last executing test programs: 16.151652228s ago: executing program 2 (id=652): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x4) socket$igmp6(0xa, 0x3, 0x2) socket$inet(0x2, 0x3, 0x4) socket$igmp6(0xa, 0x3, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 15.891258707s ago: executing program 2 (id=656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x9, 0x3, 0x530, 0x368, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ipv6={@remote, @loopback, [0xff000000, 0xff, 0xffffffff, 0xff], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'wlan1\x00', 'vlan1\x00', {}, {}, 0x0, 0xd9, 0x6, 0x4}, 0x0, 0x300, 0x368, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x7}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0x5, 0xffffffff, 0x9, 'snmp_trap\x00', 'syz1\x00', {0x7f}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @remote, [0xffffff00, 0xffffffff, 0xff, 0xff], [0x0, 0xffffff00, 0xffffffff], 'nr0\x00', 'ip6tnl0\x00', {}, {}, 0x2, 0x8, 0x1, 0x20}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@srh={{0x30}, {0x33, 0xe5, 0x6, 0x6, 0x3, 0x2322, 0x14}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2, 0x5}]}) ioctl$TCSETA(r3, 0x4b6a, &(0x7f0000000340)={0x200f, 0x0, 0x0, 0xfeff, 0x3, "72710080ab003f00"}) sendto$inet6(r2, &(0x7f0000847fff)='h', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000000580)=""/4056, &(0x7f00000004c0)=0xfd8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@empty, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @local, @multicast2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @empty}}}}, 0x0) 12.156912084s ago: executing program 4 (id=662): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 12.154684484s ago: executing program 2 (id=663): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000400)={0x100}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) landlock_restrict_self(r0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000140)={0x100, r4}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) 10.138581746s ago: executing program 4 (id=666): syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x8060, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000e6000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000070a000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) 10.138318726s ago: executing program 2 (id=668): shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x591d1d3ba5dd5407) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x6) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xe6, 0x0, &(0x7f0000000400)) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d31342c747970653d4855793608d52c70617274080000000000000030303030303030303030382c00"], 0x1, 0x2e5, &(0x7f0000000140)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x100}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c0000000200000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b52, &(0x7f0000000080)={0x0, 0x0, 0xfff}) 8.860696932s ago: executing program 0 (id=669): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x2, 0x4, 0x390, 0xffffffff, 0x0, 0x228, 0x0, 0xfeffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000000)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) io_setup(0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "02000b", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) 8.860553392s ago: executing program 3 (id=670): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x41c, &(0x7f0000000040)={[{@nodiscard}, {@order_strict}, {@nobarrier}, {@norecovery}, {@order_strict}, {@discard}, {@nobarrier}, {@nodiscard}, {@nobarrier}]}, 0x1, 0xa75, &(0x7f0000000ac0)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000240)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 8.659924401s ago: executing program 4 (id=672): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000480)={0xff, 0x2, 0x2138}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 7.805576818s ago: executing program 2 (id=673): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r9, 0x9}, 0xc) 7.793320688s ago: executing program 4 (id=683): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, 0xffffffffffffffff, 0x34, 0x0, @val=@perf_event={0x8000}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x5) 7.707276168s ago: executing program 0 (id=675): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3a10f46, &(0x7f0000000780)={[{@errors_continue}, {@noinit_itable}, {}, {@data_err_abort}, {@mblk_io_submit}, {@acl}, {@resuid}, {@usrquota}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0xff, 0x451, &(0x7f00000021c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) pipe2$9p(0x0, 0x10880) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000140)=0x20, 0x4) 6.687362504s ago: executing program 2 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x380000, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendmmsg$alg(r3, &(0x7f0000000240)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0xd8}], 0x1, 0x0) 6.664514254s ago: executing program 1 (id=677): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r3, 0xae7e, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r4, 0x0, 0x0) 6.663498604s ago: executing program 3 (id=678): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x50042, 0x0) dup(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.kill\x00', 0x26e1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 6.406470523s ago: executing program 3 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/253, 0xfd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x9e0000, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0}) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$unix(r4, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) 5.271853149s ago: executing program 1 (id=680): request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)=',\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000000140)={0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x8, 0x2831cde6, 0x1, 0x4, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x3, @void, @value, @void, @value}, 0x48) r2 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1={0xff, 0x0}}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f00000004c0)="8aea78d69eef122166bf745c035f83e8bfca7552b2f257e15d8315da79cbfe4ec46f7e93f48a84b8c784e32cfe25f6f1041374a86ebbfeb4809ca9384664961024d9d7ddbef5f760a8c03225bf70890ea8ab43ad10e657146174e13cf9f9c05bef23a02c13cc1d510a220a88d36d154af630d850f6b639bf13a8688b238f85bc1d92aeb721c18d18f4adaf3fdb3eaae33956991a91c59aa3c684f7b78b45f4612476278f7779631089c7e82cf476e6644d0d2dd50c48e62f349ea67d37e803a04d5a1173a27325ea15b1ebcda9e7d68d902355acde5eaf46b02eebc4e396c3ce866295119527", &(0x7f00000005c0)=@tcp=r2, 0x4}, 0x20) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r3, 0x0, 0x0, 0x24048081, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) 4.176330215s ago: executing program 0 (id=681): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x40010) 4.167159215s ago: executing program 3 (id=682): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, &(0x7f0000000340)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.131543811s ago: executing program 3 (id=684): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000980)='./bus\x00', 0x800700, &(0x7f00000019c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2005}}, {@journal_dev={'journal_dev', 0x3d, 0x8200}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x4010) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.951014751s ago: executing program 1 (id=685): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.924300377s ago: executing program 0 (id=686): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_dccp(0x2, 0x6, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) 1.252196345s ago: executing program 1 (id=687): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000008900)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="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", @ANYBLOB="a77a47c7093995493790249b0bed32a055f763e24190111977519571ce7e7842f63886bbf71ffeb820eddf6133ab8ae88bcc3d9004d9c6dbe44fbdcf671794f90a6dc723010be2684f321bdcb0f3a28f37715ba81e0f3b27d1206de5d93037a11c2b5ce35f7ffda7b43c3c9888163a50b7db5daea67d670e8b86c032da653d273cfb7bf3df53e836bb96370c4c637ec105fd520968a03441384810ed179646174536425dd1f0073804e63a43a92c901534484b0a352baee33ac1638bff1e67ee4959717feb229b247c25ae4018f502bdb5e7", @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYBLOB="9651c56ad88578a25546d8301a976d6fc5e51f3814a125051a070f7f54437d1ce35d85809048bfebe5ac13dce749226f4eace102819832dc4feee07cbf025529706f80354fcaaaf34bc289d3892a62957f78a9c45fe4e6e8c1332d57018a296c8eca11a25d4a581b17f43b9f4480c9a839e10a15954d4c325da6384fa44e9bb79ff45d24a2a2e805fac936dd9af003a173aec97678f46c000b0eab44f2", @ANYBLOB="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", @ANYRES32], 0x1, 0x1cd, &(0x7f0000002180)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x500, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 1.182946264s ago: executing program 4 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r9, 0x9}, 0xc) 1.171949874s ago: executing program 0 (id=689): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac-aes-neon\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000073011500000000009500000000000000f523bc128e9d16330ff66aeaf3e1eae3fa41706376ae6c4aad19d53374e70747f5be3d456fe606a2417867c12a57250d2daca3d997deb2914913950e454bffb31d87509d476d5590f7a5a93c9ff7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 1.085945164s ago: executing program 1 (id=690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r1, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/141, 0x8d}], 0x1}, 0x2}], 0x1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000037c0)='-', 0x1}], 0x1}}], 0x1, 0x4044891) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, 0x0, 0x0, 0x40040) sendmmsg$inet(r2, 0x0, 0x0, 0x4048850) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x0) 888.252613ms ago: executing program 3 (id=691): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000c80)) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000880), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) 866.782073ms ago: executing program 4 (id=692): io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) writev(r3, 0x0, 0x0) 30.92695ms ago: executing program 0 (id=693): socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x22, &(0x7f00000001c0)=ANY=[], 0x0) 0s ago: executing program 1 (id=694): socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x16000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 41.846375][ T4017] cgroup: Unknown subsys name 'net' [ 42.105584][ T4017] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.436013][ T4017] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 43.883673][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 43.974235][ T4036] chnl_net:caif_netlink_parms(): no params data found [ 44.015515][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.017534][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.020612][ T4027] device bridge_slave_0 entered promiscuous mode [ 44.030247][ T4041] chnl_net:caif_netlink_parms(): no params data found [ 44.041322][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.043354][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.045752][ T4027] device bridge_slave_1 entered promiscuous mode [ 44.050873][ T4028] chnl_net:caif_netlink_parms(): no params data found [ 44.103543][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.109815][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.121341][ T4029] chnl_net:caif_netlink_parms(): no params data found [ 44.177708][ T4027] team0: Port device team_slave_0 added [ 44.185170][ T4036] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.187178][ T4036] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.196097][ T4036] device bridge_slave_0 entered promiscuous mode [ 44.204907][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.206947][ T4041] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.209904][ T4041] device bridge_slave_0 entered promiscuous mode [ 44.213667][ T4027] team0: Port device team_slave_1 added [ 44.221643][ T4036] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.223575][ T4036] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.226353][ T4036] device bridge_slave_1 entered promiscuous mode [ 44.242478][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.244278][ T4041] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.246884][ T4041] device bridge_slave_1 entered promiscuous mode [ 44.250433][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.252996][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.255753][ T4028] device bridge_slave_0 entered promiscuous mode [ 44.276930][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.278674][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.285707][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.289674][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.291607][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.294231][ T4028] device bridge_slave_1 entered promiscuous mode [ 44.316142][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.317954][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.324869][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.340429][ T4036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.350311][ T4041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.365759][ T4028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.369816][ T4036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.372442][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.374414][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.377032][ T4029] device bridge_slave_0 entered promiscuous mode [ 44.387061][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.388865][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.391590][ T4029] device bridge_slave_1 entered promiscuous mode [ 44.395092][ T4041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.406134][ T4028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.475453][ T4036] team0: Port device team_slave_0 added [ 44.479288][ T4028] team0: Port device team_slave_0 added [ 44.483121][ T4029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.493500][ T4041] team0: Port device team_slave_0 added [ 44.528054][ T4027] device hsr_slave_0 entered promiscuous mode [ 44.569833][ T4027] device hsr_slave_1 entered promiscuous mode [ 44.611237][ T4036] team0: Port device team_slave_1 added [ 44.614102][ T4028] team0: Port device team_slave_1 added [ 44.617723][ T4029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.622036][ T4041] team0: Port device team_slave_1 added [ 44.686983][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.688668][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.695769][ T4036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.700373][ T4041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.702116][ T4041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.708018][ T4041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.712560][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.714405][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.721770][ T4028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.732585][ T4029] team0: Port device team_slave_0 added [ 44.734699][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.736694][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.743119][ T4028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.746770][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.748461][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.755867][ T4036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.766255][ T4041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.768185][ T4041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.775542][ T4041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.782352][ T4029] team0: Port device team_slave_1 added [ 44.817297][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.819019][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.825941][ T4029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.840528][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.842631][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.850033][ T4029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.891639][ T4028] device hsr_slave_0 entered promiscuous mode [ 44.949887][ T4028] device hsr_slave_1 entered promiscuous mode [ 45.019542][ T4028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.021626][ T4028] Cannot create hsr debugfs directory [ 45.121393][ T4036] device hsr_slave_0 entered promiscuous mode [ 45.160164][ T4036] device hsr_slave_1 entered promiscuous mode [ 45.219486][ T4036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.221569][ T4036] Cannot create hsr debugfs directory [ 45.251398][ T4041] device hsr_slave_0 entered promiscuous mode [ 45.300034][ T4041] device hsr_slave_1 entered promiscuous mode [ 45.339657][ T4041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.341653][ T4041] Cannot create hsr debugfs directory [ 45.421723][ T4029] device hsr_slave_0 entered promiscuous mode [ 45.459890][ T4029] device hsr_slave_1 entered promiscuous mode [ 45.499490][ T4029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.501397][ T4029] Cannot create hsr debugfs directory [ 45.644074][ T4027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.646300][ T3321] Bluetooth: hci1: command 0x0409 tx timeout [ 45.648555][ T3321] Bluetooth: hci2: command 0x0409 tx timeout [ 45.650589][ T3321] Bluetooth: hci0: command 0x0409 tx timeout [ 45.701000][ T4027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.719676][ T25] Bluetooth: hci4: command 0x0409 tx timeout [ 45.721399][ T25] Bluetooth: hci3: command 0x0409 tx timeout [ 45.786707][ T4027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.823582][ T4027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.941415][ T4028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.972680][ T4028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.032060][ T4028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.080629][ T4028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.166033][ T4041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.196716][ T4041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.231852][ T4041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.284012][ T4041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.371612][ T4036] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.433275][ T4036] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.495570][ T4036] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.532795][ T4036] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.590169][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.604374][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.608099][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.623181][ T4029] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.655973][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.660701][ T4029] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.708829][ T4029] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.751870][ T4029] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.799594][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.802294][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.805703][ T555] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.807791][ T555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.811535][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.814313][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.816920][ T555] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.818763][ T555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.830556][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.841617][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.861321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.886727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.889302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.899226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.903399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.906772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.917542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.931880][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.934935][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.947159][ T4028] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.963281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.966086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.969110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.972889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.975423][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.977309][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.982153][ T4027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.985557][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.995884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.998421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.001880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.007699][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.012587][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.015720][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.017558][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.038110][ T4041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.044410][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.066454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.075854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.078510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.110570][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.113762][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.116478][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.120891][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.127222][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.131256][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.133919][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.136517][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.140609][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.144222][ T4041] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.162093][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.172576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.181052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.184365][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.186243][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.197450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.218588][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.224661][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.226867][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.245734][ T4036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.247853][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.250938][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.253568][ T555] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.255322][ T555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.257458][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.262298][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.273967][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.286137][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.288654][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.292438][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.295680][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.307046][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.315944][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.318535][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.321822][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.337073][ T4036] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.341937][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.346330][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.349310][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.354317][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.356839][ T555] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.358820][ T555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.362083][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.382760][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.385626][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.388236][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.397041][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.401429][ T555] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.403415][ T555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.405688][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.408512][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.414812][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.417533][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.423131][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.428810][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.431651][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.435030][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.439174][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.452751][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.455305][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.458007][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.462458][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.464136][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.466149][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.468795][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.478682][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.490042][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.497207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.500976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.503799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.507309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.512016][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.513965][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.534169][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.536798][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.539275][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.561256][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.564351][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.567005][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.572215][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.574751][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.577691][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.581136][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.586972][ T4027] device veth0_vlan entered promiscuous mode [ 47.595579][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.605079][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.608577][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.618104][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.623200][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.626150][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.646642][ T4027] device veth1_vlan entered promiscuous mode [ 47.652975][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.655538][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.657666][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.662130][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.665074][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.676220][ T4036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.678979][ T4036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.700957][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.703687][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.706979][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.716984][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.725824][ T4076] Bluetooth: hci0: command 0x041b tx timeout [ 47.727622][ T4076] Bluetooth: hci2: command 0x041b tx timeout [ 47.729172][ T4076] Bluetooth: hci1: command 0x041b tx timeout [ 47.735799][ T4041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.753379][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.755980][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.779237][ T4028] device veth0_vlan entered promiscuous mode [ 47.787407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.792069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.794803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.797825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.800397][ T4079] Bluetooth: hci3: command 0x041b tx timeout [ 47.802419][ T4079] Bluetooth: hci4: command 0x041b tx timeout [ 47.807324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.815726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.826681][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.829936][ T555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.837755][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.856165][ T4028] device veth1_vlan entered promiscuous mode [ 47.865982][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.868952][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.873547][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.888584][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.892409][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.913908][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.918235][ T4027] device veth0_macvtap entered promiscuous mode [ 47.936061][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.938896][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.942597][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.945916][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.948670][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.951555][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.967856][ T4027] device veth1_macvtap entered promiscuous mode [ 47.987095][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.990800][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.993614][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.996362][ T4041] device veth0_vlan entered promiscuous mode [ 48.008187][ T4028] device veth0_macvtap entered promiscuous mode [ 48.024201][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.027030][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.031797][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.034460][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.037141][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.045539][ T4041] device veth1_vlan entered promiscuous mode [ 48.061924][ T4028] device veth1_macvtap entered promiscuous mode [ 48.067046][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.082483][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.085222][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.088031][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.091812][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.098590][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.112855][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.115793][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.128944][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.139144][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.144437][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.151373][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.154174][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.156977][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.161558][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.167127][ T4027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.171359][ T4027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.173612][ T4027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.175914][ T4027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.184616][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.187172][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.194057][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.196868][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.201370][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.213499][ T4036] device veth0_vlan entered promiscuous mode [ 48.222803][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.226239][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.229486][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.232576][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.235537][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.238080][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.257771][ T4041] device veth0_macvtap entered promiscuous mode [ 48.262353][ T4028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.264844][ T4028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.267124][ T4028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.270073][ T4028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.277511][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.282206][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.285509][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.300011][ T4041] device veth1_macvtap entered promiscuous mode [ 48.306683][ T4029] device veth0_vlan entered promiscuous mode [ 48.323358][ T4036] device veth1_vlan entered promiscuous mode [ 48.366138][ T4029] device veth1_vlan entered promiscuous mode [ 48.422996][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.425888][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.428406][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.436846][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.443252][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.454476][ T555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.456667][ T555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.472132][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.474739][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.481099][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.486773][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.489269][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.493449][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.496199][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.498955][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.510171][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.512791][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.515371][ T4041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.518182][ T4041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.523940][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.535646][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.537928][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.555855][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.558735][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.563003][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.565573][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.568347][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.573870][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.576526][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.590898][ T4041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.593176][ T4041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.595480][ T4041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.597817][ T4041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.607388][ T4036] device veth0_macvtap entered promiscuous mode [ 48.614149][ T4029] device veth0_macvtap entered promiscuous mode [ 48.621092][ T4036] device veth1_macvtap entered promiscuous mode [ 48.628583][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.633157][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.636703][ T4029] device veth1_macvtap entered promiscuous mode [ 48.653200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.655901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.658476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.661690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.664318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.716316][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.718556][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.725072][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.737130][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.740822][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.743373][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.745827][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.748329][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.751792][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.755676][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.794648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.797574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.822850][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.825596][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.835921][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.838719][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.852304][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.855667][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.858242][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.864155][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.868741][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.876938][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.896726][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.908377][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.911598][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.913967][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.916375][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.921539][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.926529][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.929070][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.935181][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.937793][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.940389][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.943221][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.945574][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.948248][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.953701][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.981955][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.984760][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.031261][ T361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.033481][ T361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.107294][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.111423][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.116748][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.121574][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.132890][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.138583][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.151552][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.182629][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.684075][ T4029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.690285][ T4029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.693885][ T4029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.703162][ T4029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.797043][ T4036] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.799763][ T4036] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.802027][ T4036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.804112][ T4036] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.815486][ T4075] Bluetooth: hci1: command 0x040f tx timeout [ 49.818196][ T4075] Bluetooth: hci2: command 0x040f tx timeout [ 49.820255][ T4075] Bluetooth: hci0: command 0x040f tx timeout [ 49.889307][ T4076] Bluetooth: hci4: command 0x040f tx timeout [ 49.891439][ T4076] Bluetooth: hci3: command 0x040f tx timeout [ 50.001465][ T4117] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 50.043287][ T4117] bpf_jit: unknown atomic op code f1 [ 50.796739][ T4120] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7'. [ 50.798903][ T4120] device bond_slave_0 entered promiscuous mode [ 50.800527][ T4120] device bond_slave_1 entered promiscuous mode [ 50.834460][ T4125] binder: BINDER_SET_CONTEXT_MGR already set [ 50.836100][ T4125] binder: 4124:4125 ioctl 4018620d 20004a80 returned -16 [ 50.858809][ T4125] binder: tried to use weak ref as strong ref [ 50.860765][ T4125] binder: 4124:4125 Acquire 1 refcount change on invalid ref 0 ret -22 [ 50.886605][ T4125] binder: 4124:4125 got transaction to invalid handle, 1 [ 50.888654][ T4125] binder: 4124:4125 transaction failed 29201/-22, size 0-0 line 2917 [ 50.911212][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.913417][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.915994][ T4125] binder: 4124:4125 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 50.933432][ T4125] binder: 4125 RLIMIT_NICE not set [ 50.947832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.967890][ T4129] binder: 4124:4129 got reply transaction with no transaction stack [ 50.981282][ T4129] binder: 4124:4129 transaction failed 29201/-71, size 0-0 line 2822 [ 50.995190][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.997434][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.013897][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.016132][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.024781][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.028290][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.227722][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.230061][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.234195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.398211][ T4080] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.939368][ C1] sched: RT throttling activated [ 52.978397][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.985135][ T4075] Bluetooth: hci0: command 0x0419 tx timeout [ 52.986822][ T4075] Bluetooth: hci2: command 0x0419 tx timeout [ 52.988420][ T4075] Bluetooth: hci1: command 0x0419 tx timeout [ 52.990220][ T1535] Bluetooth: hci3: command 0x0419 tx timeout [ 52.992540][ T1535] Bluetooth: hci4: command 0x0419 tx timeout [ 53.075767][ T4133] udc-core: couldn't find an available UDC or it's busy [ 53.077530][ T4133] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.413809][ T4155] loop3: detected capacity change from 0 to 40427 [ 53.492711][ T4155] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 53.494959][ T4155] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 53.507804][ T4155] F2FS-fs (loop3): invalid crc value [ 53.565303][ T4168] IPv6: addrconf: prefix option has invalid lifetime [ 53.567253][ T4168] IPv6: addrconf: prefix option has invalid lifetime [ 53.574430][ T4168] fuse: Bad value for 'fd' [ 53.583429][ T4155] F2FS-fs (loop3): Found nat_bits in checkpoint [ 54.313784][ T4155] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 54.315962][ T4155] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.309029][ T4181] loop4: detected capacity change from 0 to 512 [ 56.355051][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.357578][ T4189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.389782][ T4189] xt_nat: multiple ranges no longer supported [ 56.435381][ T4192] xt_hashlimit: max too large, truncated to 1048576 [ 56.526124][ T4036] attempt to access beyond end of device [ 56.526124][ T4036] loop3: rw=2049, want=40968, limit=40427 [ 56.584871][ T555] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 56.587273][ T555] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 56.630082][ T4200] binder: 4199:4200 tried to acquire reference to desc 0, got 1 instead [ 56.644091][ T4181] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.21: casefold flag without casefold feature [ 56.648587][ T4181] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.21: couldn't read orphan inode 15 (err -117) [ 56.666019][ T4200] binder: 4199:4200 got transaction with invalid data ptr [ 56.667941][ T4200] binder: 4199:4200 transaction failed 29201/-14, size 0-12288 line 3186 [ 56.672300][ T4181] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.732180][ T4080] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.748905][ T4216] loop0: detected capacity change from 0 to 512 [ 58.384935][ T4208] ODEBUG: Out of memory. ODEBUG disabled [ 58.491197][ T4216] EXT4-fs (loop0): Ignoring removed orlov option [ 58.534771][ T4216] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.29: Attempting to read directory block (0) that is past i_size (256) [ 58.575586][ T4216] EXT4-fs (loop0): Remounting filesystem read-only [ 58.578181][ T4216] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 58.597372][ T4216] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,orlov,nogrpid,init_itable,auto_da_alloc,grpjquota=.oldalloc,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 58.629775][ T4229] process 'syz.2.31' launched '' with NULL argv: empty string added [ 58.753175][ T4239] netlink: 68 bytes leftover after parsing attributes in process `syz.1.35'. [ 58.874910][ T4248] loop1: detected capacity change from 0 to 512 [ 58.891507][ T4243] binder: 4241:4243 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 58.906812][ T4243] binder: 4243 RLIMIT_NICE not set [ 58.958290][ T4253] binder: 4241:4253 tried to acquire reference to desc 0, got 1 instead [ 58.968602][ T4243] binder: 4243 RLIMIT_NICE not set [ 58.973053][ T4243] binder: 4243 RLIMIT_NICE not set [ 58.987798][ T4248] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 58.993357][ T4080] binder: undelivered TRANSACTION_COMPLETE [ 59.014665][ T4080] binder: undelivered TRANSACTION_COMPLETE [ 59.016386][ T4080] binder: undelivered transaction 15, process died. [ 59.051229][ T4245] loop0: detected capacity change from 0 to 4096 [ 60.461536][ T4245] ======================================================= [ 60.461536][ T4245] WARNING: The mand mount option has been deprecated and [ 60.461536][ T4245] and is ignored by this kernel. Remove the mand [ 60.461536][ T4245] option from the mount to silence this warning. [ 60.461536][ T4245] ======================================================= [ 60.624516][ T4271] binder: 4270:4271 ioctl c0306201 0 returned -14 [ 62.695724][ T4271] binder: 4270:4271 ioctl c0306201 0 returned -14 [ 63.786465][ T4293] udc-core: couldn't find an available UDC or it's busy [ 63.808470][ T4293] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 63.890603][ T4293] Zero length message leads to an empty skb [ 64.078786][ T4304] loop0: detected capacity change from 0 to 8192 [ 64.144388][ T4304] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 64.147209][ T4304] REISERFS (device loop0): using ordered data mode [ 64.148821][ T4304] reiserfs: using flush barriers [ 64.188547][ T4304] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 64.193535][ T4304] REISERFS (device loop0): checking transaction log (loop0) [ 64.234588][ T4304] REISERFS (device loop0): Using r5 hash to sort names [ 64.237207][ T4304] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 64.241851][ T4304] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 65.268826][ T4324] loop4: detected capacity change from 0 to 4096 [ 65.911120][ T4330] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 65.924618][ T4330] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 65.937936][ T4330] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 67.977692][ T4338] udc-core: couldn't find an available UDC or it's busy [ 67.979299][ T4338] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.989228][ T4336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.57'. [ 68.003119][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 68.058025][ T4336] netlink: 'syz.2.57': attribute type 10 has an invalid length. [ 68.060956][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.062905][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.087162][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.089117][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.091477][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.093409][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.103220][ T4336] device bridge0 entered promiscuous mode [ 68.105607][ T4336] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 71.324829][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.326821][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.402484][ T4370] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 71.438663][ T4373] loop4: detected capacity change from 0 to 64 [ 71.655217][ T4380] loop0: detected capacity change from 0 to 256 [ 72.679084][ T4380] FAT-fs (loop0): Directory bread(block 64) failed [ 72.681283][ T4380] FAT-fs (loop0): Directory bread(block 65) failed [ 72.683174][ T4380] FAT-fs (loop0): Directory bread(block 66) failed [ 72.694263][ T4380] FAT-fs (loop0): Directory bread(block 67) failed [ 72.696347][ T4380] FAT-fs (loop0): Directory bread(block 68) failed [ 73.447625][ T4380] FAT-fs (loop0): Directory bread(block 69) failed [ 73.451650][ T4380] FAT-fs (loop0): Directory bread(block 70) failed [ 73.453526][ T4380] FAT-fs (loop0): Directory bread(block 71) failed [ 73.455236][ T4380] FAT-fs (loop0): Directory bread(block 72) failed [ 73.469556][ T4380] FAT-fs (loop0): Directory bread(block 73) failed [ 74.530826][ T4402] loop2: detected capacity change from 0 to 16 [ 74.543712][ T4402] erofs: (device loop2): mounted with root inode @ nid 36. [ 74.617761][ T9] Bluetooth: hci6: Frame reassembly failed (-84) [ 74.728044][ T26] audit: type=1326 audit(74.670:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9062c968 code=0x7ffc0000 [ 74.761496][ T21] cfg80211: failed to load regulatory.db [ 74.774155][ T26] audit: type=1326 audit(74.690:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff9062c968 code=0x7ffc0000 [ 74.779293][ T26] audit: type=1326 audit(74.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9062c968 code=0x7ffc0000 [ 74.792629][ T26] audit: type=1326 audit(74.720:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9062c968 code=0x7ffc0000 [ 74.813191][ T26] audit: type=1326 audit(74.750:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=269 compat=0 ip=0xffff9062c968 code=0x7ffc0000 [ 74.861874][ T136] Bluetooth: Error in BCSP hdr checksum [ 74.863413][ T26] audit: type=1326 audit(74.810:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9062c968 code=0x7ffc0000 [ 74.868680][ T26] audit: type=1326 audit(74.810:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff9062c968 code=0x7ffc0000 [ 74.893053][ T26] audit: type=1326 audit(74.840:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9062c968 code=0x7ffc0000 [ 74.913046][ T26] audit: type=1326 audit(74.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9062c968 code=0x7ffc0000 [ 74.970542][ T4415] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.073282][ T4415] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.122157][ T9] Bluetooth: Error in BCSP hdr checksum [ 75.151381][ T4415] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.235694][ T4415] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.380145][ T555] Bluetooth: Error in BCSP hdr checksum [ 75.420322][ T4415] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.438508][ T4415] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.464783][ T4415] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.478043][ T4415] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.622626][ T26] audit: type=1326 audit(75.570:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4406 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9062c968 code=0x7ffc0000 [ 75.642845][ T4420] loop4: detected capacity change from 0 to 512 [ 75.674738][ T4222] Bluetooth: Error in BCSP hdr checksum [ 75.705215][ T4422] loop2: detected capacity change from 0 to 512 [ 75.712763][ T4420] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 75.712763][ T4420] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 75.712763][ T4420] [ 75.717630][ T4420] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.740036][ T4420] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.753113][ T4422] EXT4-fs (loop2): Ignoring removed orlov option [ 75.754929][ T4422] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.758879][ T4420] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.932045][ T136] Bluetooth: Error in BCSP hdr checksum [ 75.936497][ T4422] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.83: casefold flag without casefold feature [ 75.940585][ T4420] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 75.945050][ T4422] EXT4-fs (loop2): Remounting filesystem read-only [ 75.946723][ T4422] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.83: couldn't read orphan inode 15 (err -117) [ 75.950468][ T4420] EXT4-fs (loop4): 1 truncate cleaned up [ 75.951821][ T4420] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,grpid,dioread_nolock,debug_want_extra_isize=0x0000000000000080,nouser_xattr,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 75.969756][ T4422] EXT4-fs (loop2): Remounting filesystem read-only [ 75.971457][ T4422] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,quota,. Quota mode: writeback. [ 76.195813][ T136] Bluetooth: Error in BCSP hdr checksum [ 76.454687][ T148] Bluetooth: Error in BCSP hdr checksum [ 76.739652][ T4043] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 76.806124][ T25] Bluetooth: hci5: command 0x1003 tx timeout [ 78.839631][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 78.852448][ T4043] Bluetooth: hci5: sending frame failed (-49) [ 79.451417][ T4476] device vlan2 entered promiscuous mode [ 80.647214][ T4494] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.690180][ T4494] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 80.932870][ T4080] Bluetooth: hci5: command 0x1009 tx timeout [ 80.965732][ T4501] device vxcan1 entered promiscuous mode [ 80.967721][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 80.969801][ T4501] team0: Device vlan2 is up. Set it down before adding it as a team port [ 80.979783][ T4501] device vxcan1 left promiscuous mode [ 84.022277][ T4537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'. [ 84.960540][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 86.204752][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'. [ 86.245569][ T4555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.369579][ T4558] loop3: detected capacity change from 0 to 8192 [ 86.442300][ T4558] FAT-fs (loop3): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 86.481293][ T4564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.116'. [ 86.484130][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 86.591578][ T4572] netlink: 'syz.4.117': attribute type 10 has an invalid length. [ 86.599083][ T4571] loop1: detected capacity change from 0 to 256 [ 86.607542][ T4569] loop3: detected capacity change from 0 to 128 [ 86.646178][ T4572] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.648529][ T4575] rdma_rxe: rxe_register_device failed with error -23 [ 86.658435][ T4572] bond0: (slave team0): Enslaving as an active interface with an up link [ 86.662519][ T4575] rdma_rxe: failed to add team_slave_0 [ 86.685765][ T4569] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 86.735299][ T4555] loop0: detected capacity change from 0 to 32768 [ 86.789004][ T4555] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.112 (4555) [ 86.806872][ T4579] binder: 4578:4579 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 86.862248][ T4582] binder: 4578:4582 tried to acquire reference to desc 0, got 1 instead [ 86.874555][ T4555] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 86.885899][ T4555] BTRFS info (device loop0): setting nodatasum [ 86.887599][ T4555] BTRFS info (device loop0): using free space tree [ 86.889251][ T4555] BTRFS info (device loop0): has skinny extents [ 86.897741][ T4077] binder: undelivered TRANSACTION_COMPLETE [ 86.941258][ T21] binder: undelivered TRANSACTION_COMPLETE [ 86.942821][ T21] binder: undelivered transaction 21, process died. [ 87.064608][ T4555] BTRFS info (device loop0): enabling ssd optimizations [ 88.035836][ T4611] hub 2-0:1.0: USB hub found [ 88.038298][ T4611] hub 2-0:1.0: 8 ports detected [ 88.137936][ T4616] netlink: 48 bytes leftover after parsing attributes in process `syz.3.126'. [ 88.284823][ T4621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 89.217102][ T4628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.220065][ T4628] IPv6: NLM_F_CREATE should be set when creating new route [ 89.222537][ T4628] netlink: 'syz.1.130': attribute type 27 has an invalid length. [ 89.633333][ T4628] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.636026][ T4628] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.235702][ T4628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.270959][ T4628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.735487][ T4628] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.737898][ T4628] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.740428][ T4628] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.742766][ T4628] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.001196][ T4643] udc-core: couldn't find an available UDC or it's busy [ 91.002994][ T4643] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.223963][ T4643] device bridge0 entered promiscuous mode [ 91.227827][ T4643] device macsec1 entered promiscuous mode [ 91.231849][ T4643] bridge0: port 3(macsec1) entered blocking state [ 91.235038][ T4643] bridge0: port 3(macsec1) entered disabled state [ 91.243436][ T4643] device bridge0 left promiscuous mode [ 94.164001][ T4660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.139'. [ 94.172140][ T4663] loop1: detected capacity change from 0 to 256 [ 97.320656][ T4692] loop0: detected capacity change from 0 to 256 [ 97.361237][ T4692] exfat: Deprecated parameter 'namecase' [ 97.362698][ T4692] exfat: Deprecated parameter 'namecase' [ 97.876545][ T4039] Bluetooth: hci4: link tx timeout [ 97.878680][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 97.937293][ T4692] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 98.404855][ T4715] syz.4.156 sent an empty control message without MSG_MORE. [ 98.987480][ T4713] device dummy0 entered promiscuous mode [ 99.003842][ T4713] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 99.010417][ T4719] tipc: Started in network mode [ 99.011907][ T4719] tipc: Node identity ba8edce5aa33, cluster identity 4711 [ 99.020044][ T4719] tipc: Enabled bearer , priority 0 [ 99.046784][ T4710] device syzkaller0 entered promiscuous mode [ 99.071088][ T4710] tipc: Resetting bearer [ 99.093677][ T4709] tipc: Resetting bearer [ 99.127659][ T4709] tipc: Disabling bearer [ 99.131950][ T4722] loop3: detected capacity change from 0 to 256 [ 99.303173][ T4722] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 99.306821][ T4722] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 99.316565][ T4722] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 99.318577][ T4722] UDF-fs: Scanning with blocksize 512 failed [ 99.321237][ T4722] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 99.326022][ T4722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.586462][ T4078] Bluetooth: hci4: command 0x0406 tx timeout [ 101.728681][ T4741] loop4: detected capacity change from 0 to 2048 [ 101.888897][ T4736] loop2: detected capacity change from 0 to 4096 [ 104.374595][ T4741] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 104.464595][ T4755] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.635489][ T4761] netlink: 'syz.3.174': attribute type 39 has an invalid length. [ 107.439727][ T4790] loop1: detected capacity change from 0 to 1024 [ 107.673579][ T4790] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,data=ordered,init_itable=0x0000000000000003,usrquota,max_dir_size_kb=0x00000000000040d2,,errors=continue. Quota mode: writeback. [ 109.917138][ T4813] tipc: Cannot configure node identity twice [ 109.918818][ T4813] tipc: Cannot configure node identity twice [ 110.727939][ T4821] loop1: detected capacity change from 0 to 512 [ 110.836056][ T4821] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 110.925874][ T4828] tipc: Enabled bearer , priority 0 [ 110.942806][ T4828] device syzkaller0 entered promiscuous mode [ 110.998293][ T4828] tipc: Resetting bearer [ 111.050810][ T4826] tipc: Resetting bearer [ 111.100715][ T4826] tipc: Disabling bearer [ 111.260455][ T4832] netlink: 116 bytes leftover after parsing attributes in process `syz.1.191'. [ 111.470086][ T4837] loop2: detected capacity change from 0 to 64 [ 111.745663][ T4842] udc-core: couldn't find an available UDC or it's busy [ 111.747567][ T4842] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 111.966996][ T4812] Set syz1 is full, maxelem 65536 reached [ 114.182051][ T4855] device bridge1 entered promiscuous mode [ 114.197667][ T4855] team0: Port device bridge1 added [ 114.247373][ T4859] netlink: 132 bytes leftover after parsing attributes in process `syz.3.200'. [ 114.312654][ T4865] syz.2.202 uses obsolete (PF_INET,SOCK_PACKET) [ 114.360160][ T4855] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 114.387528][ T4855] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 114.580401][ T4872] udc-core: couldn't find an available UDC or it's busy [ 114.586034][ T4872] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.140668][ T4912] loop4: detected capacity change from 0 to 512 [ 120.983210][ T4922] loop0: detected capacity change from 0 to 164 [ 121.010623][ T4912] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 121.864659][ T4945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 122.039115][ T4945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 124.103747][ T4969] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.337829][ T4978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 125.382868][ T4969] FAT-fs (loop2): unable to read boot sector [ 126.724808][ T4974] Set syz1 is full, maxelem 65536 reached [ 126.941460][ T4990] "syz.4.239" (4990) uses obsolete ecb(arc4) skcipher [ 128.118857][ T21] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 128.121638][ T21] hid-generic: probe of 0005:0C45:1010.0001 failed with error -22 [ 128.852338][ T5014] loop1: detected capacity change from 0 to 2048 [ 128.930167][ T5019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 129.008645][ T5014] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 129.101673][ T4021] udevd[4021]: incorrect nilfs2 checksum on /dev/loop1 [ 129.189587][ T5023] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.989263][ T4039] Bluetooth: hci4: link tx timeout [ 129.990747][ T4039] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 129.992806][ T4039] Bluetooth: hci4: link tx timeout [ 129.994184][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.259847][ T5034] NILFS (loop1): failed to count free inodes: err=-34 [ 130.261771][ T5034] NILFS (loop1): failed to count free inodes: err=-34 [ 131.111656][ T5017] loop3: detected capacity change from 0 to 32768 [ 132.762642][ T3321] Bluetooth: hci4: command 0x0406 tx timeout [ 133.272326][ T5049] ptrace attach of "./syz-executor exec"[4028] was attempted by "./syz-executor exec"[5049] [ 133.328529][ T5051] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 133.694816][ T5063] loop4: detected capacity change from 0 to 1024 [ 133.714775][ T5062] binder: 5061:5062 tried to acquire reference to desc 0, got 1 instead [ 133.722937][ T5062] binder: 5061:5062 got transaction with invalid offsets ptr [ 133.729167][ T5062] binder: 5061:5062 transaction failed 29201/-14, size 0-24 line 3124 [ 133.732193][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 133.740625][ T4078] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.773667][ T5063] hfsplus: request for non-existent node 3 in B*Tree [ 133.775539][ T5063] hfsplus: request for non-existent node 3 in B*Tree [ 133.784897][ T5066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 133.788958][ T5068] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 134.845773][ T5084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.271'. [ 136.200963][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.202906][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.164195][ T5109] autofs4:pid:5109:autofs_fill_super: called with bogus options [ 137.182309][ T5112] netlink: 'syz.2.281': attribute type 4 has an invalid length. [ 139.767035][ T5132] loop0: detected capacity change from 0 to 128 [ 139.815638][ T5132] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 139.837794][ T5132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.533451][ T5150] udc-core: couldn't find an available UDC or it's busy [ 140.535305][ T5150] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.572692][ T5150] udc-core: couldn't find an available UDC or it's busy [ 140.574603][ T5150] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.768759][ T5155] netlink: 'syz.4.294': attribute type 4 has an invalid length. [ 140.967130][ T5161] loop3: detected capacity change from 0 to 256 [ 141.934762][ T5173] tmpfs: Unknown parameter '00000000000000000005' [ 141.952077][ T5173] bridge0: port 3(vlan4) entered blocking state [ 141.953932][ T5173] bridge0: port 3(vlan4) entered disabled state [ 145.421607][ T5186] loop1: detected capacity change from 0 to 2048 [ 145.570454][ T5199] loop3: detected capacity change from 0 to 128 [ 145.646956][ T5199] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 145.682662][ T5199] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.807659][ T5202] loop4: detected capacity change from 0 to 32768 [ 146.889484][ T5186] hpfs: filesystem error: improperly stopped; already mounted read-only [ 146.892090][ T5186] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 147.027318][ T5186] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4 [ 147.134075][ T5202] (syz.4.311,5202,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 147.159548][ T5202] (syz.4.311,5202,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 147.182767][ T5202] (syz.4.311,5202,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xd5db68cb, computed 0x8a3e433b. Applying ECC. [ 147.187536][ T5202] (syz.4.311,5202,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdde57c9f, computed 0xa0996707. Applying ECC. [ 147.195849][ T5202] (syz.4.311,5202,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdde57c9f, computed 0x8a8daa09 [ 147.199524][ T5202] (syz.4.311,5202,0):ocfs2_validate_inode_block:1379 ERROR: Checksum failed for dinode 25 [ 147.202531][ T5202] (syz.4.311,5202,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 147.205314][ T5202] (syz.4.311,5202,0):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 147.208378][ T5202] (syz.4.311,5202,0):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 147.218987][ T5202] (syz.4.311,5202,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 6, possibly corrupt fs? [ 147.219019][ T5202] (syz.4.311,5202,0):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 147.224941][ T5202] (syz.4.311,5202,0):ocfs2_initialize_super:2278 ERROR: status = -22 [ 147.227206][ T5202] (syz.4.311,5202,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 147.535534][ T5216] device vlan2 entered promiscuous mode [ 147.604177][ T5212] netlink: 'syz.1.313': attribute type 10 has an invalid length. [ 147.609184][ T5212] bond0: (slave wlan1): Opening slave failed [ 147.655192][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 148.572736][ T5223] loop1: detected capacity change from 0 to 2048 [ 148.657657][ T5223] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.674922][ T5229] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.675238][ T5223] attempt to access beyond end of device [ 148.675238][ T5223] loop1: rw=524288, want=33554432, limit=2048 [ 148.689639][ T5220] device hsr_slave_1 left promiscuous mode [ 148.716433][ T5228] loop2: detected capacity change from 0 to 4096 [ 149.870447][ T5241] loop4: detected capacity change from 0 to 47 [ 151.040997][ T5254] loop2: detected capacity change from 0 to 128 [ 152.877800][ T5254] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 152.908393][ T5254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.088497][ T5267] netlink: 'syz.1.329': attribute type 4 has an invalid length. [ 153.182402][ T5269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.068114][ T5275] loop3: detected capacity change from 0 to 256 [ 154.424444][ T5275] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 155.096078][ T5269] device batadv_slave_0 entered promiscuous mode [ 156.023656][ T5284] loop1: detected capacity change from 0 to 1024 [ 157.098148][ T5283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.137285][ T5284] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.149799][ T5291] loop0: detected capacity change from 0 to 8 [ 157.664025][ T5301] netlink: 'syz.4.340': attribute type 12 has an invalid length. [ 157.697446][ T5299] loop1: detected capacity change from 0 to 1024 [ 157.752822][ T5305] dlm: dev_write: no op 0 74000000000000 [ 157.753065][ T5299] EXT4-fs (loop1): Ignoring removed oldalloc option [ 157.806604][ T5299] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 158.043863][ T5303] loop4: detected capacity change from 0 to 32768 [ 158.236973][ T5321] ebt_limit: overflow, try lower: 570423552/2483027968 [ 158.896087][ T5303] XFS (loop4): Mounting V5 Filesystem [ 159.100274][ T5303] XFS (loop4): Ending clean mount [ 159.122510][ T5303] XFS (loop4): Quotacheck needed: Please wait. [ 159.238282][ T5303] XFS (loop4): Quotacheck: Done. [ 159.471135][ T5352] loop2: detected capacity change from 0 to 512 [ 159.976425][ T5369] udc-core: couldn't find an available UDC or it's busy [ 159.978260][ T5369] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 160.006928][ T4080] syzkaller0: tun_net_xmit 76 [ 160.008769][ T4080] syzkaller0: tun_net_xmit 48 [ 160.035835][ T4080] syzkaller0: tun_net_xmit 76 [ 160.103235][ T5366] syzkaller0: create flow: hash 2472389238 index 2 [ 160.134775][ T5366] syzkaller0: delete flow: hash 2472389238 index 2 [ 160.929779][ T4029] XFS (loop4): Unmounting Filesystem [ 160.989707][ T5376] binder: 5374:5376 tried to acquire reference to desc 0, got 1 instead [ 160.994150][ T4076] binder: release 5374:5376 transaction 31 out, still active [ 160.996820][ T4076] binder: undelivered TRANSACTION_COMPLETE [ 161.006842][ T4076] binder: send failed reply for transaction 31, target dead [ 161.265401][ T5387] netlink: 332 bytes leftover after parsing attributes in process `syz.0.367'. [ 162.478530][ T5396] raw_sendmsg: syz.1.368 forgot to set AF_INET. Fix it! [ 165.594633][ T5422] binder: 5419:5422 tried to acquire reference to desc 0, got 1 instead [ 165.599775][ T7] binder: release 5419:5422 transaction 36 out, still active [ 165.601756][ T7] binder: undelivered TRANSACTION_COMPLETE [ 165.616651][ T7] binder: send failed reply for transaction 36, target dead [ 165.660052][ T5427] binder: 5426:5427 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 165.663506][ T5427] binder: 5427 RLIMIT_NICE not set [ 165.711303][ T5430] binder: 5426:5430 tried to acquire reference to desc 0, got 1 instead [ 165.713862][ T5427] binder: 5427 RLIMIT_NICE not set [ 165.716303][ T5430] binder: 5426:5430 got new transaction with bad transaction stack, transaction 41 has target 5426:5427 [ 165.719601][ T5430] binder: 5426:5430 transaction failed 29201/-71, size 0-0 line 2973 [ 167.569825][ T5427] binder: 5427 RLIMIT_NICE not set [ 167.571533][ T5427] binder_alloc: 5426: binder_alloc_buf, no vma [ 167.573473][ T5436] loop2: detected capacity change from 0 to 1024 [ 167.594030][ T5427] binder: 5426:5427 transaction failed 29189/-3, size 0-0 line 3085 [ 167.601242][ T5427] binder: send failed reply for transaction 41 to 5426:5430 [ 167.620085][ T5439] binder: undelivered TRANSACTION_COMPLETE [ 167.624074][ T5439] binder: undelivered TRANSACTION_ERROR: 29201 [ 167.674816][ T5439] binder: undelivered TRANSACTION_ERROR: 29189 [ 171.393805][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 171.525141][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 171.526835][ T5439] Bluetooth: hci3: command 0x0406 tx timeout [ 171.533045][ T5436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.547426][ T4121] binder: undelivered TRANSACTION_ERROR: 29190 [ 172.110636][ T5455] xt_hashlimit: max too large, truncated to 1048576 [ 172.122298][ T5455] xt_limit: Overflow, try lower: 0/0 [ 172.574586][ T5454] loop4: detected capacity change from 0 to 512 [ 172.720335][ T5464] loop3: detected capacity change from 0 to 256 [ 172.960065][ T5468] ebt_among: src integrity fail: 300 [ 173.858447][ T5471] binder: 5470:5471 tried to acquire reference to desc 0, got 1 instead [ 173.866134][ T5439] binder: release 5470:5471 transaction 48 out, still active [ 173.868099][ T5439] binder: undelivered TRANSACTION_COMPLETE [ 173.899799][ T5439] binder: send failed reply for transaction 48, target dead [ 174.013795][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 174.013807][ T26] audit: type=1326 audit(174.214:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5477 comm="syz.3.392" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae92b968 code=0x0 [ 174.043051][ T5485] loop2: detected capacity change from 0 to 8 [ 174.179272][ T5485] squashfs: Unknown parameter 'obj_role' [ 175.078613][ T5491] loop1: detected capacity change from 0 to 8 [ 175.260613][ T5499] bridge0: port 3(syz_tun) entered blocking state [ 175.266654][ T5499] bridge0: port 3(syz_tun) entered disabled state [ 175.277326][ T5499] device syz_tun entered promiscuous mode [ 175.279416][ T5499] bridge0: port 3(syz_tun) entered blocking state [ 175.281277][ T5499] bridge0: port 3(syz_tun) entered forwarding state [ 176.061608][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 176.104802][ T5499] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.171604][ T5508] loop2: detected capacity change from 0 to 1024 [ 176.241343][ T5491] SQUASHFS error: xz decompression failed, data probably corrupt [ 176.243784][ T5491] SQUASHFS error: Failed to read block 0x108: -5 [ 176.271652][ T5491] SQUASHFS error: Unable to read metadata cache entry [106] [ 176.273589][ T5491] SQUASHFS error: Unable to read inode 0x0 [ 176.440031][ T5508] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x000000000000007f,nolazytime,noload,nombcache,acl,,errors=continue. Quota mode: none. [ 178.151982][ T5527] loop3: detected capacity change from 0 to 8 [ 180.449952][ T5539] netlink: 'syz.0.413': attribute type 10 has an invalid length. [ 180.453687][ T5539] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.456032][ T5539] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.314253][ T5539] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.316295][ T5539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.318250][ T5539] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.320240][ T5539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.345164][ T5548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 182.167772][ T5539] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 182.286564][ T5552] loop4: detected capacity change from 0 to 256 [ 182.449173][ T5552] exfat: Deprecated parameter 'namecase' [ 182.462697][ T5560] loop0: detected capacity change from 0 to 1024 [ 183.133592][ T5552] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 183.254128][ T5560] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 183.301931][ T5579] udc-core: couldn't find an available UDC or it's busy [ 183.303795][ T5579] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 186.511104][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 186.520103][ T5601] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 186.618004][ T5609] udc-core: couldn't find an available UDC or it's busy [ 186.619939][ T5609] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 186.639101][ T5609] : renamed from ipvlan1 [ 186.709214][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 187.495783][ T5614] team1: Mode "" not found [ 187.533026][ T5618] loop0: detected capacity change from 0 to 256 [ 187.675934][ T5618] exfat: Deprecated parameter 'namecase' [ 187.693319][ T5618] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 187.776951][ T5620] loop1: detected capacity change from 0 to 40427 [ 187.823413][ T5627] netlink: 80 bytes leftover after parsing attributes in process `syz.4.440'. [ 187.836385][ T5627] netlink: 6 bytes leftover after parsing attributes in process `syz.4.440'. [ 187.842232][ T5620] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 187.844459][ T5620] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 187.859923][ T5627] IPVS: Error connecting to the multicast addr [ 187.863692][ T5620] F2FS-fs (loop1): invalid crc value [ 187.895671][ T5620] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.911288][ T5620] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 187.913182][ T5620] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.023256][ T5636] loop4: detected capacity change from 0 to 1024 [ 188.248784][ T5643] attempt to access beyond end of device [ 188.248784][ T5643] loop1: rw=2049, want=78344, limit=40427 [ 188.587893][ T5636] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 188.590146][ T5636] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.174421][ T5636] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,max_dir_size_kb=0x0000000000000009,sysvgroups,data_err=ignore,dioread_nolock,stripe=0x0000000000000004,min_batch_time=0x0000000000000002,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 191.397968][ T5670] loop2: detected capacity change from 0 to 256 [ 191.415276][ T5671] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 191.435104][ T5670] exfat: Deprecated parameter 'namecase' [ 191.470891][ T5670] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 191.702354][ T5693] binder: 5692:5693 tried to acquire reference to desc 0, got 1 instead [ 191.705535][ T5693] binder: 5692:5693 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 191.713584][ T5693] binder: 5693 RLIMIT_NICE not set [ 191.723919][ T5693] binder: 5693 RLIMIT_NICE not set [ 191.731800][ T5693] binder: release 5692:5693 transaction 53 out, still active [ 191.740199][ T5679] loop1: detected capacity change from 0 to 2048 [ 191.747254][ T5693] binder: undelivered TRANSACTION_COMPLETE [ 191.755116][ T5693] binder: 5693 RLIMIT_NICE not set [ 191.758108][ T5693] binder: 5692:5693 transaction failed 29189/0, size 0-0 line 2849 [ 191.760110][ T5693] binder: send failed reply for transaction 53, target dead [ 191.781841][ T5679] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 191.784692][ T5679] UDF-fs: Scanning with blocksize 512 failed [ 191.793687][ T4122] binder: undelivered TRANSACTION_ERROR: 29190 [ 191.950027][ T5679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.973531][ T4039] Bluetooth: hci4: link tx timeout [ 193.975353][ T4039] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 193.977285][ T4039] Bluetooth: hci4: link tx timeout [ 193.978649][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 196.806022][ T5722] loop1: detected capacity change from 0 to 2048 [ 196.918012][ T5722] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.377001][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.389297][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.940121][ T5747] lo speed is unknown, defaulting to 1000 [ 197.952545][ T5747] lo speed is unknown, defaulting to 1000 [ 197.954431][ T5747] lo speed is unknown, defaulting to 1000 [ 197.964726][ T5753] udc-core: couldn't find an available UDC or it's busy [ 197.966394][ T5753] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 197.995381][ T5751] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 198.036287][ T5751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.206699][ T5751] bond1: (slave ip6gretap1): making interface the new active one [ 198.209778][ T5751] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.212396][ T5751] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.232298][ T5751] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 198.239629][ T5760] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 198.287231][ T5747] infiniband syz0: set active [ 198.292568][ T5747] infiniband syz0: added lo [ 198.306968][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 198.311111][ T4076] lo speed is unknown, defaulting to 1000 [ 198.315311][ T4222] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.054856][ T5439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.155226][ T5747] RDS/IB: syz0: added [ 199.177659][ T5747] smc: adding ib device syz0 with port count 1 [ 199.179496][ T5747] smc: ib device syz0 port 1 has pnetid [ 199.184395][ T5439] lo speed is unknown, defaulting to 1000 [ 199.200972][ T5747] lo speed is unknown, defaulting to 1000 [ 199.239209][ T5765] udc-core: couldn't find an available UDC or it's busy [ 199.248954][ T5765] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 199.293635][ T3321] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.371525][ T5747] lo speed is unknown, defaulting to 1000 [ 199.435779][ T5775] loop4: detected capacity change from 0 to 512 [ 199.466665][ T5775] EXT4-fs (loop4): journaled quota format not specified [ 199.484086][ T5747] lo speed is unknown, defaulting to 1000 [ 199.512747][ T5777] netlink: 'syz.3.477': attribute type 29 has an invalid length. [ 199.515103][ T5777] netlink: 'syz.3.477': attribute type 29 has an invalid length. [ 199.520772][ T5777] netlink: 'syz.3.477': attribute type 29 has an invalid length. [ 199.524833][ T5777] netlink: 'syz.3.477': attribute type 29 has an invalid length. [ 199.527288][ T5777] netlink: 'syz.3.477': attribute type 29 has an invalid length. [ 199.536419][ T5777] netlink: 'syz.3.477': attribute type 29 has an invalid length. [ 199.538673][ T5777] netlink: 'syz.3.477': attribute type 29 has an invalid length. [ 199.540955][ T5777] netlink: 'syz.3.477': attribute type 29 has an invalid length. [ 199.648236][ T5747] lo speed is unknown, defaulting to 1000 [ 199.724385][ T136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.798356][ T5747] lo speed is unknown, defaulting to 1000 [ 199.855370][ T3321] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.050413][ T5439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.052953][ T5439] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.562436][ T5808] udc-core: couldn't find an available UDC or it's busy [ 201.588001][ T3321] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 201.614042][ T5808] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 201.743320][ T4121] Bluetooth: hci4: command 0x0405 tx timeout [ 202.322787][ T5808] : renamed from ipvlan1 [ 202.366590][ T5813] loop2: detected capacity change from 0 to 512 [ 202.438677][ T5813] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 202.440891][ T5813] EXT2-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 204.238392][ T4472] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 204.238407][ T4472] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 204.295745][ T5829] kernel read not supported for file /šLŲ (pid: 5829 comm: syz.1.495) [ 204.297888][ T5837] loop3: detected capacity change from 0 to 16 [ 204.404933][ T5830] udc-core: couldn't find an available UDC or it's busy [ 204.406601][ T5830] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 204.437145][ T5840] device bridge_slave_0 left promiscuous mode [ 204.456667][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.468450][ T5837] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 205.127175][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 205.960473][ T5854] loop1: detected capacity change from 0 to 64 [ 208.217060][ T5877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.511'. [ 208.767261][ T4472] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 210.465606][ T5884] loop1: detected capacity change from 0 to 4096 [ 210.468155][ T5884] ntfs3: Unknown parameter 'case' [ 213.537194][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.657883][ T5921] trusted_key: encrypted_key: hex blob is missing [ 215.313402][ T4279] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 215.445855][ T5946] loop1: detected capacity change from 0 to 764 [ 216.279040][ T26] audit: type=1326 audit(216.487:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb26a6968 code=0x7ffc0000 [ 216.290840][ T5946] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 216.297256][ T26] audit: type=1326 audit(216.507:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb26a6968 code=0x7ffc0000 [ 216.312636][ T26] audit: type=1326 audit(216.507:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb26a6968 code=0x7ffc0000 [ 216.326820][ T5955] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 216.339694][ T26] audit: type=1326 audit(216.507:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffb26a6968 code=0x7ffc0000 [ 216.358006][ T26] audit: type=1326 audit(216.507:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb26a6968 code=0x7ffc0000 [ 216.369187][ T26] audit: type=1326 audit(216.507:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=35 compat=0 ip=0xffffb26a6968 code=0x7ffc0000 [ 216.381440][ T26] audit: type=1326 audit(216.507:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5956 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb26a6968 code=0x7ffc0000 [ 216.417603][ T5963] netlink: 'syz.3.533': attribute type 10 has an invalid length. [ 216.441468][ T5963] bridge0: port 3(team0) entered blocking state [ 216.453845][ T5963] bridge0: port 3(team0) entered disabled state [ 216.458777][ T5963] device team0 entered promiscuous mode [ 216.461481][ T5963] device team_slave_0 entered promiscuous mode [ 216.471090][ T5963] device team_slave_1 entered promiscuous mode [ 216.473347][ T136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 216.477213][ T5963] bridge0: port 3(team0) entered blocking state [ 216.479045][ T5963] bridge0: port 3(team0) entered forwarding state [ 217.925397][ T4222] wlan1: Trigger new scan to find an IBSS to join [ 219.472663][ T4382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.914261][ T5996] loop2: detected capacity change from 0 to 764 [ 219.938930][ T6001] netlink: 'syz.1.547': attribute type 2 has an invalid length. [ 219.941036][ T6001] netlink: 132 bytes leftover after parsing attributes in process `syz.1.547'. [ 219.967832][ T5996] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 222.934535][ T136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.131736][ T6027] binder: 6023:6027 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 224.386860][ T6027] binder: 6023:6027 got transaction to invalid handle, 1 [ 224.388744][ T6027] binder: 6023:6027 transaction failed 29201/-22, size 0-0 line 2917 [ 224.406725][ T6027] binder: 6023:6027 ioctl c0306201 20000380 returned -14 [ 224.829930][ T136] wlan1: Trigger new scan to find an IBSS to join [ 225.904836][ T153] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 227.414902][ T6055] netlink: 'syz.2.561': attribute type 1 has an invalid length. [ 227.463563][ T6055] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 227.494552][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 227.660811][ T6055] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 227.687422][ T6055] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 227.706276][ T6067] xt_ipcomp: unknown flags B [ 228.091924][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 228.530542][ T4222] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 228.652741][ T4185] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 229.930484][ T6090] loop4: detected capacity change from 0 to 1024 [ 230.172149][ T136] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 230.983332][ T6090] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 231.216884][ T6090] netlink: 132 bytes leftover after parsing attributes in process `syz.4.571'. [ 231.220077][ T6090] netlink: 'syz.4.571': attribute type 10 has an invalid length. [ 231.261332][ T6090] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 232.999578][ T4382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 233.299107][ T6117] loop2: detected capacity change from 0 to 64 [ 235.380847][ T6127] binder: 6126:6127 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 235.420680][ T6127] binder: 6127 RLIMIT_NICE not set [ 235.472499][ T6134] binder: 6126:6134 tried to acquire reference to desc 0, got 1 instead [ 235.524993][ T6127] binder: 6127 RLIMIT_NICE not set [ 235.538404][ T6133] loop3: detected capacity change from 0 to 2048 [ 235.548250][ T5439] binder: release 6126:6134 transaction 62 out, still active [ 235.550126][ T5439] binder: undelivered TRANSACTION_COMPLETE [ 235.578308][ T6139] netlink: 'syz.2.586': attribute type 10 has an invalid length. [ 235.581027][ T5439] binder: release 6126:6127 transaction 62 in, still active [ 235.583201][ T5439] binder: send failed reply for transaction 62, target dead [ 235.587800][ T6139] bridge0: port 3(team0) entered blocking state [ 235.589682][ T6139] bridge0: port 3(team0) entered disabled state [ 235.594464][ T6139] device team0 entered promiscuous mode [ 235.595852][ T6139] device team_slave_0 entered promiscuous mode [ 235.597576][ T6139] device team_slave_1 entered promiscuous mode [ 235.600050][ T6139] bridge0: port 3(team0) entered blocking state [ 235.601764][ T6139] bridge0: port 3(team0) entered forwarding state [ 235.624347][ T6133] hpfs: hpfs_map_sector(): read error [ 235.845173][ T4222] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 239.954034][ T4382] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.413833][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 241.222102][ T361] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.120516][ T6215] loop0: detected capacity change from 0 to 1024 [ 244.482285][ T148] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.212643][ T6215] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,noload,lazytime,usrquota,discard,data_err=abort,,errors=continue. Quota mode: writeback. [ 245.380838][ T6234] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 246.343291][ T6240] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 246.397568][ T6233] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.400144][ T6233] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.402396][ T6233] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.404591][ T6233] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.633270][ T6233] device vxlan0 entered promiscuous mode [ 246.658738][ T6233] team0: Port device vxlan0 added [ 246.663310][ T6245] capability: warning: `syz.1.619' uses deprecated v2 capabilities in a way that may be insecure [ 246.715303][ T4185] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 247.345516][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.622'. [ 248.084483][ T6258] delete_channel: no stack [ 248.088338][ T6258] delete_channel: no stack [ 248.844448][ T6264] loop4: detected capacity change from 0 to 16 [ 248.918313][ T6260] device ip6erspan0 entered promiscuous mode [ 248.941543][ T6264] erofs: (device loop4): mounted with root inode @ nid 36. [ 251.516955][ T148] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.759188][ T6300] loop0: detected capacity change from 0 to 1024 [ 252.797019][ T6305] loop3: detected capacity change from 0 to 64 [ 254.080948][ T4279] hfsplus: b-tree write err: -5, ino 4 [ 254.120593][ T153] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.220983][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.274934][ T4039] Bluetooth: hci4: link tx timeout [ 257.276369][ T4039] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 257.278557][ T4039] Bluetooth: hci4: link tx timeout [ 257.279884][ T4039] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 257.449909][ T6341] loop0: detected capacity change from 0 to 128 [ 257.550329][ T6341] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 257.571735][ T6341] sysv_count_free_blocks: cannot read free-list block [ 257.791324][ T361] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.101845][ T6341] sysv_count_free_inodes: unable to read inode table [ 258.757359][ T4472] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 259.202355][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.204224][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.301526][ T6341] overlayfs: unrecognized mount option "Q«" or missing value [ 259.476711][ T4027] sysv_free_block: trying to free block not in datazone [ 259.501758][ T4027] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 260.724279][ T4185] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.413881][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.757374][ T6416] loop3: detected capacity change from 0 to 2048 [ 266.767522][ T6419] loop2: detected capacity change from 0 to 64 [ 267.015241][ T6416] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 267.024194][ T6419] hfs: type requires a 4 character value [ 267.026805][ T6419] hfs: unable to parse mount options [ 267.469819][ T6416] attempt to access beyond end of device [ 267.469819][ T6416] loop3: rw=524288, want=33554432, limit=2048 [ 267.474557][ T6426] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.785465][ T153] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 268.053560][ T6440] loop0: detected capacity change from 0 to 512 [ 268.906789][ T6440] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 268.934666][ T6440] EXT4-fs error (device loop0): __ext4_iget:4872: inode #11: block 1: comm syz.0.675: invalid block [ 268.941940][ T6440] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.675: couldn't read orphan inode 11 (err -117) [ 268.968006][ T6440] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,noinit_itable,bsddf,data_err=abort,mblk_io_submit,acl,resuid=0x0000000000000000,usrquota,noauto_da_alloc,journal_dev=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 271.299557][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 272.465264][ T6475] loop3: detected capacity change from 0 to 512 [ 272.591604][ T6475] EXT4-fs (loop3): Invalid journal IO priority (must be 0-7) [ 273.792803][ T361] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 274.696846][ T6497] batman_adv: batadv0: Adding interface: wlan1 [ 274.698456][ T6497] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.089444][ T6497] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 275.569449][ T153] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.592877][ T6504] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 275.595668][ T6504] Mem abort info: [ 275.596700][ T6504] ESR = 0x0000000086000006 [ 275.597880][ T6504] EC = 0x21: IABT (current EL), IL = 32 bits [ 275.599587][ T6504] SET = 0, FnV = 0 [ 275.600662][ T6504] EA = 0, S1PTW = 0 [ 275.601661][ T6504] FSC = 0x06: level 2 translation fault [ 275.603096][ T6504] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000116b49000 [ 275.604957][ T6504] [0000000000000000] pgd=080000010997f003, p4d=080000010997f003, pud=080000010903a003, pmd=0000000000000000 [ 275.608172][ T6504] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 275.610071][ T6504] Modules linked in: [ 275.611137][ T6504] CPU: 0 PID: 6504 Comm: syz.0.693 Not tainted 5.15.177-syzkaller #0 [ 275.613320][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 275.615917][ T6504] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 275.617961][ T6504] pc : 0x0 [ 275.618722][ T6504] lr : bond_xdp_xmit+0x310/0x4f4 [ 275.619955][ T6504] sp : ffff8000213472a0 [ 275.621108][ T6504] x29: ffff8000213473e0 x28: 1ffff00004268e72 x27: 1ffff00004268e6e [ 275.623258][ T6504] x26: dfff800000000000 x25: ffff0000e5da0000 x24: ffff800021347360 [ 275.625468][ T6504] x23: ffff800021347340 x22: ffff8000137a80d8 x21: fffffbffeff942d0 [ 275.627588][ T6504] x20: ffff0000d8e18140 x19: 0000000000000000 x18: 0000000000000200 [ 275.629661][ T6504] x17: 0000000000000002 x16: ffff8000082eae30 x15: 0000000000000001 [ 275.631836][ T6504] x14: ffff0000d25b0000 x13: 0000000000ff0100 x12: 0000000000080000 [ 275.633953][ T6504] x11: 0000000000000595 x10: ffff800020f2b000 x9 : 0000000000000596 [ 275.636091][ T6504] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 275.638117][ T6504] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000001 [ 275.640200][ T6504] x2 : ffff800021347340 x1 : 0000000000000001 x0 : ffff0000e5da0000 [ 275.642169][ T6504] Call trace: [ 275.642971][ T6504] 0x0 [ 275.643668][ T6504] bq_xmit_all+0xd20/0x1140 [ 275.644842][ T6504] __dev_flush+0xc8/0x1a0 [ 275.645922][ T6504] xdp_do_flush+0x14/0x28 [ 275.647078][ T6504] tun_get_user+0x27d8/0x3774 [ 275.648294][ T6504] tun_chr_write_iter+0xfc/0x20c [ 275.649497][ T6504] vfs_write+0x884/0xb44 [ 275.650600][ T6504] ksys_write+0x15c/0x26c [ 275.651673][ T6504] __arm64_sys_write+0x7c/0x90 [ 275.652855][ T6504] invoke_syscall+0x98/0x2b8 [ 275.653961][ T6504] el0_svc_common+0x138/0x258 [ 275.655196][ T6504] do_el0_svc+0x58/0x14c [ 275.656311][ T6504] el0_svc+0x7c/0x1f0 [ 275.657337][ T6504] el0t_64_sync_handler+0x84/0xe4 [ 275.658565][ T6504] el0t_64_sync+0x1a0/0x1a4 [ 275.659704][ T6504] Code: bad PC value [ 275.660633][ T6504] ---[ end trace 0f2812431c2837fa ]--- [ 276.110918][ T6504] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 276.112850][ T6504] SMP: stopping secondary CPUs [ 276.113975][ T6504] Kernel Offset: disabled [ 276.115041][ T6504] CPU features: 0x8,000081c1,21302e40 [ 276.116270][ T6504] Memory Limit: none [ 276.504486][ T6504] Rebooting in 86400 seconds..