuous mode [ 86.479749][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.505397][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.534926][ T4369] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.584946][ T4470] device veth1_vlan entered promiscuous mode [ 86.639192][ T4369] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.964920][ T13] cfg80211: failed to load regulatory.db [ 87.158329][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.272987][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.421864][ T4791] binder: 4790:4791 ioctl c0306201 200000000480 returned -14 [ 87.437998][ T4470] device veth0_macvtap entered promiscuous mode [ 87.456434][ T4470] device veth1_macvtap entered promiscuous mode [ 87.493482][ T4369] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.515642][ T4614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.522984][ T4791] binder: BINDER_SET_CONTEXT_MGR already set [ 87.529342][ T4791] binder: 4790:4791 ioctl 4018620d 200000000540 returned -16 [ 87.547874][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.560924][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.575646][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.580175][ T4791] binder: 4790:4791 ioctl c0306201 200000000700 returned -14 [ 87.603398][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.646236][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.678464][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.689128][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.702362][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.714989][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.726211][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.736146][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.746780][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.791756][ T4470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.930970][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.995938][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.051838][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.114295][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.169958][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.234615][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.290182][ T4470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.351736][ T4470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.387986][ T4470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.401992][ T4794] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.403513][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.438893][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.459984][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.481812][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.491083][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.499337][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.557760][ T4470] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.566791][ T4470] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.576634][ T4470] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.585670][ T4470] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.599988][ T4614] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.650803][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.667718][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.678901][ T4597] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.686076][ T4597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.744221][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.762853][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.773739][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.783563][ T4597] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.790704][ T4597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.799294][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.815107][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.897847][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.915185][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.925304][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.934812][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.947051][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.955698][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.965736][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.974790][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.993379][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.022504][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.037686][ T4597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.059531][ T4597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.096801][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.144340][ T4594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.159016][ T4594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.186400][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.363514][ T4794] chnl_net:caif_netlink_parms(): no params data found [ 89.436409][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.449547][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.519033][ T4614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.278914][ T4259] Bluetooth: hci1: command 0x0409 tx timeout [ 90.385448][ T4853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.440880][ T4794] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.480147][ T4794] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.523429][ T4794] device bridge_slave_0 entered promiscuous mode [ 90.560721][ T4794] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.576750][ T4794] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.599615][ T4794] device bridge_slave_1 entered promiscuous mode [ 90.603387][ T4869] loop4: detected capacity change from 0 to 1024 [ 90.649765][ T4794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.680507][ T4872] loop9: detected capacity change from 0 to 524287998 [ 90.696771][ T4794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.714666][ T4869] EXT4-fs (loop4): Ignoring removed bh option [ 90.830417][ T4794] team0: Port device team_slave_0 added [ 90.859897][ T4869] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 90.881735][ T4794] team0: Port device team_slave_1 added [ 90.883952][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.941979][ T4869] FAULT_INJECTION: forcing a failure. [ 90.941979][ T4869] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 90.956342][ T4869] CPU: 1 PID: 4869 Comm: syz.4.151 Not tainted syzkaller #0 [ 90.963653][ T4869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 90.973720][ T4869] Call Trace: [ 90.977008][ T4869] [ 90.979948][ T4869] dump_stack_lvl+0x188/0x250 [ 90.984647][ T4869] ? show_regs_print_info+0x20/0x20 [ 90.989864][ T4869] ? load_image+0x410/0x410 [ 90.994395][ T4869] ? uncharge_page+0x490/0x490 [ 90.999192][ T4869] should_fail+0x383/0x4b0 [ 91.003632][ T4869] prepare_alloc_pages+0x1e3/0x5b0 [ 91.004332][ T4794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.008764][ T4869] __alloc_pages+0x11b/0x480 [ 91.020305][ T4869] ? zone_statistics+0x170/0x170 [ 91.025268][ T4869] ? rcu_lock_acquire+0x30/0x30 [ 91.030140][ T4869] ? alloc_pages+0x452/0x560 [ 91.034752][ T4869] __get_free_pages+0x8/0x30 [ 91.035044][ T4794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.039363][ T4869] __tlb_remove_page_size+0x1f2/0x3f0 [ 91.039393][ T4869] unmap_page_range+0xfcf/0x2410 [ 91.039434][ T4869] unmap_vmas+0x131/0x250 [ 91.039452][ T4869] ? unmap_page_range+0x2410/0x2410 [ 91.039468][ T4869] ? __mutex_lock_common+0x435/0x2400 [ 91.039491][ T4869] ? exit_mm_release+0x16/0x30 [ 91.039517][ T4869] exit_mmap+0x3b9/0x640 [ 91.039538][ T4869] ? vm_brk+0x20/0x20 [ 91.039567][ T4869] ? uprobe_clear_state+0x2f6/0x460 [ 91.039589][ T4869] __mmput+0x115/0x390 [ 91.039608][ T4869] exit_mm+0x632/0x7b0 [ 91.065521][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.070815][ T4869] ? perf_pmu_migrate_context+0xb70/0xb70 [ 91.128521][ T4869] ? do_exit+0x2100/0x2100 [ 91.132955][ T4869] ? __ia32_sys_timer_delete+0x40/0x40 [ 91.138432][ T4869] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 91.143914][ T4869] ? tty_audit_exit+0x149/0x1f0 [ 91.148794][ T4869] do_exit+0x5b8/0x2100 [ 91.152977][ T4869] ? put_task_struct+0x80/0x80 [ 91.157759][ T4869] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 91.163784][ T4869] ? _raw_spin_lock_irq+0xb7/0xf0 [ 91.167061][ T4794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.168826][ T4869] do_group_exit+0x12c/0x2f0 [ 91.168850][ T4869] ? lockdep_hardirqs_on+0x94/0x140 [ 91.168873][ T4869] get_signal+0x7eb/0x12e0 [ 91.193576][ T4869] arch_do_signal_or_restart+0xe6/0x12a0 [ 91.199243][ T4869] ? futex_exit_release+0x1c0/0x1c0 [ 91.204466][ T4869] ? get_sigframe_size+0x10/0x10 [ 91.209529][ T4869] ? __context_tracking_exit+0x4c/0x80 [ 91.215027][ T4869] ? exit_to_user_mode_loop+0x3b/0x130 [ 91.220507][ T4869] exit_to_user_mode_loop+0x9e/0x130 [ 91.225818][ T4869] exit_to_user_mode_prepare+0xee/0x180 [ 91.231390][ T4869] syscall_exit_to_user_mode+0x16/0x40 [ 91.236871][ T4869] do_syscall_64+0x58/0xa0 [ 91.241306][ T4869] ? clear_bhb_loop+0x30/0x80 [ 91.245999][ T4869] ? clear_bhb_loop+0x30/0x80 [ 91.250713][ T4869] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.256635][ T4869] RIP: 0033:0x7f46119c4559 [ 91.261065][ T4869] Code: Unable to access opcode bytes at RIP 0x7f46119c452f. [ 91.268438][ T4869] RSP: 002b:00007f460fc1b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.276867][ T4869] RAX: 0000000000000001 RBX: 00007f4611c4afa8 RCX: 00007f46119c4559 [ 91.284849][ T4869] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4611c4afac [ 91.292832][ T4869] RBP: 00007f4611c4afa0 R08: 00356635a1fa4f88 R09: 0000000000000000 [ 91.300827][ T4869] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000000 [ 91.308826][ T4869] R13: 00007f4611c4b038 R14: 00007fffe5755740 R15: 00007fffe5755828 [ 91.317031][ T4869] [ 91.726723][ T4259] Bluetooth: hci3: command 0x0409 tx timeout [ 91.737866][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.767098][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.780081][ T4900] FAULT_INJECTION: forcing a failure. [ 91.780081][ T4900] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 91.793188][ T4794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.801181][ T4189] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2812: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 91.808808][ T4794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.818136][ T4189] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /47/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 91.844828][ T4900] CPU: 1 PID: 4900 Comm: syz.2.157 Not tainted syzkaller #0 [ 91.863738][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.870961][ T4900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.886970][ T4900] Call Trace: [ 91.890255][ T4900] [ 91.893194][ T4900] dump_stack_lvl+0x188/0x250 [ 91.897877][ T4900] ? show_regs_print_info+0x20/0x20 [ 91.903066][ T4900] ? load_image+0x410/0x410 [ 91.907564][ T4900] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 91.913448][ T4900] ? _raw_spin_unlock+0x40/0x40 [ 91.918291][ T4900] ? verify_lock_unused+0x140/0x140 [ 91.923485][ T4900] should_fail+0x383/0x4b0 [ 91.927899][ T4900] prepare_alloc_pages+0x1e3/0x5b0 [ 91.933031][ T4900] __alloc_pages+0x11b/0x480 [ 91.937622][ T4900] ? zone_statistics+0x170/0x170 [ 91.942562][ T4900] ? alloc_pages+0x452/0x560 [ 91.947148][ T4900] new_slab+0xc0/0x4b0 [ 91.951211][ T4900] ___slab_alloc+0x807/0xdd0 [ 91.955793][ T4900] ? getname_flags+0xb7/0x4f0 [ 91.960466][ T4900] ? getname_flags+0xb7/0x4f0 [ 91.965133][ T4900] kmem_cache_alloc+0xf0/0x280 [ 91.969889][ T4900] getname_flags+0xb7/0x4f0 [ 91.974387][ T4900] do_sys_openat2+0xdd/0x500 [ 91.978968][ T4900] ? __lock_acquire+0x7d40/0x7d40 [ 91.983985][ T4900] ? do_sys_open+0xe0/0xe0 [ 91.988392][ T4900] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 91.994371][ T4900] ? lock_chain_count+0x20/0x20 [ 91.999219][ T4900] __x64_sys_openat+0x135/0x160 [ 92.004068][ T4900] do_syscall_64+0x4c/0xa0 [ 92.008476][ T4900] ? clear_bhb_loop+0x30/0x80 [ 92.013142][ T4900] ? clear_bhb_loop+0x30/0x80 [ 92.017900][ T4900] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.023791][ T4900] RIP: 0033:0x7fc2c44b2559 [ 92.028201][ T4900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.047816][ T4900] RSP: 002b:00007fc2c2709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.056308][ T4900] RAX: ffffffffffffffda RBX: 00007fc2c4738fa0 RCX: 00007fc2c44b2559 [ 92.064272][ T4900] RDX: 0000000000000000 RSI: 0000200000000980 RDI: ffffffffffffff9c [ 92.072235][ T4900] RBP: 00007fc2c4549b20 R08: 0000000000000000 R09: 0000000000000000 [ 92.080211][ T4900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.088171][ T4900] R13: 00007fc2c4739038 R14: 00007fc2c4738fa0 R15: 00007fff289d4f38 [ 92.096147][ T4900] [ 92.108420][ T4794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.127670][ T4189] EXT4-fs (loop4): Remounting filesystem read-only [ 92.162947][ T4189] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /47/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 92.188964][ T4189] EXT4-fs (loop4): Remounting filesystem read-only [ 92.208567][ T4189] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 92.232428][ T4189] EXT4-fs (loop4): Remounting filesystem read-only [ 92.239198][ T4189] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 92.268205][ T4907] loop5: detected capacity change from 0 to 512 [ 92.282843][ T4189] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /47/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 92.339133][ T4907] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.352690][ T4257] Bluetooth: hci1: command 0x041b tx timeout [ 92.363201][ T4794] device hsr_slave_0 entered promiscuous mode [ 92.370895][ T4189] EXT4-fs (loop4): Remounting filesystem read-only [ 92.378096][ T4189] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /47/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 92.400016][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.406555][ T4794] device hsr_slave_1 entered promiscuous mode [ 92.415357][ T4189] EXT4-fs (loop4): Remounting filesystem read-only [ 92.421993][ T4794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.424369][ T4189] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 92.451223][ T4794] Cannot create hsr debugfs directory [ 92.452796][ T4189] EXT4-fs (loop4): Remounting filesystem read-only [ 92.471841][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.488027][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.499536][ T4189] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 92.519713][ T4189] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /47/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 92.555645][ T4189] EXT4-fs (loop4): Remounting filesystem read-only [ 92.562658][ T4189] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /47/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 92.573717][ T4907] EXT4-fs (loop5): 1 orphan inode deleted [ 92.590889][ T4907] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 92.601229][ T4189] EXT4-fs (loop4): Remounting filesystem read-only [ 92.602671][ T4907] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.620290][ T4189] EXT4-fs error (device loop4): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 92.641451][ T4189] EXT4-fs (loop4): Remounting filesystem read-only [ 92.641890][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.655527][ T4189] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 92.655886][ T4189] EXT4-fs error (device loop4): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /47/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 92.674352][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.701884][ T4189] EXT4-fs (loop4): Remounting filesystem read-only [ 92.710689][ T4189] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 92.712459][ T4614] device veth0_vlan entered promiscuous mode [ 92.738612][ T4189] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 92.776302][ T4189] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 92.796453][ T4189] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 92.807084][ T4614] device veth1_vlan entered promiscuous mode [ 92.831640][ T4189] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 92.869382][ T4189] EXT4-fs warning (device loop4): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 92.946652][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.979171][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.998963][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.011514][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.050684][ T4614] device veth0_macvtap entered promiscuous mode [ 93.086314][ T4614] device veth1_macvtap entered promiscuous mode [ 93.230971][ T4369] device hsr_slave_0 left promiscuous mode [ 93.264434][ T4369] device hsr_slave_1 left promiscuous mode [ 93.298849][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.333787][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.383461][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.397545][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.414622][ T4369] device bridge_slave_1 left promiscuous mode [ 93.421007][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.444266][ T4369] device bridge_slave_0 left promiscuous mode [ 93.450631][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.486647][ T4369] device veth1_macvtap left promiscuous mode [ 93.494905][ T4369] device veth0_macvtap left promiscuous mode [ 93.501058][ T4369] device veth1_vlan left promiscuous mode [ 93.507455][ T4369] device veth0_vlan left promiscuous mode [ 93.767236][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 93.785525][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 93.801614][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.803310][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 93.826260][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.897766][ T4369] bond0 (unregistering): Released all slaves [ 93.913993][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.932657][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.943946][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.965175][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.975151][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.986095][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.001434][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.014672][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.038323][ T4614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.104879][ T4794] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 94.120687][ T4794] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 94.138831][ T4794] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 94.150820][ T4794] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 94.284094][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.300439][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.319854][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.337948][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.385286][ T4928] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.395968][ T4794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.412673][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.433803][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 94.435008][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.462073][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.476681][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.486843][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.497521][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.507441][ T4614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.518221][ T4614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.529307][ T4614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.540590][ T4614] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.550196][ T4614] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.559290][ T4614] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.568509][ T4614] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.585619][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.594624][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.655478][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.666543][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.679574][ T4794] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.821816][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.832012][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.861926][ T4602] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.869095][ T4602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.898602][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.926182][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.935849][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.944447][ T4602] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.951564][ T4602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.960666][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.045039][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.097882][ T4597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.102298][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.126958][ T4597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.144962][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.162967][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.181225][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.204260][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.218182][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.229951][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.246359][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.287376][ T4597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.288116][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.305354][ T4597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.331541][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.349664][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.358607][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.408332][ T4974] FAULT_INJECTION: forcing a failure. [ 95.408332][ T4974] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 95.421702][ T4974] CPU: 1 PID: 4974 Comm: syz.5.170 Not tainted syzkaller #0 [ 95.429002][ T4974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.439070][ T4974] Call Trace: [ 95.442360][ T4974] [ 95.445302][ T4974] dump_stack_lvl+0x188/0x250 [ 95.450004][ T4974] ? show_regs_print_info+0x20/0x20 [ 95.455227][ T4974] ? load_image+0x410/0x410 [ 95.459752][ T4974] ? uncharge_page+0x490/0x490 [ 95.464532][ T4974] should_fail+0x383/0x4b0 [ 95.468974][ T4974] prepare_alloc_pages+0x1e3/0x5b0 [ 95.474114][ T4974] __alloc_pages+0x11b/0x480 [ 95.478724][ T4974] ? zone_statistics+0x170/0x170 [ 95.483676][ T4974] ? rcu_lock_acquire+0x30/0x30 [ 95.488549][ T4974] ? alloc_pages+0x452/0x560 [ 95.493165][ T4974] __get_free_pages+0x8/0x30 [ 95.497776][ T4974] __tlb_remove_page_size+0x1f2/0x3f0 [ 95.503184][ T4974] unmap_page_range+0xfcf/0x2410 [ 95.508173][ T4974] unmap_vmas+0x131/0x250 [ 95.512529][ T4974] ? unmap_page_range+0x2410/0x2410 [ 95.517747][ T4974] ? __mutex_lock_common+0x435/0x2400 [ 95.523154][ T4974] ? exit_mm_release+0x16/0x30 [ 95.528029][ T4974] exit_mmap+0x3b9/0x640 [ 95.532287][ T4974] ? vm_brk+0x20/0x20 [ 95.536305][ T4974] ? uprobe_clear_state+0x2f6/0x460 [ 95.541577][ T4974] __mmput+0x115/0x390 [ 95.545670][ T4974] exit_mm+0x632/0x7b0 [ 95.549751][ T4974] ? perf_pmu_migrate_context+0xb70/0xb70 [ 95.555472][ T4974] ? do_exit+0x2100/0x2100 [ 95.559891][ T4974] ? __ia32_sys_timer_delete+0x40/0x40 [ 95.565339][ T4974] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 95.570803][ T4974] ? tty_audit_exit+0x149/0x1f0 [ 95.575655][ T4974] do_exit+0x5b8/0x2100 [ 95.579838][ T4974] ? put_task_struct+0x80/0x80 [ 95.584614][ T4974] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.590588][ T4974] ? _raw_spin_lock_irq+0xb7/0xf0 [ 95.595600][ T4974] do_group_exit+0x12c/0x2f0 [ 95.600192][ T4974] ? lockdep_hardirqs_on+0x94/0x140 [ 95.605378][ T4974] get_signal+0x7eb/0x12e0 [ 95.609809][ T4974] arch_do_signal_or_restart+0xe6/0x12a0 [ 95.615434][ T4974] ? futex_exit_release+0x1c0/0x1c0 [ 95.620625][ T4974] ? get_sigframe_size+0x10/0x10 [ 95.625557][ T4974] ? __context_tracking_exit+0x4c/0x80 [ 95.631030][ T4974] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.637016][ T4974] ? exit_to_user_mode_loop+0x3b/0x130 [ 95.642464][ T4974] exit_to_user_mode_loop+0x9e/0x130 [ 95.647758][ T4974] exit_to_user_mode_prepare+0xee/0x180 [ 95.653286][ T4974] syscall_exit_to_user_mode+0x16/0x40 [ 95.658736][ T4974] do_syscall_64+0x58/0xa0 [ 95.663133][ T4974] ? clear_bhb_loop+0x30/0x80 [ 95.667793][ T4974] ? clear_bhb_loop+0x30/0x80 [ 95.672628][ T4974] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.678551][ T4974] RIP: 0033:0x7fcba47d8559 [ 95.682979][ T4974] Code: Unable to access opcode bytes at RIP 0x7fcba47d852f. [ 95.690335][ T4974] RSP: 002b:00007fcba2a2f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 95.698752][ T4974] RAX: fffffffffffffe00 RBX: 00007fcba4a5efa8 RCX: 00007fcba47d8559 [ 95.706713][ T4974] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcba4a5efa8 [ 95.714677][ T4974] RBP: 00007fcba4a5efa0 R08: 0000000000000000 R09: 0000000000000000 [ 95.722673][ T4974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.730668][ T4974] R13: 00007fcba4a5f038 R14: 00007ffdc4753a30 R15: 00007ffdc4753b18 [ 95.738670][ T4974] [ 95.821769][ T4969] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.858213][ T4981] ======================================================= [ 95.858213][ T4981] WARNING: The mand mount option has been deprecated and [ 95.858213][ T4981] and is ignored by this kernel. Remove the mand [ 95.858213][ T4981] option from the mount to silence this warning. [ 95.858213][ T4981] ======================================================= [ 95.909424][ T4257] Bluetooth: hci3: command 0x040f tx timeout [ 96.042741][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.058357][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.101704][ T4794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.512519][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 96.579245][ T4969] chnl_net:caif_netlink_parms(): no params data found [ 96.599853][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.612885][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.771458][ T4794] device veth0_vlan entered promiscuous mode [ 96.806218][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.823039][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.928338][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.985174][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.074639][ T5018] process 'syz.5.173' launched '/dev/fd/3' with NULL argv: empty string added [ 97.378842][ T4969] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.510821][ T4969] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.607105][ T4257] Bluetooth: hci2: command 0x0409 tx timeout [ 97.615285][ T4969] device bridge_slave_0 entered promiscuous mode [ 97.639546][ T4969] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.652158][ T4969] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.722382][ T4969] device bridge_slave_1 entered promiscuous mode [ 97.751729][ T4794] device veth1_vlan entered promiscuous mode [ 97.782850][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.037002][ T4969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.087008][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.108460][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.159683][ T4794] device veth0_macvtap entered promiscuous mode [ 98.186062][ T4969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.236851][ T4794] device veth1_macvtap entered promiscuous mode [ 98.341423][ T4969] team0: Port device team_slave_0 added [ 98.364605][ T4794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.390647][ T4794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.426092][ T4794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.464192][ T4794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.500051][ T4794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.541598][ T4794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.582919][ T4794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.635501][ T4794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.683681][ T4794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.722221][ T4794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.771539][ T4794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.843596][ T4969] team0: Port device team_slave_1 added [ 99.611474][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.622872][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.632788][ T1347] Bluetooth: hci2: command 0x041b tx timeout [ 99.723732][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.762870][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.842698][ T4794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.881679][ T4794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.899827][ T4794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.921322][ T4794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.942288][ T4794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.978862][ T4794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.000410][ T4794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.012685][ T4794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.049575][ T4794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.083534][ T4794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.095130][ T4794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.106349][ T4794] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.117107][ T4794] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.145043][ T4794] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.162923][ T4794] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.191554][ T4969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.202772][ T4969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.255052][ T4969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.267219][ T5052] loop5: detected capacity change from 0 to 8 [ 100.288063][ T4969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.316136][ T4969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.347159][ T4969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.366840][ T5052] SQUASHFS error: Unable to read directory block [631:26] [ 100.394933][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.410193][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.535876][ T4969] device hsr_slave_0 entered promiscuous mode [ 100.578108][ T4969] device hsr_slave_1 entered promiscuous mode [ 100.591838][ T4969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.601017][ T4969] Cannot create hsr debugfs directory [ 100.715435][ T4594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.748102][ T4594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.789908][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.889694][ T4602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.900023][ T4602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.946679][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.988216][ T4369] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.092539][ T4369] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.151386][ T5072] loop7: detected capacity change from 0 to 512 [ 101.178262][ T4369] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.269890][ T4369] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.295480][ T5072] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.368887][ T5072] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.523227][ T5072] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 101.583866][ T5072] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.182: inode #9: comm syz.7.182: iget: illegal inode # [ 101.616023][ T5072] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.182: error while reading EA inode 9 err=-117 [ 101.630259][ T5072] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: comm syz.7.182: inode #9: comm syz.7.182: iget: illegal inode # [ 101.969779][ T5072] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.182: error while reading EA inode 9 err=-117 [ 101.991986][ T4369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.059502][ T4259] Bluetooth: hci2: command 0x040f tx timeout [ 102.177976][ T4369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.548733][ T4369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.950387][ T4369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.133152][ T4969] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 103.178562][ T4969] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 103.882551][ T4949] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 104.005046][ T26] audit: type=1800 audit(1793408492.955:2): pid=5132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.195" name="bmaControls" dev="configfs" ino=37255 res=0 errno=0 [ 104.112820][ T4961] Bluetooth: hci2: command 0x0419 tx timeout [ 104.142466][ T4949] usb 8-1: Using ep0 maxpacket: 32 [ 104.262589][ T4949] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.271571][ T4949] usb 8-1: config 0 has no interface number 0 [ 104.285826][ T4949] usb 8-1: config 0 interface 184 has no altsetting 0 [ 104.391817][ T4969] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 104.428109][ T4969] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 104.452603][ T4949] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.461767][ T4949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.504578][ T4949] usb 8-1: Product: syz [ 104.508788][ T4949] usb 8-1: Manufacturer: syz [ 104.519182][ T4949] usb 8-1: SerialNumber: syz [ 104.557116][ T4949] usb 8-1: config 0 descriptor?? [ 104.649153][ T5148] loop5: detected capacity change from 0 to 512 [ 104.725190][ T4949] smsc75xx v1.0.0 [ 105.355787][ T4949] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 105.421207][ T4949] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 105.509822][ T4949] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 105.573161][ T4949] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 105.620742][ T4949] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 105.660637][ T4949] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 105.700254][ T4949] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 105.779606][ T4949] usb 8-1: USB disconnect, device number 2 [ 106.155915][ T5148] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.167092][ T5148] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.214906][ T5148] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.199: No space for directory leaf checksum. Please run e2fsck -D. [ 106.231239][ T5148] EXT4-fs error (device loop5): ext4_readdir:223: inode #2: comm syz.5.199: path /25/file0: directory fails checksum at offset 0 [ 106.885945][ T5158] loop6: detected capacity change from 0 to 1024 [ 107.033629][ T5158] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 107.080621][ T4969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.165370][ T5158] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 107.656512][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.678554][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.769096][ T4969] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.869102][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.891205][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.920528][ T5177] syz.2.208 uses obsolete (PF_INET,SOCK_PACKET) [ 107.992053][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.999229][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.050350][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.109100][ T5183] FAULT_INJECTION: forcing a failure. [ 108.109100][ T5183] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.109133][ T5183] CPU: 0 PID: 5183 Comm: syz.5.209 Not tainted syzkaller #0 [ 108.109153][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.109163][ T5183] Call Trace: [ 108.109169][ T5183] [ 108.109177][ T5183] dump_stack_lvl+0x188/0x250 [ 108.109207][ T5183] ? show_regs_print_info+0x20/0x20 [ 108.109229][ T5183] ? load_image+0x410/0x410 [ 108.109252][ T5183] ? __lock_acquire+0x7d40/0x7d40 [ 108.109272][ T5183] ? copy_map_value+0xf8/0x270 [ 108.109297][ T5183] should_fail+0x383/0x4b0 [ 108.109320][ T5183] _copy_to_user+0x2e/0x130 [ 108.109340][ T5183] generic_map_lookup_batch+0x7aa/0xbb0 [ 108.109373][ T5183] ? bpf_map_update_value+0x650/0x650 [ 108.109398][ T5183] ? __fdget+0x18b/0x210 [ 108.109417][ T5183] ? bpf_map_update_value+0x650/0x650 [ 108.109435][ T5183] bpf_map_do_batch+0x2e0/0x5f0 [ 108.109455][ T5183] ? bpf_lsm_bpf+0x5/0x10 [ 108.109487][ T5183] ? security_bpf+0x7a/0xa0 [ 108.109507][ T5183] __sys_bpf+0x671/0x6f0 [ 108.109531][ T5183] ? bpf_link_show_fdinfo+0x380/0x380 [ 108.109572][ T5183] __x64_sys_bpf+0x78/0x90 [ 108.109593][ T5183] do_syscall_64+0x4c/0xa0 [ 108.109610][ T5183] ? clear_bhb_loop+0x30/0x80 [ 108.109631][ T5183] ? clear_bhb_loop+0x30/0x80 [ 108.109653][ T5183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.109673][ T5183] RIP: 0033:0x7fcba47d8559 [ 108.109692][ T5183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.109707][ T5183] RSP: 002b:00007fcba2a2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.109731][ T5183] RAX: ffffffffffffffda RBX: 00007fcba4a5efa0 RCX: 00007fcba47d8559 [ 108.109744][ T5183] RDX: 0000000000000038 RSI: 0000200000000d80 RDI: 0000000000000018 [ 108.109757][ T5183] RBP: 00007fcba486fb20 R08: 0000000000000000 R09: 0000000000000000 [ 108.109769][ T5183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.109781][ T5183] R13: 00007fcba4a5f038 R14: 00007fcba4a5efa0 R15: 00007ffdc4753b18 [ 108.109809][ T5183] [ 108.297103][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.346943][ T5192] loop5: detected capacity change from 0 to 256 [ 108.392011][ T5195] netlink: 128 bytes leftover after parsing attributes in process `syz.7.200'. [ 108.401972][ T5195] netlink: 20 bytes leftover after parsing attributes in process `syz.7.200'. [ 108.410917][ T5195] netlink: 20 bytes leftover after parsing attributes in process `syz.7.200'. [ 110.511559][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.533625][ T4599] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.540716][ T4599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.548441][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.566132][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.686772][ T5205] loop6: detected capacity change from 0 to 512 [ 110.959583][ T5205] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.971983][ T5205] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.007924][ T5205] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.212: No space for directory leaf checksum. Please run e2fsck -D. [ 111.023376][ T5205] EXT4-fs error (device loop6): ext4_readdir:223: inode #2: comm syz.6.212: path /11/file0: directory fails checksum at offset 0 [ 111.265718][ T5207] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 112.567795][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.587958][ T5227] loop7: detected capacity change from 0 to 512 [ 112.595396][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.690653][ T4969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.714785][ T4969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.726922][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.733723][ T5227] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.736176][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.754396][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.767249][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.786353][ T5227] ext4 filesystem being mounted at /7/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.815748][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.841278][ T5235] loop2: detected capacity change from 0 to 1024 [ 112.854228][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.862957][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.871326][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.964479][ T5235] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.928286][ T4191] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /65/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 114.012749][ T4191] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /65/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 114.498601][ T4191] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 114.611382][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.658976][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.710598][ T4191] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 114.734493][ T4969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.790104][ T4191] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /65/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 114.854643][ T4191] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /65/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 114.942895][ T4191] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 115.042677][ T4191] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 115.120094][ T4191] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /65/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 115.158331][ T4191] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /65/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 115.406085][ T4191] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 115.553805][ T4191] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 115.641092][ T4191] EXT4-fs error (device loop2): ext4_read_inline_dir:1635: inode #12: block 7: comm syz-executor: path /65/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 115.776881][ T4191] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 115.828290][ T5295] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.829000][ T4191] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 115.906820][ T4191] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 115.944224][ T4191] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 115.997893][ T5301] loop5: detected capacity change from 0 to 2048 [ 116.020562][ T4191] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 116.082516][ T5301] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 116.088314][ T4191] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 116.090680][ T5301] EXT4-fs (loop5): Mount option "norecovery" incompatible with ext2 [ 116.193036][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.208881][ T4191] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 116.251680][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.396298][ T5304] netlink: 24 bytes leftover after parsing attributes in process `syz.5.231'. [ 116.437198][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.448110][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.459212][ T4969] device veth0_vlan entered promiscuous mode [ 116.601227][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.609426][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.625048][ T5310] loop5: detected capacity change from 0 to 1024 [ 116.657426][ T4969] device veth1_vlan entered promiscuous mode [ 116.675554][ T5310] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 116.675554][ T5310] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 116.675554][ T5310] [ 116.693498][ T5310] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.748697][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.759999][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.775671][ T5310] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000007,noquota,delalloc,noacl,nodioread_nolock,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 116.796623][ T5310] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.837349][ T4969] device veth0_macvtap entered promiscuous mode [ 116.845859][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.894509][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.958102][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.771889][ T4969] device veth1_macvtap entered promiscuous mode [ 117.803076][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.893083][ T4369] device hsr_slave_0 left promiscuous mode [ 117.901899][ T4369] device hsr_slave_1 left promiscuous mode [ 117.937063][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.956678][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.986751][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.001833][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.017823][ T5335] loop5: detected capacity change from 0 to 512 [ 118.025599][ T4369] device bridge_slave_1 left promiscuous mode [ 118.058561][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.082445][ T5335] EXT4-fs (loop5): Ignoring removed nobh option [ 118.088890][ T5335] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 118.118956][ T4369] device bridge_slave_0 left promiscuous mode [ 118.159014][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.225230][ T4369] device hsr_slave_0 left promiscuous mode [ 118.235839][ T5335] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.236: inode has both inline data and extents flags [ 118.249239][ T4369] device hsr_slave_1 left promiscuous mode [ 118.256130][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.282388][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.292545][ T5335] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.236: couldn't read orphan inode 15 (err -117) [ 118.301416][ T5353] ip_tables: iptables: counters copy to user failed while replacing table [ 118.313003][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.313096][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.329539][ T4369] device bridge_slave_1 left promiscuous mode [ 118.336917][ T5335] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,init_itable=0x0000000000000001,discard,nouid32,data=journal,jqfmt=vfsold,jqfmt=vfsv1,sysvgroups,nobh,journal_dev=0x0000000000005074,auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: none. [ 118.380223][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.422810][ T4369] device bridge_slave_0 left promiscuous mode [ 118.429047][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.494027][ T4369] device veth1_macvtap left promiscuous mode [ 118.500201][ T4369] device veth0_macvtap left promiscuous mode [ 118.513610][ T4470] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 118.520777][ T4369] device veth1_vlan left promiscuous mode [ 118.554834][ T4470] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 23: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=9, size=1024 fake=0 [ 118.555040][ T4369] device veth0_vlan left promiscuous mode [ 118.597074][ T4470] EXT4-fs error (device loop5): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 118.620790][ T4369] device veth1_macvtap left promiscuous mode [ 118.637513][ T4369] device veth0_macvtap left promiscuous mode [ 118.637588][ T4470] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 118.655236][ T4369] device veth1_vlan left promiscuous mode [ 118.677714][ T4470] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 23: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=9, size=1024 fake=0 [ 118.682375][ T4369] device veth0_vlan left promiscuous mode [ 118.711633][ T4470] EXT4-fs error (device loop5): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 118.740151][ T4470] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 118.771942][ T4470] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 23: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=9, size=1024 fake=0 [ 118.834807][ T4470] EXT4-fs error (device loop5): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 118.866333][ T4470] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /38/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 119.330597][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 119.346010][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 119.358307][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.375747][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.442659][ T4369] bond0 (unregistering): Released all slaves [ 119.581319][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 119.611024][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 119.640896][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.668047][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.027518][ T4369] bond0 (unregistering): Released all slaves [ 120.464843][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.483314][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.550746][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.577080][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.602299][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.622801][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.633049][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.643986][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.670719][ T4969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.703743][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.724988][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.745017][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.762534][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.783404][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.822253][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.852351][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.893501][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.922240][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.952262][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.983053][ T4969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.002715][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.022446][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.063263][ T4969] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.072009][ T4969] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.120975][ T4969] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.159966][ T4969] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.190235][ T5378] rxe_eth0 speed is unknown, defaulting to 1000 [ 121.847285][ T4597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.921966][ T4597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.123880][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.142250][ T4597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.151395][ T4597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.156593][ T5392] rxe_eth0 speed is unknown, defaulting to 1000 [ 122.264035][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.507341][ T5414] loop7: detected capacity change from 0 to 512 [ 123.846968][ T4257] Bluetooth: hci3: command 0x0409 tx timeout [ 123.854237][ T4260] Bluetooth: hci4: command 0x0409 tx timeout [ 123.879996][ T5414] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.891073][ T5414] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.925000][ T5414] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.257: No space for directory leaf checksum. Please run e2fsck -D. [ 123.940617][ T5414] EXT4-fs error (device loop7): ext4_readdir:223: inode #2: comm syz.7.257: path /16/file0: directory fails checksum at offset 0 [ 124.883020][ T5378] chnl_net:caif_netlink_parms(): no params data found [ 124.994086][ T5434] loop8: detected capacity change from 0 to 2048 [ 125.076736][ T5434] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier=0x0000000001000007,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 125.105927][ T5434] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.106260][ T5440] sctp: [Deprecated]: syz.7.261 (pid 5440) Use of int in max_burst socket option deprecated. [ 125.106260][ T5440] Use struct sctp_assoc_value instead [ 125.944141][ T4257] Bluetooth: hci4: command 0x041b tx timeout [ 125.950548][ T4257] Bluetooth: hci3: command 0x041b tx timeout [ 126.021651][ T5378] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.057562][ T5378] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.242287][ T5461] ================================================================== [ 126.250892][ T5461] BUG: KASAN: null-ptr-deref in dm_kcopyd_client_destroy+0xad/0x480 [ 126.259430][ T5461] Read of size 4 at addr 0000000000000174 by task syz.7.264/5461 [ 126.267167][ T5461] [ 126.269495][ T5461] CPU: 0 PID: 5461 Comm: syz.7.264 Not tainted syzkaller #0 [ 126.276784][ T5461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.286864][ T5461] Call Trace: [ 126.290160][ T5461] [ 126.293099][ T5461] dump_stack_lvl+0x188/0x250 [ 126.297791][ T5461] ? dm_kcopyd_client_destroy+0xad/0x480 [ 126.303438][ T5461] ? show_regs_print_info+0x20/0x20 [ 126.308648][ T5461] ? load_image+0x410/0x410 [ 126.313159][ T5461] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 126.318630][ T5461] ? mark_lock+0x94/0x320 [ 126.322967][ T5461] ? dm_kcopyd_client_destroy+0xad/0x480 [ 126.328607][ T5461] kasan_report+0xd5/0x130 [ 126.333220][ T5461] ? dm_kcopyd_client_destroy+0xad/0x480 [ 126.338960][ T5461] kasan_check_range+0x235/0x290 [ 126.343916][ T5461] dm_kcopyd_client_destroy+0xad/0x480 [ 126.349385][ T5461] ? do_work+0x2b0/0x2b0 [ 126.353633][ T5461] ? slab_free_freelist_hook+0xec/0x170 [ 126.359200][ T5461] ? __destroy+0x139/0x2f0 [ 126.363726][ T5461] ? kfree+0xef/0x2a0 [ 126.367734][ T5461] __destroy+0x172/0x2f0 [ 126.371983][ T5461] cache_ctr+0x171e/0x2ca0 [ 126.376468][ T5461] ? verity_prefetch_io+0x670/0x670 [ 126.381678][ T5461] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 126.387413][ T5461] ? lockdep_hardirqs_on+0x94/0x140 [ 126.392637][ T5461] dm_table_add_target+0x5a2/0xba0 [ 126.397785][ T5461] table_load+0x2ce/0x760 [ 126.402145][ T5461] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 126.407841][ T5461] ? dev_wait+0x330/0x330 [ 126.412190][ T5461] dm_ctl_ioctl+0x947/0xd00 [ 126.416703][ T5461] ? dev_wait+0x330/0x330 [ 126.421035][ T5461] ? dm_poll+0x120/0x120 [ 126.425284][ T5461] ? preempt_schedule_irq+0xe6/0x160 [ 126.430629][ T5461] ? bpf_lsm_file_free_security+0x10/0x10 [ 126.436380][ T5461] ? bpf_lsm_file_ioctl+0x5/0x10 [ 126.441370][ T5461] ? security_file_ioctl+0x7c/0xa0 [ 126.446506][ T5461] ? dm_poll+0x120/0x120 [ 126.450772][ T5461] __se_sys_ioctl+0xfa/0x170 [ 126.455384][ T5461] do_syscall_64+0x4c/0xa0 [ 126.459710][ T5378] device bridge_slave_0 entered promiscuous mode [ 126.459820][ T5461] ? clear_bhb_loop+0x30/0x80 [ 126.470801][ T5461] ? clear_bhb_loop+0x30/0x80 [ 126.474992][ T5378] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.475491][ T5461] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.488022][ T5378] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.488464][ T5461] RIP: 0033:0x7fdde42c2559 [ 126.499871][ T5461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.508644][ T5378] device bridge_slave_1 entered promiscuous mode [ 126.519488][ T5461] RSP: 002b:00007fdde24d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.519517][ T5461] RAX: ffffffffffffffda RBX: 00007fdde4549180 RCX: 00007fdde42c2559 [ 126.519531][ T5461] RDX: 0000200000000640 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 126.519543][ T5461] RBP: 00007fdde4359b20 R08: 0000000000000000 R09: 0000000000000000 [ 126.519556][ T5461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.519567][ T5461] R13: 00007fdde4549218 R14: 00007fdde4549180 R15: 00007ffe097c65f8 [ 126.519597][ T5461] [ 126.519604][ T5461] ================================================================== [ 126.519611][ T5461] Disabling lock debugging due to kernel taint [ 126.520662][ T5461] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 126.598645][ T5461] CPU: 0 PID: 5461 Comm: syz.7.264 Tainted: G B syzkaller #0 [ 126.607328][ T5461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.617488][ T5461] Call Trace: [ 126.620781][ T5461] [ 126.623720][ T5461] dump_stack_lvl+0x188/0x250 [ 126.626199][ T5378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.628416][ T5461] ? show_regs_print_info+0x20/0x20 [ 126.628443][ T5461] ? load_image+0x410/0x410 [ 126.647137][ T5461] panic+0x2f8/0x850 [ 126.651058][ T5461] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 126.657285][ T5461] ? bpf_jit_dump+0xd0/0xd0 [ 126.661900][ T5461] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 126.667902][ T5461] ? _raw_spin_unlock+0x40/0x40 [ 126.668834][ T5378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.672762][ T5461] ? dm_kcopyd_client_destroy+0xad/0x480 [ 126.672789][ T5461] check_panic_on_warn+0x80/0xa0 [ 126.672810][ T5461] ? dm_kcopyd_client_destroy+0xad/0x480 [ 126.672830][ T5461] end_report+0x6d/0xf0 [ 126.672850][ T5461] kasan_report+0x102/0x130 [ 126.706679][ T5461] ? dm_kcopyd_client_destroy+0xad/0x480 [ 126.712343][ T5461] kasan_check_range+0x235/0x290 [ 126.717296][ T5461] dm_kcopyd_client_destroy+0xad/0x480 [ 126.722774][ T5461] ? do_work+0x2b0/0x2b0 [ 126.727033][ T5461] ? slab_free_freelist_hook+0xec/0x170 [ 126.732596][ T5461] ? __destroy+0x139/0x2f0 [ 126.734207][ T5378] team0: Port device team_slave_0 added [ 126.737038][ T5461] ? kfree+0xef/0x2a0 [ 126.737064][ T5461] __destroy+0x172/0x2f0 [ 126.737083][ T5461] cache_ctr+0x171e/0x2ca0 [ 126.755207][ T5461] ? verity_prefetch_io+0x670/0x670 [ 126.760422][ T5461] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 126.765199][ T5378] team0: Port device team_slave_1 added [ 126.766063][ T5461] ? lockdep_hardirqs_on+0x94/0x140 [ 126.776788][ T5461] dm_table_add_target+0x5a2/0xba0 [ 126.781913][ T5461] table_load+0x2ce/0x760 [ 126.786248][ T5461] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 126.791905][ T5461] ? dev_wait+0x330/0x330 [ 126.796257][ T5461] dm_ctl_ioctl+0x947/0xd00 [ 126.801123][ T5461] ? dev_wait+0x330/0x330 [ 126.804388][ T5378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.805473][ T5461] ? dm_poll+0x120/0x120 [ 126.805500][ T5461] ? preempt_schedule_irq+0xe6/0x160 [ 126.805534][ T5461] ? bpf_lsm_file_free_security+0x10/0x10 [ 126.824194][ T5378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.827638][ T5461] ? bpf_lsm_file_ioctl+0x5/0x10 [ 126.858436][ T5461] ? security_file_ioctl+0x7c/0xa0 [ 126.863572][ T5461] ? dm_poll+0x120/0x120 [ 126.867838][ T5461] __se_sys_ioctl+0xfa/0x170 [ 126.872448][ T5461] do_syscall_64+0x4c/0xa0 [ 126.876881][ T5461] ? clear_bhb_loop+0x30/0x80 [ 126.881568][ T5461] ? clear_bhb_loop+0x30/0x80 [ 126.885067][ T5378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.886286][ T5461] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.902681][ T5461] RIP: 0033:0x7fdde42c2559 [ 126.907118][ T5461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.918171][ T5378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.926901][ T5461] RSP: 002b:00007fdde24d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.926926][ T5461] RAX: ffffffffffffffda RBX: 00007fdde4549180 RCX: 00007fdde42c2559 [ 126.926939][ T5461] RDX: 0000200000000640 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 126.926952][ T5461] RBP: 00007fdde4359b20 R08: 0000000000000000 R09: 0000000000000000 [ 126.954092][ T5378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.958225][ T5461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.958240][ T5461] R13: 00007fdde4549218 R14: 00007fdde4549180 R15: 00007ffe097c65f8 [ 126.958261][ T5461] [ 126.983683][ T5378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.992172][ T5461] Kernel Offset: disabled [ 127.026830][ T5461] Rebooting in 86400 seconds..