last executing test programs: 3.606905264s ago: executing program 4 (id=1548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600402fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.124620585s ago: executing program 4 (id=1551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x109c40) 2.032338512s ago: executing program 4 (id=1566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0xf870, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x5, 0x5, 0x9, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x7fff, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0x10, 0x10, 0x2, 0x2, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0x1d06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0xdd, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x5, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.927270594s ago: executing program 2 (id=1567): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/trace\x00', 0x20602, 0x32) 1.925923134s ago: executing program 0 (id=1568): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x10000}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = userfaultfd(0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2802020, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x1, 0x54, 0x0, 0x1}, 0x9c) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) 1.906882754s ago: executing program 2 (id=1569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffc, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0xc}, {}, {0xa, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 1.838508157s ago: executing program 4 (id=1570): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file2\x00', 0x4810, &(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES64, @ANYRESHEX], 0xfe, 0x1cd, &(0x7f0000000640)="$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") sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r1], 0x1c}}, 0x4040850) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1.503710074s ago: executing program 4 (id=1572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600402fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.463083655s ago: executing program 2 (id=1573): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/1024, 0x400) 1.359664728s ago: executing program 2 (id=1574): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mremap(&(0x7f00008cc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000046d000/0x2000)=nil) syz_clone(0xc080000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 1.28868088s ago: executing program 2 (id=1575): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x5b7b, 0x32000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000400)=""/16, 0x10, 0xc9100114, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.186502212s ago: executing program 3 (id=1578): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1e) 856.60704ms ago: executing program 3 (id=1580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0xf870, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x5, 0x5, 0x9, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x7fff, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0x10, 0x10, 0x2, 0x2, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0x1d06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0xdd, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x5, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 855.42422ms ago: executing program 0 (id=1581): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/trace\x00', 0x20602, 0x32) 833.75094ms ago: executing program 4 (id=1582): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1d, 0x9, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fc}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x4000090) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) 817.833341ms ago: executing program 0 (id=1583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffc, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0xc}, {}, {0xa, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 395.610571ms ago: executing program 1 (id=1585): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file2\x00', 0x4810, &(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES64, @ANYRESHEX], 0xfe, 0x1cd, &(0x7f0000000640)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmv/1Z0566motk2VmaPXUlgeLnfIDi8nBLGVmCE09sqhYiCE7MScntah4IUPFreSkitMnGFiu219TaZbgdPgjz+GQpOmgw3TExyNrRmMJ5yQpTTE2tkyFs2c+yK9j0zjC8GgF88Y6z7zGusLUqXkNeUlVWVVZ8yZO3DizsbOxceXEuqg0v1WMLSkum5o6GZkctqgJbGY2VJ9koz3hXfuqh0kOrD0efs2njJVepzJfMl5YJHVqRdXMCV+UZjMafme4w1O2QkJDw0niioRFgwnjh/9pDa4gJ6Y0MKQphDEmqbGJtW1hZmBg4GdzW6DQknyCKfQox9KZEhYHhKpO/rTUfOuQ6DZj21MHtjM8h4/zrCnoEzQ6LsHgtFDwvwzImISGhjKNtUxLbRd8KdL4K+G12tgpg8HdnmkZLEBZGkDkSihPFqwnIXmFh46mplFKckLDJomEJLcCw5cMW/dwrhZoYECKNhUGBobtjCjRyHANFq+jYBSMglEwCkbBKBgFo2AUjIJRMApGBAAEAAD///hBlhM=") sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r1], 0x1c}}, 0x4040850) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 388.427721ms ago: executing program 0 (id=1586): rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 341.966992ms ago: executing program 2 (id=1587): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000a340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0xd) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/5, 0x30}], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 341.024252ms ago: executing program 3 (id=1588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 314.890143ms ago: executing program 1 (id=1589): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="e1"], 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2800010, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x28) 278.763494ms ago: executing program 1 (id=1590): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f00000001a0002000000000000000000fc020000000000000000000000000000e000000200"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+'], 0xf0}}, 0x0) r0 = syz_io_uring_setup(0x34ba, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x2, 0x2086, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r4, 0x84, 0xb, 0xfffffffffffffffe, &(0x7f0000000040)=0x41) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd_index=0x9, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 237.041395ms ago: executing program 1 (id=1591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newrule={0x38, 0x20, 0x1, 0x71bd28, 0x35dfdbff, {0xa, 0x80, 0x10, 0x0, 0xb5, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 207.618146ms ago: executing program 1 (id=1592): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3f, 0xb604}, 0x80, 0x0}, 0x0) 166.873636ms ago: executing program 3 (id=1593): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x800442, &(0x7f0000000740)=ANY=[], 0x13, 0x240, &(0x7f00000008c0)="$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") 117.192908ms ago: executing program 0 (id=1594): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) write$tun(r0, &(0x7f0000000280)={@val={0xa, 0x890d}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="0eb6ff7fffff", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x74, '\x00', {0x1, 0x6, "dc46d9", 0x5, 0x33, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, @private1, [@srh={0x29, 0x0, 0x4, 0x0, 0x3, 0x78, 0xbc4}, @routing={0x2b, 0x0, 0x0, 0x94}]}}}}}}}}, 0x7a) 116.954558ms ago: executing program 3 (id=1595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x200048d4) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 116.102738ms ago: executing program 0 (id=1596): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) getsockname$packet(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r5) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r6}, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r4, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) r7 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x2, 0x1, 0x0, 0x5, 0x0, 0xffe, [{0x1, 0x1}]}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000640)=""/192, 0x34, 0xc0, 0x1}, 0x28) statx(0xffffffffffffffff, 0x0, 0x400, 0x404, 0x0) 2.10623ms ago: executing program 1 (id=1597): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0xec) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000680)='\x00\x00\x00', 0x3) 0s ago: executing program 3 (id=1598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r1, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x82}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x4, 0x2}, {0xf, 0xb, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) kernel console output (not intermixed with test programs): [ 9.372320][ T3995] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.411925][ T11] gvnic 0000:00:00.0 enp0s0: Device link is up. OK [ 9.422556][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. syzkaller login: [ 28.221669][ T4317] cgroup: Unknown subsys name 'net' [ 28.483802][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.789357][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.480379][ T4333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.488341][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.490619][ T4342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.492567][ T4342] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.493375][ T4336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.494034][ T4342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.495607][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.496618][ T4342] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.497495][ T4336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.498761][ T4343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.500277][ T4336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.501574][ T4343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.503077][ T4336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.503873][ T4343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.504501][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.505528][ T4343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.506883][ T4336] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.508155][ T4343] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.509383][ T4336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.510657][ T4343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.511787][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.512996][ T4343] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.515435][ T4343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.516865][ T4343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.536602][ T4342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.538282][ T4342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.539668][ T4342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.541881][ T4342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.543470][ T4342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.546640][ T4342] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.671480][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 29.703978][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 29.707941][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 29.714302][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.715558][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.717113][ T4337] device bridge_slave_0 entered promiscuous mode [ 29.720621][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.722022][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.723639][ T4337] device bridge_slave_1 entered promiscuous mode [ 29.726685][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 29.750282][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 29.760945][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.770461][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.789328][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.790664][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.792884][ T4334] device bridge_slave_0 entered promiscuous mode [ 29.795610][ T4337] team0: Port device team_slave_0 added [ 29.806178][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.807483][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.809066][ T4334] device bridge_slave_1 entered promiscuous mode [ 29.810981][ T4337] team0: Port device team_slave_1 added [ 29.814445][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.815786][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.817419][ T4330] device bridge_slave_0 entered promiscuous mode [ 29.828720][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.830094][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.831843][ T4329] device bridge_slave_0 entered promiscuous mode [ 29.833511][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.834706][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.836443][ T4330] device bridge_slave_1 entered promiscuous mode [ 29.848041][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.849293][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.850899][ T4329] device bridge_slave_1 entered promiscuous mode [ 29.855675][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.857515][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.858679][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.863049][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.865577][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.866842][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.868420][ T4341] device bridge_slave_0 entered promiscuous mode [ 29.870964][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.874335][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.884924][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.886806][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.888002][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.892409][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.894316][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.895551][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.897155][ T4341] device bridge_slave_1 entered promiscuous mode [ 29.903788][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.906959][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.915029][ T4330] team0: Port device team_slave_0 added [ 29.924790][ T4330] team0: Port device team_slave_1 added [ 29.926835][ T4334] team0: Port device team_slave_0 added [ 29.928633][ T4334] team0: Port device team_slave_1 added [ 29.933480][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.939571][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.940815][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.945998][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.953610][ T4329] team0: Port device team_slave_0 added [ 29.955327][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.982563][ T4337] device hsr_slave_0 entered promiscuous mode [ 30.021403][ T4337] device hsr_slave_1 entered promiscuous mode [ 30.061903][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.063107][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.067305][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.072067][ T4329] team0: Port device team_slave_1 added [ 30.077199][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.078319][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.082791][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.090095][ T4341] team0: Port device team_slave_0 added [ 30.091835][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.093009][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.097117][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.106942][ T4341] team0: Port device team_slave_1 added [ 30.108325][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.109407][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.113863][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.125099][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.126289][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.130289][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.192350][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.241408][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.283529][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.284903][ T4330] Cannot create hsr debugfs directory [ 30.286141][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.287337][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.291754][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.298647][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.299846][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.304483][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.342373][ T4334] device hsr_slave_0 entered promiscuous mode [ 30.381399][ T4334] device hsr_slave_1 entered promiscuous mode [ 30.423517][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.424836][ T4334] Cannot create hsr debugfs directory [ 30.482349][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.521399][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.561224][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.562526][ T4329] Cannot create hsr debugfs directory [ 30.612353][ T4341] device hsr_slave_0 entered promiscuous mode [ 30.651485][ T4341] device hsr_slave_1 entered promiscuous mode [ 30.711258][ T4341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.712704][ T4341] Cannot create hsr debugfs directory [ 30.818339][ T4337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.855681][ T4337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.895722][ T4337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.932664][ T4337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.995062][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.033673][ T4334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.074191][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.122331][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.183096][ T4334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.222469][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.262304][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.305176][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.352085][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.383269][ T4334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.432337][ T4334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.473750][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.531518][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 31.531645][ T4342] Bluetooth: hci3: command 0x0409 tx timeout [ 31.537549][ T4341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.541294][ T4344] Bluetooth: hci2: command 0x0409 tx timeout [ 31.584491][ T4341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.611343][ T4342] Bluetooth: hci1: command 0x0409 tx timeout [ 31.612476][ T4342] Bluetooth: hci4: command 0x0409 tx timeout [ 31.622428][ T4341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.652811][ T4341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.704984][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.726720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.728964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.739107][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.753306][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.754984][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.756703][ T1617] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.757949][ T1617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.759689][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.769073][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.770802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.775791][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.777006][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.782609][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.786381][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.794794][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.796608][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.798038][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.800092][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.803227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.804969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.806779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.810016][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.814772][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.820189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.821987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.823506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.825124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.826622][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.827797][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.834793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.839041][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.845194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.846780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.848701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.851007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.855900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.857512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.859269][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.860522][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.862605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.864226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.865840][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.867085][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.868408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.870094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.874430][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.875609][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.877014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.882716][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.884222][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.885785][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.887698][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.889839][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.901706][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.903777][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.905426][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.907152][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.908977][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.911018][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.913507][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.916782][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.918460][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.920511][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.927045][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.930253][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.935161][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.937178][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.938833][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.940401][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.942588][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.945603][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.958327][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.960011][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.962550][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.963819][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.965595][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.968574][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.975130][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.976892][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.978520][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.980101][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.983017][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.987474][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.991335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.992907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.997533][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.001088][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.002911][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.004675][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.006200][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.007444][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.008902][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.016891][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.024134][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.025857][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.031496][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.032769][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.045304][ T4337] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.047139][ T4337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.060412][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.062575][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.064245][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.065871][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.067490][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.069029][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.070488][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.075901][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.077406][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.079283][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.080926][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.097277][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.099241][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.100925][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.103124][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.104347][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.106080][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.107613][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.108841][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.110851][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.122593][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.126495][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.127593][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.128829][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.130898][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.134466][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.136069][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.137750][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.139385][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.149191][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.150755][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.153364][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.161005][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.163874][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.166782][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.168448][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.169994][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.172720][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.178840][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.180476][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.190178][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.192188][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.204645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.206286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.213635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.215470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.217200][ T4329] device veth0_vlan entered promiscuous mode [ 32.224611][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.225820][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.230482][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.232992][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.234664][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.236673][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.238016][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.244708][ T4329] device veth1_vlan entered promiscuous mode [ 32.247824][ T4334] device veth0_vlan entered promiscuous mode [ 32.256987][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.260443][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.262110][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.263662][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.265207][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.267041][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.268235][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.270277][ T4330] device veth0_vlan entered promiscuous mode [ 32.283796][ T4334] device veth1_vlan entered promiscuous mode [ 32.286011][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.287775][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.289308][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.297620][ T4330] device veth1_vlan entered promiscuous mode [ 32.303967][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.305667][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.307152][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.308805][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.320147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.322396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.323900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.336854][ T4329] device veth0_macvtap entered promiscuous mode [ 32.339759][ T4329] device veth1_macvtap entered promiscuous mode [ 32.342816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.344323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.345761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.347415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.352940][ T4334] device veth0_macvtap entered promiscuous mode [ 32.356241][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.357818][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.359395][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.369105][ T4334] device veth1_macvtap entered promiscuous mode [ 32.370883][ T4330] device veth0_macvtap entered promiscuous mode [ 32.373933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.375499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.377003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.378645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.380459][ T4337] device veth0_vlan entered promiscuous mode [ 32.387937][ T4337] device veth1_vlan entered promiscuous mode [ 32.390160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.392080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.393352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.397316][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.399685][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.408376][ T4330] device veth1_macvtap entered promiscuous mode [ 32.410162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.412448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.414162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.415730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.417371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.420281][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.422654][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.423978][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.425391][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.433172][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.434901][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.437188][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.440301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.442099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.443695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.452787][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.454669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.470916][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.473969][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.475517][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.477250][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.479598][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.481002][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.483396][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.485576][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.488581][ T4337] device veth0_macvtap entered promiscuous mode [ 32.490999][ T4337] device veth1_macvtap entered promiscuous mode [ 32.496574][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.498390][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.500110][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.502215][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.503914][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.505879][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.507563][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.509096][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.515807][ T4334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.517307][ T4334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.518777][ T4334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.520266][ T4334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.527057][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.528826][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.530527][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.534408][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.536814][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.538014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.539695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.552986][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.554761][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.556465][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.558120][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.559645][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.561914][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.564272][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.568210][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.569800][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.575217][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.576906][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.578566][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.580193][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.585093][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.586570][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.587961][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.589368][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.595735][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.597015][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.603933][ T4341] device veth0_vlan entered promiscuous mode [ 32.606530][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.612081][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.614037][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.615540][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.617238][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.618998][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.620662][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.624094][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.636685][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.638427][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.643621][ T4337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.644983][ T4337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.646411][ T4337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.647824][ T4337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.666450][ T4341] device veth1_vlan entered promiscuous mode [ 32.677882][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.679210][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.686131][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.687915][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.693861][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.695228][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.696636][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.698269][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.705244][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.708950][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.718545][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.732720][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.734264][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.734854][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.737060][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.738735][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.752003][ T4341] device veth0_macvtap entered promiscuous mode [ 32.777737][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.779283][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.780965][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.783806][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.800212][ T4341] device veth1_macvtap entered promiscuous mode [ 32.806283][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.808028][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.809651][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.812825][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.814448][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.816348][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.817951][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.819565][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.822493][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.824714][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.826317][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.827849][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.829533][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.831031][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.833597][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.835301][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.837190][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.839570][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.841972][ T4341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.843631][ T4341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.845103][ T4341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.846506][ T4341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.859362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.868872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.871673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.875168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.375251][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.377244][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.389728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.405053][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.409820][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.410963][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.413315][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.416315][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.418536][ T1294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.447369][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.448719][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.450217][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.616173][ T4426] loop0: detected capacity change from 0 to 8192 [ 33.625959][ T4344] Bluetooth: hci0: command 0x041b tx timeout [ 33.679846][ T4342] Bluetooth: hci2: command 0x041b tx timeout [ 33.686376][ T4344] Bluetooth: hci3: command 0x041b tx timeout [ 33.687873][ T4426] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.479627][ T4431] loop4: detected capacity change from 0 to 512 [ 34.509925][ T4431] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.5: corrupted in-inode xattr [ 34.515452][ T4431] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.5: couldn't read orphan inode 15 (err -117) [ 34.527842][ T4431] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 34.648511][ T4344] Bluetooth: hci4: command 0x041b tx timeout [ 34.649665][ T4344] Bluetooth: hci1: command 0x041b tx timeout [ 35.016650][ T4444] loop2: detected capacity change from 0 to 256 [ 35.342495][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 35.403676][ T4468] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 35.691661][ T4342] Bluetooth: hci0: command 0x040f tx timeout [ 35.781605][ T4344] Bluetooth: hci2: command 0x040f tx timeout [ 35.783217][ T4342] Bluetooth: hci3: command 0x040f tx timeout [ 36.651357][ T4342] Bluetooth: hci1: command 0x040f tx timeout [ 36.652653][ T4342] Bluetooth: hci4: command 0x040f tx timeout [ 37.771641][ T4344] Bluetooth: hci0: command 0x0419 tx timeout [ 37.851642][ T4342] Bluetooth: hci3: command 0x0419 tx timeout [ 37.851649][ T4344] Bluetooth: hci2: command 0x0419 tx timeout [ 38.731578][ T4331] Bluetooth: hci4: command 0x0419 tx timeout [ 38.731983][ T4344] Bluetooth: hci1: command 0x0419 tx timeout [ 47.123844][ T4533] netlink: 64 bytes leftover after parsing attributes in process `syz.0.34'. [ 47.151975][ T4533] device syzkaller1 entered promiscuous mode [ 47.168609][ T4342] Bluetooth: Wrong link type (-57) [ 47.302584][ T4542] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 47.787221][ T4581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 48.269239][ T4602] bond0: (slave macvlan0): Opening slave failed [ 48.712861][ T4613] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.767869][ T4620] loop2: detected capacity change from 0 to 7 [ 48.777472][ T4620] Dev loop2: unable to read RDB block 7 [ 48.780640][ T4620] loop2: AHDI p1 p2 p3 [ 48.783196][ T4620] loop2: partition table partially beyond EOD, truncated [ 48.787962][ T4620] loop2: p3 start 335544320 is beyond EOD, truncated [ 48.879347][ T4635] netlink: 52 bytes leftover after parsing attributes in process `syz.3.74'. [ 48.895046][ T4635] Zero length message leads to an empty skb [ 48.950389][ T4645] ======================================================= [ 48.950389][ T4645] WARNING: The mand mount option has been deprecated and [ 48.950389][ T4645] and is ignored by this kernel. Remove the mand [ 48.950389][ T4645] option from the mount to silence this warning. [ 48.950389][ T4645] ======================================================= [ 49.190058][ T4665] device syzkaller0 entered promiscuous mode [ 49.518542][ T4707] loop0: detected capacity change from 0 to 8192 [ 49.576065][ T4707] loop0: p1 < > p3 < p5 > p4 [ 49.578467][ T4707] loop0: p4 size 3081 extends beyond EOD, truncated [ 49.581829][ T4707] loop0: p5 size 3081 extends beyond EOD, truncated [ 49.584334][ T4725] loop3: detected capacity change from 0 to 256 [ 49.586307][ T4725] FAT-fs (loop3): Unrecognized mount option "shortname=mixe" or missing value [ 49.627306][ T4707] capability: warning: `syz.0.101' uses deprecated v2 capabilities in a way that may be insecure [ 49.640859][ T4733] random: crng reseeded on system resumption [ 49.696673][ T4730] null_blk: disk nullb1 created [ 49.889241][ T4506] udevd[4506]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 49.889291][ T4676] udevd[4676]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 49.896739][ T4746] udevd[4746]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 49.918876][ T4769] udevd[4769]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 50.169643][ T4786] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 50.713024][ T4810] loop3: detected capacity change from 0 to 512 [ 50.717719][ T4810] EXT4-fs: inline encryption not supported [ 50.723559][ T4810] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.726358][ T4810] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.730472][ T4810] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 50.735566][ T4810] EXT4-fs (loop3): 1 truncate cleaned up [ 50.736769][ T4810] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 50.757628][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 50.777976][ T4815] loop3: detected capacity change from 0 to 1024 [ 50.786295][ T4815] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 50.803054][ T4815] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.134: lblock 0 mapped to illegal pblock 0 (length 3) [ 50.807855][ T4815] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 50.810460][ T4815] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.810460][ T4815] [ 50.816668][ T4815] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.134: bg 0: block 112: padding at end of block bitmap is not set [ 50.826389][ T4815] EXT4-fs error (device loop3): ext4_ext_remove_space:2945: inode #15: comm syz.3.134: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 50.859214][ T4821] loop4: detected capacity change from 0 to 256 [ 50.920328][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 50.972553][ T4830] loop3: detected capacity change from 0 to 512 [ 51.023543][ T4746] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.295538][ T4854] binder: 4853:4854 tried to acquire reference to desc 0, got 1 instead [ 51.299673][ T4854] binder: cannot allocate buffer [ 51.299935][ T4854] binder: 4853:4854 transaction call to 4853:0 failed 5/29201/-22, size 4294967148--132 line 3247 [ 51.306913][ T4848] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 51.332180][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 51.465508][ T4869] loop4: detected capacity change from 0 to 512 [ 51.508513][ T4869] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.547884][ T4876] device syzkaller0 entered promiscuous mode [ 51.563209][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 51.775890][ T4898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.170'. [ 51.826670][ T4902] loop4: detected capacity change from 0 to 1024 [ 51.842276][ T4902] EXT4-fs: Ignoring removed orlov option [ 51.869006][ T4902] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 51.929820][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 51.993920][ T4914] device syzkaller0 entered promiscuous mode [ 52.068140][ T4924] loop4: detected capacity change from 0 to 4096 [ 52.099412][ T4924] EXT4-fs (loop4): Test dummy encryption mode enabled [ 52.106653][ T4924] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.155769][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 52.232827][ T4945] EXT4-fs (loop3): Test dummy encryption mode enabled [ 52.255605][ T4945] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.268077][ T4945] EXT4-fs (loop3): 1 truncate cleaned up [ 52.269229][ T4945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 52.282382][ T4506] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.329992][ T4945] tipc: Started in network mode [ 52.339915][ T4945] tipc: Node identity 1, cluster identity 4711 [ 52.341077][ T4945] tipc: Node number set to 1 [ 52.353996][ T4945] tipc: New replicast peer: 127.0.0.1 [ 52.356106][ T4945] tipc: Enabled bearer , priority 10 [ 52.374042][ T4945] tipc: Disabling bearer [ 52.396456][ T4956] syz.0.192 uses obsolete (PF_INET,SOCK_PACKET) [ 52.415871][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 52.522298][ T4963] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 53.083059][ T4997] FAT-fs (loop4): Directory bread(block 1285) failed [ 53.087591][ T4997] FAT-fs (loop4): Directory bread(block 1286) failed [ 53.090264][ T4997] FAT-fs (loop4): Directory bread(block 1287) failed [ 53.093776][ T4997] FAT-fs (loop4): Directory bread(block 1288) failed [ 53.191399][ T4995] Injecting memory failure for pfn 0x1374f9 at process virtual address 0x20000000 [ 53.205953][ T4995] Memory failure: 0x1374f9: recovery action for dirty LRU page: Recovered [ 53.208057][ T4995] Injecting memory failure for pfn 0x10ff1a at process virtual address 0x20001000 [ 53.210155][ T4995] Memory failure: 0x10ff1a: recovery action for dirty LRU page: Recovered [ 53.212009][ T4995] Injecting memory failure for pfn 0x10cb23 at process virtual address 0x20002000 [ 53.583437][ T5005] erofs: (device loop3): mounted with root inode @ nid 36. [ 53.595476][ T5005] overlayfs: missing 'lowerdir' [ 54.027579][ T4995] Memory failure: 0x10cb23: recovery action for dirty LRU page: Recovered [ 54.674832][ T5060] netlink: 64 bytes leftover after parsing attributes in process `syz.0.219'. [ 54.900087][ T5063] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 55.768652][ T5114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.229'. [ 56.142382][ T5131] device syzkaller0 entered promiscuous mode [ 56.476081][ T5142] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 64.493421][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494596][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.455922][ T5195] set_capacity_and_notify: 5 callbacks suppressed [ 67.455932][ T5195] loop2: detected capacity change from 0 to 1024 [ 67.466035][ T5195] EXT4-fs: Ignoring removed bh option [ 67.467067][ T5195] EXT4-fs: Ignoring removed bh option [ 67.497234][ T5195] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.567990][ T5195] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 67.645303][ T4337] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /41/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 67.658533][ T4337] EXT4-fs error (device loop2): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /41/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 67.674932][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 67.921733][ T5229] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 68.144249][ T5231] device syzkaller0 entered promiscuous mode [ 69.612624][ T22] cfg80211: failed to load regulatory.db [ 79.867252][ T5319] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 79.982966][ T5307] team0 (unregistering): Port device team_slave_0 removed [ 79.994850][ T5307] team0 (unregistering): Port device team_slave_1 removed [ 80.320971][ T5357] device syzkaller0 entered promiscuous mode [ 80.452801][ T27] audit: type=1326 audit(80.440:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.3.294" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e579228 code=0x0 [ 91.269456][ T5366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 91.754551][ T5409] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 91.982840][ T5418] device syzkaller0 entered promiscuous mode [ 103.036679][ T5457] loop1: detected capacity change from 0 to 512 [ 103.066442][ T5457] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.324: inode has both inline data and extents flags [ 103.082346][ T5457] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.324: couldn't read orphan inode 15 (err -117) [ 103.098141][ T5457] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 103.164913][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 103.384590][ T5470] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 103.600553][ T5477] netlink: 308 bytes leftover after parsing attributes in process `syz.1.328'. [ 103.868312][ T5483] process 'syz.2.329' launched './file0' with NULL argv: empty string added [ 103.934703][ T5483] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 104.971178][ C0] sched: RT throttling activated [ 105.086727][ T5486] device syzkaller0 entered promiscuous mode [ 105.452598][ T5514] 9pnet_virtio: no channels available for device 127.0.0.1 [ 106.431025][ T5523] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 116.846527][ T5537] netlink: 308 bytes leftover after parsing attributes in process `syz.1.349'. [ 116.960081][ T5555] loop1: detected capacity change from 0 to 512 [ 116.968905][ T5555] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.989673][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 117.183893][ T5560] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 118.281396][ T5561] tipc: Started in network mode [ 118.282369][ T5561] tipc: Node identity 4, cluster identity 4711 [ 118.283438][ T5561] tipc: Node number set to 4 [ 118.571876][ T5568] loop2: detected capacity change from 0 to 1024 [ 118.577838][ T5568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.634933][ T5568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 118.738914][ T5579] syz.0.356 sent an empty control message without MSG_MORE. [ 119.011099][ T5583] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.365666][ T5588] device syzkaller0 entered promiscuous mode [ 119.434468][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 125.931683][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.932916][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.351303][ T5622] binder: 5621:5622 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 130.785359][ T5636] 9pnet_fd: Insufficient options for proto=fd [ 130.890459][ T5642] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 131.010074][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 131.016325][ T27] audit: type=1326 audit(130.994:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.3.380" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e579228 code=0x0 [ 131.076451][ T5657] device syzkaller0 entered promiscuous mode [ 142.413125][ T5708] netlink: 144 bytes leftover after parsing attributes in process `syz.3.396'. [ 142.429372][ T5715] binder: 5712:5715 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 142.681140][ T5732] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 142.695488][ T5734] device syzkaller0 entered promiscuous mode [ 153.611610][ T4344] Bluetooth: hci0: command 0x0406 tx timeout [ 153.612596][ T4344] Bluetooth: hci3: command 0x0406 tx timeout [ 153.613584][ T4344] Bluetooth: hci2: command 0x0406 tx timeout [ 153.614873][ T4344] Bluetooth: hci1: command 0x0406 tx timeout [ 153.775391][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 154.162240][ T5810] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 154.222686][ T5813] device syzkaller0 entered promiscuous mode [ 158.741645][ T4344] Bluetooth: hci4: command 0x0406 tx timeout [ 165.842704][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 166.000830][ T5891] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 166.255482][ T27] audit: type=1326 audit(166.234:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.452" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b79228 code=0x0 [ 166.594633][ T5935] device syzkaller0 entered promiscuous mode [ 178.254771][ T5989] loop2: detected capacity change from 0 to 4096 [ 178.285666][ T5989] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 178.296253][ T5989] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.472: corrupted inode contents [ 178.305864][ T5989] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #15: comm syz.2.472: mark_inode_dirty error [ 178.312190][ T5989] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.472: corrupted inode contents [ 178.315571][ T5989] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.472: mark_inode_dirty error [ 178.318854][ T5989] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.472: corrupted inode contents [ 178.344296][ T5989] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.472: mark_inode_dirty error [ 178.350292][ T27] audit: type=1326 audit(178.324:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.3.475" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e579228 code=0x0 [ 178.355512][ T5989] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.472: corrupted inode contents [ 178.371736][ T5989] EXT4-fs error (device loop2): ext4_truncate:4325: inode #15: comm syz.2.472: mark_inode_dirty error [ 178.380439][ T6010] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 178.384921][ T5989] EXT4-fs error (device loop2) in ext4_setattr:5695: Corrupt filesystem [ 178.390602][ T6009] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.472: corrupted inode contents [ 178.407993][ T6013] Bluetooth: MGMT ver 1.22 [ 178.471508][ T4337] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 178.478491][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 178.581924][ T6025] device syzkaller0 entered promiscuous mode [ 187.371598][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.372685][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.250975][ T6104] device syzkaller0 entered promiscuous mode [ 190.262491][ T6105] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 201.307317][ T6142] overlayfs: failed to get inode (-116) [ 201.308580][ T6142] overlayfs: failed to get inode (-116) [ 201.652643][ T6189] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 201.671026][ T6191] device syzkaller0 entered promiscuous mode [ 201.805976][ T6207] loop2: detected capacity change from 0 to 256 [ 212.824593][ T6285] loop2: detected capacity change from 0 to 512 [ 212.877175][ T6285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 212.881546][ T6285] Bluetooth: MGMT ver 1.22 [ 212.894446][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 213.014535][ T6303] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 214.472797][ T6424] binder: 6423:6424 unknown command 1074553619 [ 214.474129][ T6424] binder: 6423:6424 ioctl c0306201 20000040 returned -22 [ 214.478891][ T6424] binder: 6423:6424 unknown command 1074553620 [ 214.480140][ T6424] binder: 6423:6424 ioctl c0306201 20000640 returned -22 [ 214.938058][ T6437] 9pnet_fd: Insufficient options for proto=fd [ 214.947895][ T6437] syz.1.604 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 214.950651][ T6437] CPU: 1 PID: 6437 Comm: syz.1.604 Not tainted syzkaller #0 [ 214.952054][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 214.953935][ T6437] Call trace: [ 214.954499][ T6437] dump_backtrace+0x1c4/0x1f0 [ 214.955293][ T6437] show_stack+0x2c/0x3c [ 214.956006][ T6437] __dump_stack+0x30/0x40 [ 214.956776][ T6437] dump_stack_lvl+0xf4/0x15c [ 214.957548][ T6437] dump_stack+0x1c/0x5c [ 214.958247][ T6437] dump_header+0xc0/0x724 [ 214.958985][ T6437] oom_kill_process+0x35c/0x660 [ 214.959845][ T6437] out_of_memory+0xbf0/0xf70 [ 214.960636][ T6437] mem_cgroup_out_of_memory+0x228/0x2d0 [ 214.961584][ T6437] try_charge_memcg+0xa4c/0x1390 [ 214.962478][ T6437] obj_cgroup_charge+0x178/0x2e4 [ 214.963338][ T6437] __kmem_cache_alloc_node+0xf0/0x318 [ 214.964318][ T6437] __kmalloc+0xc4/0x180 [ 214.965043][ T6437] __register_sysctl_table+0xd4/0xc88 [ 214.966002][ T6437] register_net_sysctl+0x31c/0x364 [ 214.966905][ T6437] ipv4_sysctl_init_net+0x1a0/0x29c [ 214.967843][ T6437] ops_init+0x2b0/0x53c [ 214.968594][ T6437] setup_net+0x494/0xb6c [ 214.969298][ T6437] copy_net_ns+0x2b8/0x578 [ 214.970008][ T6437] create_new_namespaces+0x30c/0x604 [ 214.970882][ T6437] unshare_nsproxy_namespaces+0x108/0x160 [ 214.971840][ T6437] ksys_unshare+0x3f0/0x70c [ 214.972622][ T6437] __arm64_sys_unshare+0x3c/0x50 [ 214.973453][ T6437] invoke_syscall+0x98/0x290 [ 214.974237][ T6437] el0_svc_common+0x13c/0x258 [ 214.975016][ T6437] do_el0_svc+0x5c/0x134 [ 214.975728][ T6437] el0_svc+0x58/0x128 [ 214.976386][ T6437] el0t_64_sync_handler+0x84/0xf0 [ 214.977209][ T6437] el0t_64_sync+0x18c/0x190 [ 214.978572][ T6437] memory: usage 92kB, limit 96kB, failcnt 36 [ 214.979744][ T6437] memory+swap: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 214.981038][ T6437] kmem: usage 84kB, limit 9007199254740988kB, failcnt 0 [ 214.983675][ T6437] Memory cgroup stats for /syz1/test: [ 214.984761][ T6437] anon 0 [ 214.984761][ T6437] file 8192 [ 214.984761][ T6437] kernel 86016 [ 214.984761][ T6437] kernel_stack 0 [ 214.984761][ T6437] pagetables 4096 [ 214.984761][ T6437] sec_pagetables 0 [ 214.984761][ T6437] percpu 0 [ 214.984761][ T6437] sock 0 [ 214.984761][ T6437] vmalloc 0 [ 214.984761][ T6437] shmem 8192 [ 214.984761][ T6437] zswap 0 [ 214.984761][ T6437] zswapped 0 [ 214.984761][ T6437] file_mapped 0 [ 214.984761][ T6437] file_dirty 0 [ 214.984761][ T6437] file_writeback 0 [ 214.984761][ T6437] swapcached 0 [ 214.984761][ T6437] anon_thp 0 [ 214.984761][ T6437] file_thp 0 [ 214.984761][ T6437] shmem_thp 0 [ 214.984761][ T6437] inactive_anon 0 [ 214.984761][ T6437] active_anon 8192 [ 214.984761][ T6437] inactive_file 0 [ 214.984761][ T6437] active_file 0 [ 214.984761][ T6437] unevictable 0 [ 214.984761][ T6437] slab_reclaimable 18752 [ 214.984761][ T6437] slab_unreclaimable 58696 [ 214.984761][ T6437] slab 77448 [ 215.001745][ T6437] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.604,pid=6436,uid=0 [ 215.005839][ T6437] Memory cgroup out of memory: Killed process 6436 (syz.1.604) total-vm:102180kB, anon-rss:1380kB, file-rss:22788kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 215.474642][ T6483] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4341] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[6483] [ 215.478467][ T6483] loop4: detected capacity change from 0 to 128 [ 215.599156][ T6506] loop2: detected capacity change from 0 to 256 [ 216.154000][ T6538] Injecting memory failure for pfn 0x137f2a at process virtual address 0x20000000 [ 216.155922][ T6538] Memory failure: 0x137f2a: recovery action for dirty LRU page: Recovered [ 216.157447][ T6538] Injecting memory failure for pfn 0x210d76 at process virtual address 0x20001000 [ 216.159073][ T6538] Memory failure: 0x210d76: recovery action for reserved kernel page: Ignored [ 218.580710][ T6642] netlink: 'syz.3.677': attribute type 12 has an invalid length. [ 218.595245][ T6642] netlink: 'syz.3.677': attribute type 29 has an invalid length. [ 218.596723][ T6642] netlink: 148 bytes leftover after parsing attributes in process `syz.3.677'. [ 218.754379][ T4344] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 218.851133][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 219.120661][ T6639] device erspan0 entered promiscuous mode [ 219.668651][ T27] audit: type=1326 audit(219.644:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.3.686" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e579228 code=0x0 [ 219.795917][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 220.118273][ T6736] tipc: Enabling of bearer rejected, failed to enable media [ 220.235790][ T6753] loop1: detected capacity change from 0 to 1024 [ 220.276641][ T6753] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 220.332924][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 220.728217][ T27] audit: type=1326 audit(220.704:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.0.710" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b79228 code=0x0 [ 220.766421][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 220.875107][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.711'. [ 220.994716][ T6811] device syzkaller0 entered promiscuous mode [ 221.249516][ T6836] fuse: Bad value for 'fd' [ 221.250884][ T6836] fuse: blksize only supported for fuseblk [ 221.295854][ T6845] loop2: detected capacity change from 0 to 256 [ 221.708312][ T6868] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 222.234300][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.739'. [ 222.237425][ T27] audit: type=1326 audit(222.214:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.3.739" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e579228 code=0x0 [ 222.644832][ T6967] device syzkaller0 entered promiscuous mode [ 222.982016][ T6978] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 223.113785][ T27] audit: type=1326 audit(223.094:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6971 comm="syz.0.753" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b79228 code=0x0 [ 225.044011][ T6902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.913347][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'. [ 234.025640][ T7013] loop3: detected capacity change from 0 to 512 [ 234.051905][ T7013] EXT4-fs (loop3): Test dummy encryption mode enabled [ 234.059263][ T7020] device batadv_slave_0 entered promiscuous mode [ 234.068215][ T7013] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.761: inode has both inline data and extents flags [ 234.070527][ T7013] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.761: couldn't read orphan inode 15 (err -117) [ 234.073866][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.762'. [ 234.077811][ T7013] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 234.084803][ T7013] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 234.103822][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 234.167482][ T7018] device batadv_slave_0 left promiscuous mode [ 234.346916][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'. [ 234.349938][ T27] audit: type=1326 audit(234.324:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.0.767" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b79228 code=0x0 [ 234.457523][ T7053] netlink: 'syz.3.768': attribute type 10 has an invalid length. [ 234.490605][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.492899][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.534295][ T7053] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.535707][ T7053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.538003][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.539416][ T7053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.560542][ T7053] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 234.759419][ T7059] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 235.033956][ T7062] device syzkaller0 entered promiscuous mode [ 235.804708][ T7088] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.777'. [ 246.419772][ T7090] device batadv_slave_0 entered promiscuous mode [ 246.421078][ T7090] device batadv_slave_0 left promiscuous mode [ 246.422754][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 246.639052][ T27] audit: type=1326 audit(246.614:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.3.782" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e579228 code=0x0 [ 246.663803][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 247.247550][ T7135] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 247.427421][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.789'. [ 247.523456][ T7139] team0 (unregistering): Port device team_slave_0 removed [ 247.575912][ T7139] team0 (unregistering): Port device team_slave_1 removed [ 247.665393][ T7151] 9pnet_fd: Insufficient options for proto=fd [ 248.018763][ T7159] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.796'. [ 248.330456][ T7179] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 248.942142][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.943477][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.119791][ T7193] device batadv_slave_0 entered promiscuous mode [ 249.123035][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 249.229940][ T7199] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.808'. [ 249.240948][ T7201] loop1: detected capacity change from 0 to 1024 [ 249.244278][ T7192] device batadv_slave_0 left promiscuous mode [ 249.306085][ T7202] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.548147][ T7201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 249.570810][ T7207] device syzkaller0 entered promiscuous mode [ 250.115854][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 250.437724][ T7239] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 250.706505][ T7247] device batadv_slave_0 entered promiscuous mode [ 250.710159][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 250.727519][ T7249] device syzkaller0 entered promiscuous mode [ 250.775593][ T7246] device batadv_slave_0 left promiscuous mode [ 250.946476][ T7257] loop3: detected capacity change from 0 to 512 [ 250.954554][ T7257] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 250.961091][ T7257] EXT4-fs (loop3): group descriptors corrupted! [ 251.413899][ T7266] netlink: 'syz.2.829': attribute type 2 has an invalid length. [ 251.618641][ T7282] device batadv_slave_0 entered promiscuous mode [ 251.625605][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 251.737570][ T7281] device batadv_slave_0 left promiscuous mode [ 252.066285][ T7288] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 252.153946][ T7300] loop3: detected capacity change from 0 to 512 [ 252.186386][ T7300] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 252.252346][ T7300] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.842: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 252.272265][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 252.803469][ T7334] device batadv_slave_0 entered promiscuous mode [ 252.862414][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'. [ 252.864597][ T7333] device batadv_slave_0 left promiscuous mode [ 253.190806][ T7348] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 253.573334][ T7366] device batadv_slave_0 entered promiscuous mode [ 253.613442][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 253.615544][ T7365] device batadv_slave_0 left promiscuous mode [ 254.046175][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 254.201061][ T7399] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.879'. [ 255.578476][ T7428] loop3: detected capacity change from 0 to 512 [ 255.581504][ T7428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.613043][ T7428] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 255.636407][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 265.461241][ T7413] device batadv_slave_0 entered promiscuous mode [ 265.466141][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 265.474528][ T7413] device batadv_slave_0 left promiscuous mode [ 265.943340][ T7454] loop4: detected capacity change from 0 to 8192 [ 266.350352][ T7461] Injecting memory failure for pfn 0x13b8b1 at process virtual address 0x20000000 [ 266.364327][ T7461] Memory failure: 0x13b8b1: recovery action for dirty LRU page: Recovered [ 266.489902][ T7482] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.900'. [ 266.490624][ T7483] device batadv_slave_0 entered promiscuous mode [ 266.549339][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 266.554139][ T7479] device batadv_slave_0 left promiscuous mode [ 266.566694][ T7491] loop4: detected capacity change from 0 to 512 [ 266.570084][ T7492] binder: 7490:7492 got transaction to invalid handle, 1 [ 266.574812][ T7492] binder: 7492:7490 cannot find target node [ 266.575907][ T7492] binder: 7490:7492 transaction call to 0:0 failed 12/29201/-22, size 88-24 line 3062 [ 266.584400][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.591594][ T7491] EXT4-fs (loop4): orphan cleanup on readonly fs [ 266.593985][ T7491] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.904: iget: bad extended attribute block 3927 [ 266.603708][ T7491] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.904: couldn't read orphan inode 15 (err -117) [ 266.610220][ T7491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 266.635836][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 266.703895][ T7504] loop4: detected capacity change from 0 to 512 [ 266.705884][ T7504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.039629][ T7504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 267.085221][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 267.155835][ T7524] mmap: syz.0.916 (7524): VmData 49250304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 267.172292][ T7528] device batadv_slave_0 entered promiscuous mode [ 267.201867][ T7525] netlink: 308 bytes leftover after parsing attributes in process `syz.3.917'. [ 267.228114][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 267.229930][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.918'. [ 267.243904][ T7527] device batadv_slave_0 left promiscuous mode [ 267.674459][ T7560] binder: 7559:7560 got transaction to invalid handle, 1 [ 267.675979][ T7560] binder: 7560:7559 cannot find target node [ 267.677056][ T7560] binder: 7559:7560 transaction call to 0:0 failed 16/29201/-22, size 88-24 line 3062 [ 267.679086][ T1969] binder: undelivered TRANSACTION_ERROR: 29201 [ 267.680207][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 267.699647][ T7565] binder: 7564:7565 tried to acquire reference to desc 0, got 1 instead [ 267.718400][ T7568] netlink: 308 bytes leftover after parsing attributes in process `syz.0.931'. [ 267.825700][ T7580] device batadv_slave_0 entered promiscuous mode [ 267.926108][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 267.940985][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 267.943785][ T7596] loop2: detected capacity change from 0 to 512 [ 267.969034][ T7596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 268.279140][ T7579] device batadv_slave_0 left promiscuous mode [ 268.323428][ T7603] binder: BINDER_SET_CONTEXT_MGR already set [ 268.325410][ T7603] binder: 7602:7603 ioctl 4018620d 20004a80 returned -16 [ 268.327781][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 268.346898][ T7603] binder: tried to use weak ref as strong ref [ 268.348099][ T7603] binder: 7602:7603 Acquire 1 refcount change on invalid ref 0 ret -22 [ 268.430320][ T7617] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 268.439120][ T7617] overlayfs: failed to set xattr on upper [ 268.440279][ T7617] overlayfs: ...falling back to index=off,metacopy=off. [ 268.442100][ T7617] overlayfs: conflicting lowerdir path [ 268.446127][ T7617] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 268.850955][ T7636] device batadv_slave_0 entered promiscuous mode [ 268.928300][ T7635] device batadv_slave_0 left promiscuous mode [ 268.938384][ T27] audit: type=1326 audit(269.915:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7638 comm="syz.3.961" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e579228 code=0x0 [ 269.276381][ T7652] loop2: detected capacity change from 0 to 512 [ 269.298353][ T7652] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.320969][ T7652] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 269.389220][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 269.491051][ T7674] device batadv_slave_0 entered promiscuous mode [ 269.687509][ T7633] ima: policy update failed [ 269.835018][ T27] audit: type=1802 audit(270.665:13): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.959" res=0 errno=0 [ 269.867312][ T7673] device batadv_slave_0 left promiscuous mode [ 269.899308][ T7685] loop3: detected capacity change from 0 to 512 [ 269.903816][ T7685] EXT4-fs: inline encryption not supported [ 269.908168][ T7687] binder: tried to use weak ref as strong ref [ 269.909198][ T7687] binder: 7686:7687 Acquire 1 refcount change on invalid ref 0 ret -22 [ 269.917819][ T7687] binder: 7686:7687 got transaction to invalid handle, 1 [ 269.919232][ T7685] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 269.923395][ T7687] binder: 7687:7686 cannot find target node [ 269.925093][ T7687] binder: 7686:7687 transaction call to 0:0 failed 25/29201/-22, size 88-24 line 3062 [ 269.927125][ T1969] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.981531][ T7685] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.975: corrupted in-inode xattr [ 269.985165][ T7685] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.975: couldn't read orphan inode 15 (err -117) [ 269.993871][ T7685] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 270.000242][ T7696] loop1: detected capacity change from 0 to 512 [ 270.302534][ T7696] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.345470][ T7696] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 270.377177][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 270.545001][ T27] audit: type=1326 audit(271.525:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.1.985" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96379228 code=0x0 [ 270.853854][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 270.897352][ T7726] binder: tried to use weak ref as strong ref [ 270.898634][ T7726] binder: 7725:7726 Acquire 1 refcount change on invalid ref 0 ret -22 [ 270.903281][ T7726] binder: 7726:7725 cannot find target node [ 270.958021][ T7734] device batadv_slave_0 entered promiscuous mode [ 271.010963][ T7740] __nla_validate_parse: 7 callbacks suppressed [ 271.010975][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 271.016605][ T7739] loop2: detected capacity change from 0 to 512 [ 271.026713][ T7739] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.026969][ T7733] device batadv_slave_0 left promiscuous mode [ 271.358892][ T7739] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 271.372423][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 271.755726][ T7775] loop2: detected capacity change from 0 to 512 [ 271.759262][ T7775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.819501][ T7780] device batadv_slave_0 entered promiscuous mode [ 271.844529][ T7775] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 271.858850][ T27] audit: type=1326 audit(272.835:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.0.1005" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b79228 code=0x0 [ 271.874872][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1006'. [ 271.877269][ T7779] device batadv_slave_0 left promiscuous mode [ 272.149030][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 272.215470][ T7795] loop4: detected capacity change from 0 to 1024 [ 272.250767][ T7795] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 272.483548][ T7820] binder_user_error: 1 callbacks suppressed [ 272.483556][ T7820] binder: 7819:7820 tried to acquire reference to desc 0, got 1 instead [ 272.488024][ T22] binder_debug: 2 callbacks suppressed [ 272.488031][ T22] binder: release 7819:7820 transaction 33 out, still active [ 272.490553][ T22] binder: undelivered TRANSACTION_COMPLETE [ 272.507291][ T14] binder: send failed reply for transaction 33, target dead [ 272.538496][ T7823] loop2: detected capacity change from 0 to 512 [ 272.545951][ T7824] device batadv_slave_0 entered promiscuous mode [ 272.550791][ T7823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 272.565949][ T7823] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 272.579369][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'. [ 272.585985][ T7822] device batadv_slave_0 left promiscuous mode [ 272.635895][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 272.715246][ T7839] binder: 7833:7839 tried to acquire reference to desc 0, got 1 instead [ 272.723675][ T7839] binder: 7833:7839 got transaction with invalid data ptr [ 272.725047][ T7839] binder: 7833:7839 transaction call to 7833:0 failed 41/29201/-14, size 0-24 line 3350 [ 272.731035][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 272.800925][ T7851] binder: 7850:7851 tried to acquire reference to desc 0, got 1 instead [ 272.807258][ T7851] binder_alloc: 7850: binder_alloc_buf, no vma [ 272.809266][ T7851] binder: cannot allocate buffer: vma cleared, target dead or dying [ 272.809297][ T7851] binder: 7850:7851 transaction call to 7850:0 failed 46/29189/-3, size 88-24 line 3247 [ 272.827009][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 272.889632][ T7858] loop3: detected capacity change from 0 to 512 [ 272.894561][ T7858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 272.928368][ T7864] device batadv_slave_0 entered promiscuous mode [ 272.937649][ T7858] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 273.021168][ C0] Adjusting arch_sys_counter more than 11% (9437184 vs 9311354) [ 273.243669][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 273.246733][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 273.278042][ T27] audit: type=1326 audit(524562.281:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.4.1035" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff99779228 code=0x0 [ 273.289757][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 273.321019][ T7874] loop2: detected capacity change from 0 to 128 [ 273.323104][ T7863] device batadv_slave_0 left promiscuous mode [ 273.329362][ T7874] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 273.398846][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 273.426335][ T7884] binder: 7883:7884 tried to acquire reference to desc 0, got 1 instead [ 273.428836][ T7884] binder: 7883:7884 got transaction with invalid data ptr [ 273.430088][ T7884] binder: 7883:7884 transaction call to 7883:0 failed 51/29201/-14, size 0-24 line 3350 [ 273.432957][ T4381] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.455706][ T7888] binder: 7887:7888 tried to acquire reference to desc 0, got 1 instead [ 273.463267][ T7888] binder_alloc: 7887: binder_alloc_buf, no vma [ 273.543660][ T7897] device syzkaller0 entered promiscuous mode [ 273.641295][ T7905] loop3: detected capacity change from 0 to 512 [ 273.660254][ T7905] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.701150][ T7905] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 273.734695][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 273.774331][ T7923] binder: 7922:7923 tried to acquire reference to desc 0, got 1 instead [ 273.776208][ T7923] binder_alloc: 7922: binder_alloc_buf, no vma [ 273.917891][ T7941] device syzkaller0 entered promiscuous mode [ 274.304970][ T7955] loop1: detected capacity change from 0 to 512 [ 274.306986][ T7955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.316875][ T7955] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 274.318933][ T7957] binder: 7956:7957 tried to acquire reference to desc 0, got 1 instead [ 274.322276][ T7957] binder: 7956:7957 got transaction with invalid parent offset or type [ 274.347292][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 274.470422][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 274.517425][ T27] audit: type=1326 audit(524563.668:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7976 comm="syz.1.1077" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96379228 code=0x0 [ 275.424917][ T8013] device syzkaller0 entered promiscuous mode [ 275.890232][ T8040] device syzkaller0 entered promiscuous mode [ 275.900940][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 275.905998][ T27] audit: type=1326 audit(524565.150:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.0.1099" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b79228 code=0x0 [ 277.132156][ T7948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.285007][ T8072] device syzkaller0 entered promiscuous mode [ 277.675339][ T8090] fuse: Bad value for 'fd' [ 277.683593][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'. [ 277.711907][ T8092] loop3: detected capacity change from 0 to 512 [ 277.714533][ T27] audit: type=1326 audit(524567.042:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.2.1114" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae379228 code=0x0 [ 277.716550][ T8092] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 277.721179][ T8092] System zones: 1-12 [ 277.734485][ T8092] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1116: missing EA_INODE flag [ 277.754461][ T8092] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1116: error while reading EA inode 12 err=-117 [ 277.769031][ T8092] EXT4-fs (loop3): 1 orphan inode deleted [ 277.770274][ T8092] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 277.776705][ T8092] fscrypt (loop3, inode 15): Reserved bits set in encryption policy [ 277.802104][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 277.892840][ T8109] loop4: detected capacity change from 0 to 2048 [ 277.902472][ T8109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.910308][ T8109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.926556][ T8109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 277.946247][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 278.023438][ T8118] binder_user_error: 4 callbacks suppressed [ 278.023447][ T8118] binder: tried to use weak ref as strong ref [ 278.025852][ T8118] binder: 8117:8118 Acquire 1 refcount change on invalid ref 0 ret -22 [ 278.027948][ T8118] binder: 8117:8118 got transaction to invalid handle, 1 [ 278.029438][ T8118] binder_debug: 14 callbacks suppressed [ 278.029448][ T8118] binder: 8118:8117 cannot find target node [ 278.031661][ T8118] binder: 8117:8118 transaction call to 0:0 failed 77/29201/-22, size 88-24 line 3062 [ 278.033972][ T4381] binder: undelivered TRANSACTION_ERROR: 29201 [ 278.274588][ T8137] loop1: detected capacity change from 0 to 2048 [ 278.300979][ T8137] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 278.754962][ T8147] binder: BINDER_SET_CONTEXT_MGR already set [ 278.756217][ T8147] binder: 8146:8147 ioctl 4018620d 20004a80 returned -16 [ 278.758636][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 278.764673][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 279.197964][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 279.200288][ T27] audit: type=1326 audit(524568.573:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.2.1144" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae379228 code=0x0 [ 279.209996][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 279.316496][ T8180] binder: BINDER_SET_CONTEXT_MGR already set [ 279.318136][ T8180] binder: 8179:8180 ioctl 4018620d 20004a80 returned -16 [ 279.407697][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'. [ 279.416517][ T8183] device erspan0 entered promiscuous mode [ 279.743269][ T8191] nvmet: adding nsid 1 to subsystem testnqn [ 279.760529][ T8191] nvmet: Invalid value '' for trtype [ 279.774586][ T8197] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1155'. [ 279.817139][ T8199] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.877656][ T8209] binder: BINDER_SET_CONTEXT_MGR already set [ 279.878918][ T8209] binder: 8208:8209 ioctl 4018620d 20004a80 returned -16 [ 280.004736][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'. [ 280.009839][ T27] audit: type=1326 audit(524569.398:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.2.1163" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae379228 code=0x0 [ 280.474926][ T8244] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 280.480594][ T8244] overlayfs: failed to set xattr on upper [ 280.482929][ T8244] overlayfs: ...falling back to index=off,metacopy=off. [ 280.493168][ T8246] binder: 8245:8246 got transaction to invalid handle, 1 [ 280.494494][ T8246] binder: 8246:8245 cannot find target node [ 280.496005][ T8246] binder: 8245:8246 transaction call to 0:0 failed 87/29201/-22, size 88-24 line 3062 [ 280.498030][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 280.603390][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'. [ 281.121502][ T4342] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 281.145031][ T8278] binder: 8277:8278 got transaction to invalid handle, 1 [ 281.146536][ T8278] binder: 8278:8277 cannot find target node [ 281.152462][ T8278] binder: 8277:8278 transaction call to 0:0 failed 91/29201/-22, size 88-24 line 3062 [ 281.154829][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 281.190609][ T8284] loop2: detected capacity change from 0 to 512 [ 281.200461][ T8284] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 281.203135][ T8287] netlink: 'syz.0.1185': attribute type 72 has an invalid length. [ 281.204492][ T8287] netlink: 'syz.0.1185': attribute type 8 has an invalid length. [ 281.205393][ T8284] EXT4-fs (loop2): group descriptors corrupted! [ 281.212315][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 281.313789][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1191'. [ 281.316582][ T27] audit: type=1326 audit(524570.727:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.4.1191" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff99779228 code=0x0 [ 281.771338][ T8312] fuse: Bad value for 'fd' [ 281.855051][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1202'. [ 281.859750][ T8318] binder: 8317:8318 got transaction to invalid handle, 1 [ 281.861128][ T8318] binder: 8318:8317 cannot find target node [ 281.964755][ T8328] netlink: 'syz.0.1207': attribute type 10 has an invalid length. [ 281.984417][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.994500][ T8328] device bridge_slave_1 left promiscuous mode [ 282.005053][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.319273][ T8333] loop2: detected capacity change from 0 to 256 [ 282.529873][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1218'. [ 282.559085][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1220'. [ 282.608859][ T27] audit: type=1326 audit(524572.020:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.1220" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff99779228 code=0x0 [ 283.041403][ T8375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.288532][ T8393] binder: BINDER_SET_CONTEXT_MGR already set [ 283.289899][ T8393] binder: 8392:8393 ioctl 4018620d 20004a80 returned -16 [ 283.432044][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1232'. [ 283.551600][ T8409] netlink: del zone limit has 8 unknown bytes [ 283.603558][ T8418] binder: BINDER_SET_CONTEXT_MGR already set [ 283.604630][ T8418] binder: 8417:8418 ioctl 4018620d 20004a80 returned -16 [ 283.644368][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 283.647876][ T27] audit: type=1326 audit(524573.078:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.3.1242" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e579228 code=0x0 [ 283.857574][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1250'. [ 284.247544][ T8451] binder: 8450:8451 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 284.250884][ T8451] binder: 8450:8451 got transaction to invalid handle, 1 [ 284.254953][ T8451] binder_debug: 2 callbacks suppressed [ 284.254968][ T8451] binder: 8451:8450 cannot find target node [ 284.257082][ T8451] binder: 8450:8451 transaction call to 0:0 failed 100/29201/-22, size 88-24 line 3062 [ 284.259299][ T1969] binder: undelivered TRANSACTION_ERROR: 29201 [ 284.389990][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 284.397618][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 284.497606][ T8472] device batadv_slave_0 entered promiscuous mode [ 284.504565][ T8471] device batadv_slave_0 left promiscuous mode [ 284.627586][ T8483] binder: 8482:8483 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 284.925131][ T8483] binder: 8482:8483 got transaction to invalid handle, 1 [ 284.926475][ T8483] binder: 8483:8482 cannot find target node [ 284.927560][ T8483] binder: 8482:8483 transaction call to 0:0 failed 103/29201/-22, size 88-24 line 3062 [ 284.930850][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 285.305978][ T27] audit: type=1326 audit(524574.585:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.0.1271" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90b79228 code=0x0 [ 285.492301][ T8514] device batadv_slave_0 entered promiscuous mode [ 285.494982][ T8513] device batadv_slave_0 left promiscuous mode [ 285.559809][ T8516] loop1: detected capacity change from 0 to 512 [ 285.579751][ T8516] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 285.586487][ T8516] EXT4-fs (loop1): group descriptors corrupted! [ 285.593227][ T8518] binder: 8517:8518 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 285.603637][ T8518] binder: 8517:8518 got transaction to invalid handle, 1 [ 285.605064][ T8518] binder: 8518:8517 cannot find target node [ 285.611475][ T8518] binder: 8517:8518 transaction call to 0:0 failed 106/29201/-22, size 88-24 line 3062 [ 285.614297][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 286.148003][ T8542] device batadv_slave_0 entered promiscuous mode [ 286.198232][ T8542] __nla_validate_parse: 4 callbacks suppressed [ 286.198250][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 286.297959][ T8541] device batadv_slave_0 left promiscuous mode [ 286.402128][ T8549] binder: 8548:8549 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 286.563867][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1292'. [ 286.571583][ T27] audit: type=1326 audit(524576.009:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.1.1292" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96379228 code=0x0 [ 286.625487][ T8572] loop4: detected capacity change from 0 to 2048 [ 286.655519][ T8572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 286.661476][ T8572] fscrypt (loop4, inode 12): Error -61 getting encryption context [ 286.687805][ T4341] EXT4-fs (loop4): unmounting filesystem. [ 286.821279][ T8590] device batadv_slave_0 entered promiscuous mode [ 286.875572][ T8589] device batadv_slave_0 left promiscuous mode [ 287.221152][ T8599] nvmet_tcp: malformed ip/port passed: :8009 [ 287.336305][ T8613] binder: 8612:8613 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 287.367507][ T8615] loop1: detected capacity change from 0 to 128 [ 287.369408][ T8615] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 287.387525][ T8615] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.446387][ T1588] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 287.515743][ T8623] device batadv_slave_0 entered promiscuous mode [ 287.544010][ T8622] device batadv_slave_0 left promiscuous mode [ 287.967214][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 288.042710][ T27] audit: type=1326 audit(524577.482:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8638 comm="syz.1.1323" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96379228 code=0x0 [ 288.229597][ T8668] loop1: detected capacity change from 0 to 512 [ 288.236791][ T8668] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 288.239879][ T8668] EXT4-fs (loop1): Test dummy encryption mode enabled [ 288.247086][ T8668] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 288.252241][ T8663] loop2: detected capacity change from 0 to 256 [ 288.272345][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 288.355629][ T8677] device batadv_slave_0 entered promiscuous mode [ 288.389283][ T8672] device batadv_slave_0 left promiscuous mode [ 288.745642][ T8687] binder: 8685:8687 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 288.852860][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 288.855716][ T27] audit: type=1326 audit(524578.294:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.2.1338" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae379228 code=0x0 [ 288.874619][ T8705] device syzkaller0 entered promiscuous mode [ 289.705357][ T8743] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1347'. [ 300.031925][ T8748] device batadv_slave_0 entered promiscuous mode [ 300.196542][ T8747] device batadv_slave_0 left promiscuous mode [ 300.575810][ T8776] loop4: detected capacity change from 0 to 8 [ 300.577513][ T8776] squashfs: Unknown parameter '00000000000000000000000ÿÿÿÿÿÿÿÿ˺ 8úWŸÝ‰e:3Þlù ®`ì' [ 300.637308][ T8746] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.007615][ T8782] netlink: 308 bytes leftover after parsing attributes in process `syz.4.1360'. [ 301.092530][ T8798] binder: 8797:8798 ioctl 4018620d 0 returned -22 [ 301.097524][ T8798] binder: 8797:8798 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 301.100713][ T8798] binder: 8797:8798 got transaction to invalid handle, 1 [ 301.102009][ T8798] binder: 8798:8797 cannot find target node [ 301.103220][ T8798] binder: 8797:8798 transaction call to 0:0 failed 112/29201/-22, size 88-24 line 3062 [ 301.106873][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 301.287345][ T8818] device batadv_slave_0 entered promiscuous mode [ 301.353491][ T8821] UBIFS error (pid: 8821): cannot open "c:::", error -22 [ 301.634874][ T8817] device batadv_slave_0 left promiscuous mode [ 301.722809][ T8833] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1372'. [ 301.763048][ T8837] loop2: detected capacity change from 0 to 512 [ 301.780153][ T8837] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 301.781378][ T8835] device syzkaller0 entered promiscuous mode [ 301.786814][ T8837] EXT4-fs (loop2): group descriptors corrupted! [ 309.784530][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 309.785771][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.127199][ T8886] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1384'. [ 313.204243][ T8896] device batadv_slave_0 entered promiscuous mode [ 313.251895][ T8893] device batadv_slave_0 left promiscuous mode [ 313.254738][ T8888] loop3: detected capacity change from 0 to 8192 [ 313.255870][ T8902] loop2: detected capacity change from 0 to 512 [ 313.263158][ T8905] fuse: Bad value for 'fd' [ 313.264572][ T8906] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1386'. [ 313.268654][ T8902] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 313.270394][ T8902] EXT4-fs (loop2): group descriptors corrupted! [ 313.352799][ T8888] Process accounting resumed [ 313.354687][ T8888] syz.3.1383: attempt to access beyond end of device [ 313.354687][ T8888] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 313.372918][ T8888] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 313.383018][ T8888] FAT-fs (loop3): Filesystem has been set read-only [ 313.685088][ T22] kworker/1:0: attempt to access beyond end of device [ 313.685088][ T22] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 313.688835][ T22] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 313.718802][ T8916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'. [ 313.779019][ T4342] Bluetooth: hci2: link tx timeout [ 313.780646][ T4342] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 313.782610][ T4342] Bluetooth: hci2: link tx timeout [ 313.783488][ T4342] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.316563][ T8935] device batadv_slave_0 entered promiscuous mode [ 314.352534][ T8934] device batadv_slave_0 left promiscuous mode [ 314.696360][ T8944] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1402'. [ 314.737701][ T8948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1404'. [ 314.805180][ T8956] device syzkaller1 entered promiscuous mode [ 315.001113][ T8979] loop1: detected capacity change from 0 to 512 [ 315.011244][ T8979] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 315.017037][ T8979] EXT4-fs (loop1): group descriptors corrupted! [ 315.450837][ T8993] loop3: detected capacity change from 0 to 256 [ 315.456481][ T8993] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 315.864685][ T4342] Bluetooth: hci2: command 0x0406 tx timeout [ 315.930277][ T9007] device batadv_slave_0 entered promiscuous mode [ 316.041578][ T9012] netlink: 'syz.0.1413': attribute type 10 has an invalid length. [ 316.095849][ T9012] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 316.405064][ T9020] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1416'. [ 316.433467][ T9004] device batadv_slave_0 left promiscuous mode [ 316.547023][ T9028] loop1: detected capacity change from 0 to 128 [ 316.602269][ T9028] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 316.622413][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 316.724848][ T9036] loop2: detected capacity change from 0 to 256 [ 316.951215][ T9036] FAT-fs (loop2): Directory bread(block 64) failed [ 316.952493][ T9036] FAT-fs (loop2): Directory bread(block 65) failed [ 316.953701][ T9036] FAT-fs (loop2): Directory bread(block 66) failed [ 316.955009][ T9036] FAT-fs (loop2): Directory bread(block 67) failed [ 316.956249][ T9036] FAT-fs (loop2): Directory bread(block 68) failed [ 316.957423][ T9036] FAT-fs (loop2): Directory bread(block 69) failed [ 316.958606][ T9036] FAT-fs (loop2): Directory bread(block 70) failed [ 316.959677][ T9036] FAT-fs (loop2): Directory bread(block 71) failed [ 316.960759][ T9036] FAT-fs (loop2): Directory bread(block 72) failed [ 316.961839][ T9036] FAT-fs (loop2): Directory bread(block 73) failed [ 316.988240][ T9032] syz.2.1420: attempt to access beyond end of device [ 316.988240][ T9032] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 316.991909][ T9032] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000ff00) [ 316.993481][ T9032] FAT-fs (loop2): Filesystem has been set read-only [ 317.000327][ T9035] loop1: detected capacity change from 0 to 4096 [ 317.015469][ T9035] EXT4-fs (loop1): Test dummy encryption mode enabled [ 317.023650][ T9035] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 317.199565][ T9046] Soft offlining pfn 0x140bb8 at process virtual address 0x20ffe000 [ 317.208332][ T9046] Soft offlining pfn 0x140bd7 at process virtual address 0x20fff000 [ 317.730530][ T9037] EXT4-fs (loop1): unmounting filesystem. [ 317.764801][ T9060] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1428'. [ 317.821535][ T9065] device batadv_slave_0 entered promiscuous mode [ 317.894376][ T9064] device batadv_slave_0 left promiscuous mode [ 318.169027][ T9083] device batadv_slave_0 entered promiscuous mode [ 318.175313][ T9082] device batadv_slave_0 left promiscuous mode [ 318.308488][ T9091] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1441'. [ 318.627121][ T9100] loop4: detected capacity change from 0 to 512 [ 318.629683][ T9100] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 318.631823][ T9100] EXT4-fs (loop4): group descriptors corrupted! [ 319.228113][ T9127] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1453'. [ 320.248992][ T9163] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1468'. [ 320.344714][ T9169] loop3: detected capacity change from 0 to 512 [ 320.361153][ T9169] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 320.367543][ T9169] EXT4-fs (loop3): group descriptors corrupted! [ 322.047090][ T9206] netlink: 'syz.1.1481': attribute type 1 has an invalid length. [ 322.048562][ T9206] netlink: 'syz.1.1481': attribute type 2 has an invalid length. [ 322.088773][ T9216] loop3: detected capacity change from 0 to 512 [ 322.090924][ T9216] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 322.092559][ T9216] EXT4-fs (loop3): group descriptors corrupted! [ 323.209150][ T9257] loop3: detected capacity change from 0 to 512 [ 323.230117][ T9259] device syzkaller0 entered promiscuous mode [ 323.262084][ T9257] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 323.269598][ T9257] EXT4-fs (loop3): group descriptors corrupted! [ 325.009506][ T9314] loop2: detected capacity change from 0 to 512 [ 325.020107][ T9314] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 325.032319][ T9314] EXT4-fs (loop2): group descriptors corrupted! [ 326.068490][ T9339] device batadv_slave_0 entered promiscuous mode [ 326.070166][ T9338] device batadv_slave_0 left promiscuous mode [ 326.143321][ T27] audit: type=1326 audit(524615.588:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.1.1530" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96379228 code=0x0 [ 326.185399][ T9354] loop4: detected capacity change from 0 to 8 [ 326.193383][ T9354] squashfs: Unknown parameter '00000000000000000000000ÿÿÿÿÿÿÿÿ˺ 8úWŸÝ‰e:3Þlù ®`ì' [ 326.197800][ T9352] device syzkaller0 entered promiscuous mode [ 327.075881][ T9381] device batadv_slave_0 entered promiscuous mode [ 327.077725][ T9378] device batadv_slave_0 left promiscuous mode [ 327.433488][ T9389] loop4: detected capacity change from 0 to 8 [ 327.437930][ T9389] squashfs: Unknown parameter '00000000000000000000000ÿÿÿÿÿÿÿÿ˺ 8úWŸÝ‰e:3Þlù ®`ì' [ 327.465728][ T9391] device syzkaller0 entered promiscuous mode [ 328.018392][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 328.021388][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 328.395450][ T9413] device batadv_slave_0 entered promiscuous mode [ 328.397542][ T9412] device batadv_slave_0 left promiscuous mode [ 328.476573][ T9419] loop3: detected capacity change from 0 to 8 [ 328.486591][ T9419] squashfs: Unknown parameter '00000000000000000000000ÿÿÿÿÿÿÿÿ˺ 8úWŸÝ‰e:3Þlù ®`ì' [ 328.535381][ T9041] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 329.059309][ T9446] loop2: detected capacity change from 0 to 1024 [ 329.089928][ T9446] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 329.111619][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 329.230102][ T9460] loop4: detected capacity change from 0 to 8 [ 329.231481][ T9460] squashfs: Unknown parameter '00000000000000000000000ÿÿÿÿÿÿÿÿ˺ 8úWŸÝ‰e:3Þlù ®`ì' [ 329.264463][ T9041] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 329.577250][ T9465] device syzkaller0 entered promiscuous mode [ 330.690786][ T9505] loop1: detected capacity change from 0 to 8 [ 330.692311][ T9505] squashfs: Unknown parameter '00000000000000000000000ÿÿÿÿÿÿÿÿ˺ 8úWŸÝ‰e:3Þlù ®`ì' [ 330.758108][ T9512] loop1: detected capacity change from 0 to 128 [ 330.868041][ T9518] device syzkaller0 entered promiscuous mode [ 330.908015][ T9520] loop3: detected capacity change from 0 to 256 [ 330.910069][ T9520] FAT-fs (loop3): bogus logical sector size 0 [ 330.911953][ T9520] FAT-fs (loop3): Can't find a valid FAT filesystem [ 331.068409][ T9530] nvmet: Invalid value '' for trtype [ 331.159085][ T9532] ------------[ cut here ]------------ [ 331.160145][ T9532] kernel BUG at include/linux/scatterlist.h:163! [ 331.161317][ T9532] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 331.162588][ T9532] Modules linked in: [ 331.163188][ T9532] CPU: 1 PID: 9532 Comm: syz.0.1596 Not tainted syzkaller #0 [ 331.164404][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 331.166051][ T9532] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 331.167340][ T9532] pc : sg_init_one+0x1b4/0x1c8 [ 331.168114][ T9532] lr : sg_init_one+0x1b4/0x1c8 [ 331.168907][ T9532] sp : ffff8000219b7750 [ 331.169600][ T9532] x29: ffff8000219b7750 x28: ffff0000f2321800 x27: dfff800000000000 [ 331.170935][ T9532] x26: ffff0000c3ae0a0e x25: ffff700004336f00 x24: 1ffff00004336f14 [ 331.172364][ T9532] x23: dfff800000000000 x22: 0001000000000010 x21: 0000000000000010 [ 331.173753][ T9532] x20: ffff8000219b78a0 x19: 0000000000000000 x18: 1fffe00033e7697e [ 331.175075][ T9532] x17: ffff80001537d000 x16: ffff800011b90080 x15: 0000000000000002 [ 331.176367][ T9532] x14: 0000000000000003 x13: 1ffff00004336f15 x12: 0000000000080000 [ 331.177667][ T9532] x11: 00000000000072d6 x10: ffff800023fad000 x9 : ffff80000a910304 [ 331.178936][ T9532] x8 : 00000000000072d7 x7 : 0000000000000000 x6 : 000000000000003f [ 331.180195][ T9532] x5 : 00000000ffffffff x4 : 0000000000000008 x3 : 0000000000000010 [ 331.181536][ T9532] x2 : 0000000000000000 x1 : 0001000000000010 x0 : 0000600000000000 [ 331.182876][ T9532] Call trace: [ 331.183427][ T9532] sg_init_one+0x1b4/0x1c8 [ 331.184217][ T9532] software_key_eds_op+0x410/0x938 [ 331.185082][ T9532] asymmetric_key_eds_op+0x108/0x128 [ 331.185964][ T9532] keyctl_pkey_e_d_s+0x1c8/0x3a0 [ 331.186760][ T9532] __arm64_sys_keyctl+0x66c/0x8e0 [ 331.187550][ T9532] invoke_syscall+0x98/0x290 [ 331.188317][ T9532] el0_svc_common+0x13c/0x258 [ 331.189112][ T9532] do_el0_svc+0x5c/0x134 [ 331.189812][ T9532] el0_svc+0x58/0x128 [ 331.190474][ T9532] el0t_64_sync_handler+0x84/0xf0 [ 331.191304][ T9532] el0t_64_sync+0x18c/0x190 [ 331.192083][ T9532] Code: aa1503e0 977f91c6 17ffffec 976e8a31 (d4210000) [ 331.193304][ T9532] ---[ end trace 0000000000000000 ]--- [ 331.385114][ T9532] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 331.386264][ T9532] SMP: stopping secondary CPUs [ 331.387138][ T9532] Kernel Offset: disabled [ 331.387839][ T9532] CPU features: 0x0a0000,000f0097,a65bfea7 [ 331.388851][ T9532] Memory Limit: none [ 331.596456][ T9532] Rebooting in 86400 seconds..