last executing test programs: 14.017307844s ago: executing program 2 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xc8) 11.596964819s ago: executing program 3 (id=378): io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000004000), 0x0, 0x2002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x0, 0x0) setresuid(0x0, 0xee01, 0xee00) syz_emit_vhci(0x0, 0xf) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1e0}, 0x3, 0x0, 0xffffffffffffffff, 0xf4}) shmctl$SHM_LOCK(r2, 0xb) 11.467291332s ago: executing program 2 (id=383): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) r3 = socket$inet(0xa, 0x1, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1edab5168510449b8a5", @ANYRES8, @ANYRES8, @ANYRES64=r3], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 11.326326433s ago: executing program 2 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x2}}) 9.580014579s ago: executing program 2 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x18000000000002a0, 0x33, 0x0, &(0x7f0000000700)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e099c8718cd7c81a759ec5d5", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.48785693s ago: executing program 0 (id=393): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) socket$inet6(0xa, 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x4b7f, &(0x7f00000005c0)={0x0, 0x9f00, 0x800, 0x0, 0x2ff}, 0x0, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000000, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.47798652s ago: executing program 2 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mlockall(0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mlockall(0x7) 7.381579192s ago: executing program 3 (id=396): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') sendfile(r0, r4, 0x0, 0x80000000) 7.381255272s ago: executing program 0 (id=397): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) 6.10815149s ago: executing program 0 (id=399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001540)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0x2}, {0x2, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x40840) 4.458995584s ago: executing program 2 (id=400): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r1, 0x4, r1}, 0x10) 4.409467495s ago: executing program 3 (id=401): socket$netlink(0x10, 0x3, 0x0) unshare(0x20000400) unshare(0x8000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0xffff, 0x0, 'lblc\x00', 0x1d, 0x1000, 0x4a}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 4.378106896s ago: executing program 1 (id=402): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 4.223025448s ago: executing program 1 (id=403): setitimer(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.1012184s ago: executing program 4 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aae0000002000000ee5b000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000010000100000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x2}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7ee643bd1282d893}}}, 0xf8}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x3, 0x0) 3.727474775s ago: executing program 3 (id=405): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd37697ff280d3c8e}, 0x4050) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.167141974s ago: executing program 1 (id=406): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x20, 0x9, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000d80)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) recvmmsg(r1, 0x0, 0x0, 0x12001, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084) 3.102658355s ago: executing program 4 (id=407): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x80084504, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000400)=@add_del={0x2, &(0x7f00000003c0)='pim6reg\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x50}, {0xb1, 0x0, 0x0, 0xbffff038}, {0x6}]}, 0x10) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="9d", 0x1}], 0x1}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 3.015320806s ago: executing program 1 (id=408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300090a0000000000000000000200030006000000000002000000ac1414bb00000000000000000200010000000000fd000504fefffc4b030005000000050002"], 0x50}}, 0x0) 3.011963136s ago: executing program 4 (id=409): getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) 2.842724808s ago: executing program 0 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 2.841752468s ago: executing program 4 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getresgid(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x40) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x3, 0x9, @remote, 0x6}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.750274204s ago: executing program 3 (id=412): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, 0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.750016774s ago: executing program 0 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000482, &(0x7f00000004c0)=ANY=[], 0x1, 0x224, &(0x7f0000000040)="$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") llistxattr(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) 1.749125574s ago: executing program 4 (id=414): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create1(0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x42, &(0x7f0000001bc0), 0x1, 0x604, &(0x7f0000000f40)="$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") 1.537182217s ago: executing program 1 (id=415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1.536852817s ago: executing program 3 (id=416): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket(0x400000000010, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) socket$kcm(0x1e, 0x1, 0x0) unshare(0x28020480) socket$nl_audit(0x10, 0x3, 0x9) pselect6(0x40, &(0x7f0000000240)={0x2b6b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) 399.098404ms ago: executing program 4 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 22.86715ms ago: executing program 1 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x6eafe621d11f40f8, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 0s ago: executing program 0 (id=419): syz_io_uring_setup(0x7b5b, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200004c, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x143, &(0x7f0000001580)="$eJzs0LFLAmEYx/Hf25VGZRoZ2JAFDR2JeZ7YFqGRIGQHRbugFwSakYu0NbT5J0hUQtPhEI0NZi2GB2L/RMtBUNBovPdeWFBD+/PZ3u/zvo94m2umDB8gQdgoFY+O9XJZzy/saJnU7s3t3STvbgCjP+br9v1mAniRgOYwYJ0CeQAPHmD/oKCv5EoFfrYSgAwgOS66AnF3jDe/aFGnyYtAa0Y09ZcWc5qLv/UO9vUvgSXepgb73gFUaqGG8bTdaafDy9dzEs7SoflphvPqtx7Uq2pqtj4RkLCnP14hyfi750g73I00jJ7ZyWxpGc2MqepqTIkqSrzH/3m8b38UjonfYc7RhUDQjbcT5wjDnlv3zAOgdfGhFb1uP4DXQx/QxV8TVqnlsoGRetbvG4Ik42s9IYQQQgghhBDyb58BAAD//8kVZzA=") mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0), 0x3200008, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000300)={[{@delalloc}, {@i_version}, {@oldalloc}, {@grpid}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@bsdgroups}, {@noquota}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x560, &(0x7f0000000bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): [ 15.914278][ T3967] eql: remember to turn off Van-Jacobson compression on your slave devices [ 15.952858][ T11] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 15.956772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. syzkaller login: [ 35.273059][ T4285] cgroup: Unknown subsys name 'net' [ 35.488981][ T4285] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.800042][ T4285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.900378][ T4306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.902690][ T4306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.905229][ T4306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.909823][ T4310] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.910752][ T4307] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.912163][ T4310] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.914722][ T4307] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.916902][ T4310] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.918262][ T4307] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.919989][ T4310] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.922150][ T4307] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.924713][ T4311] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.926447][ T4307] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.928496][ T4311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.930128][ T4307] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.931724][ T4311] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.933478][ T4307] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.936073][ T4311] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.937456][ T4307] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.939456][ T4311] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 36.940719][ T4307] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.942790][ T4311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.946017][ T4307] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.947810][ T4312] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.949178][ T4307] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.950509][ T4312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.952403][ T4307] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.956367][ T4307] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.958473][ T4307] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.960086][ T4310] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.237286][ T4304] chnl_net:caif_netlink_parms(): no params data found [ 37.258124][ T4296] chnl_net:caif_netlink_parms(): no params data found [ 37.268565][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 37.292098][ T4300] chnl_net:caif_netlink_parms(): no params data found [ 37.333660][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.336719][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.339200][ T4304] device bridge_slave_0 entered promiscuous mode [ 37.359763][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.361669][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.364450][ T4304] device bridge_slave_1 entered promiscuous mode [ 37.399445][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.401549][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.404299][ T4296] device bridge_slave_0 entered promiscuous mode [ 37.418239][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.420121][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.422571][ T4295] device bridge_slave_0 entered promiscuous mode [ 37.425297][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.427226][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.430813][ T4296] device bridge_slave_1 entered promiscuous mode [ 37.443128][ T4304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.448088][ T4304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.450689][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.452664][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.455219][ T4295] device bridge_slave_1 entered promiscuous mode [ 37.461746][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.463727][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.466424][ T4300] device bridge_slave_0 entered promiscuous mode [ 37.483375][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.485784][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.488163][ T4300] device bridge_slave_1 entered promiscuous mode [ 37.507407][ T4296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.509912][ T4308] chnl_net:caif_netlink_parms(): no params data found [ 37.518888][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.522699][ T4304] team0: Port device team_slave_0 added [ 37.526044][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.531865][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.535530][ T4296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.539047][ T4304] team0: Port device team_slave_1 added [ 37.542618][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.575655][ T4295] team0: Port device team_slave_0 added [ 37.592911][ T4296] team0: Port device team_slave_0 added [ 37.599882][ T4295] team0: Port device team_slave_1 added [ 37.609988][ T4300] team0: Port device team_slave_0 added [ 37.612568][ T4296] team0: Port device team_slave_1 added [ 37.614977][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.616846][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.623648][ T4304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.628256][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.630125][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.637627][ T4304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.652947][ T4300] team0: Port device team_slave_1 added [ 37.683527][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.685605][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.692551][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.699249][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.701125][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.708265][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.716067][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.717916][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.725224][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.729204][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.731081][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.738560][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.742176][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.744473][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.751294][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.766567][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.768588][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.771128][ T4308] device bridge_slave_0 entered promiscuous mode [ 37.776653][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.778584][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.785396][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.796070][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.798346][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.800978][ T4308] device bridge_slave_1 entered promiscuous mode [ 37.865822][ T4304] device hsr_slave_0 entered promiscuous mode [ 37.924174][ T4304] device hsr_slave_1 entered promiscuous mode [ 38.025719][ T4300] device hsr_slave_0 entered promiscuous mode [ 38.075029][ T4300] device hsr_slave_1 entered promiscuous mode [ 38.114077][ T4300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.116187][ T4300] Cannot create hsr debugfs directory [ 38.132817][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.136891][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.175518][ T4296] device hsr_slave_0 entered promiscuous mode [ 38.214209][ T4296] device hsr_slave_1 entered promiscuous mode [ 38.264124][ T4296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.266302][ T4296] Cannot create hsr debugfs directory [ 38.295533][ T4295] device hsr_slave_0 entered promiscuous mode [ 38.334133][ T4295] device hsr_slave_1 entered promiscuous mode [ 38.393903][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.395886][ T4295] Cannot create hsr debugfs directory [ 38.437461][ T4308] team0: Port device team_slave_0 added [ 38.440816][ T4308] team0: Port device team_slave_1 added [ 38.486009][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.487852][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.494866][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.500352][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.502227][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.509311][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.635568][ T4308] device hsr_slave_0 entered promiscuous mode [ 38.684280][ T4308] device hsr_slave_1 entered promiscuous mode [ 38.723979][ T4308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.726071][ T4308] Cannot create hsr debugfs directory [ 38.842230][ T4304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.889152][ T4304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.928135][ T4304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.968165][ T4304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.984428][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 38.986225][ T47] Bluetooth: hci2: command 0x0409 tx timeout [ 38.987372][ T4307] Bluetooth: hci3: command 0x0409 tx timeout [ 38.987992][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 39.023174][ T4296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.068948][ T4296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.073964][ T4312] Bluetooth: hci0: command 0x0409 tx timeout [ 39.109890][ T4296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.148581][ T4296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.188532][ T4295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.233540][ T4295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.276566][ T4295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.344258][ T4295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.419122][ T4300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.455739][ T4300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.508998][ T4300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.547114][ T4300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.589476][ T4304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.625025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.628204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.656298][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.662812][ T4308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.677356][ T4308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.724173][ T4308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.755877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.758475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.761418][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.763402][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.767931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.777546][ T4308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.846307][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.849305][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.851694][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.853580][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.866467][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.869305][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.878566][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.886404][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.889052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.892096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.895455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.909417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.912170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.925938][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.929263][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.932199][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.946800][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.949252][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.951931][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.954461][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.960817][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.966458][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.968989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.973708][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.982108][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.988174][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.990541][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.993038][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.001798][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.004693][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.006599][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.021300][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.027150][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.029587][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.032696][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.037960][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.039885][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.042084][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.045894][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.048667][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.050553][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.052838][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.062581][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.065988][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.068563][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.070441][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.072619][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.079013][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.082071][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.092046][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.096241][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.098100][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.111526][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.114715][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.117377][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.120464][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.131898][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.135205][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.137961][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.140692][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.143177][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.146228][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.148715][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.150648][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.160223][ T4296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.163001][ T4296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.171958][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.175212][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.177885][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.180411][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.182881][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.186257][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.188758][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.191227][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.203605][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.208225][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.210791][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.213732][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.216918][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.239246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.242026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.249339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.251392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.255696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.260224][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.275728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.278197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.280694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.283145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.287556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.291957][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.302749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.306048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.314769][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.345224][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.347437][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.350073][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.352700][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.357020][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.368464][ T4295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.372029][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.376705][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.379145][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.389705][ T4304] device veth0_vlan entered promiscuous mode [ 40.399122][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.401295][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.405289][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.408493][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.410612][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.428814][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.431292][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.441395][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.445071][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.447536][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.449471][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.451672][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.460266][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.462731][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.464625][ T4358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.468155][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.476441][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.481760][ T4304] device veth1_vlan entered promiscuous mode [ 40.499355][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.502355][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.509671][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.511779][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.526563][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.529323][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.532542][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.537538][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.540502][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.543135][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.546376][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.552089][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.567995][ T4308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.571444][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.575422][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.578728][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.581341][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.584216][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.586822][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.589382][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.592062][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.599520][ T4304] device veth0_macvtap entered promiscuous mode [ 40.612144][ T4304] device veth1_macvtap entered promiscuous mode [ 40.620166][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.622736][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.626295][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.634295][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.660768][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.663165][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.666535][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.671388][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.691910][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.698806][ T4300] device veth0_vlan entered promiscuous mode [ 40.702265][ T4296] device veth0_vlan entered promiscuous mode [ 40.709671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.712296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.715613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.718680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.728863][ T4296] device veth1_vlan entered promiscuous mode [ 40.734462][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.736675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.739295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.742391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.755594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.758906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.762403][ T4300] device veth1_vlan entered promiscuous mode [ 40.772051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.780008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.782098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.795155][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.802594][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.806267][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.810236][ T4304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.812548][ T4304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.816228][ T4304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.818649][ T4304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.823492][ T4296] device veth0_macvtap entered promiscuous mode [ 40.832171][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.835363][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.837336][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.849940][ T4296] device veth1_macvtap entered promiscuous mode [ 40.858450][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.860988][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.863459][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.868520][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.873530][ T4300] device veth0_macvtap entered promiscuous mode [ 40.879135][ T4300] device veth1_macvtap entered promiscuous mode [ 40.888096][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.891420][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.935957][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.938761][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.944410][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.948367][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.954875][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.957435][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.960141][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.966371][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.968830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.971254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.973714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.977038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.979751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.982479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.009837][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.012688][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.018765][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.021055][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.026123][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.028765][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.031652][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.036087][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.043294][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.046822][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.049538][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.052601][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.056064][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.058739][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.063624][ T4296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.064011][ T4312] Bluetooth: hci3: command 0x041b tx timeout [ 41.066599][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 41.067831][ T4307] Bluetooth: hci1: command 0x041b tx timeout [ 41.069292][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 41.073224][ T4296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.076431][ T4296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.078685][ T4296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.083358][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.095329][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.095792][ T4300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.099712][ T4300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.102004][ T4300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.108927][ T4300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.112970][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.145104][ T4307] Bluetooth: hci0: command 0x041b tx timeout [ 41.158970][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.161824][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.173677][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.176011][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.183714][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.193666][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.196658][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.208201][ T4295] device veth0_vlan entered promiscuous mode [ 41.242055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.245842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.283574][ T4295] device veth1_vlan entered promiscuous mode [ 41.301873][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.305314][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.308425][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.311034][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.313507][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.337415][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.339534][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.351419][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.352141][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 41.354119][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.365298][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.368600][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.372693][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.380711][ T4308] device veth0_vlan entered promiscuous mode [ 41.408694][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.410996][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.414263][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.422392][ T4308] device veth1_vlan entered promiscuous mode [ 41.436630][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.447305][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.459442][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.481270][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.485706][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.502648][ T4295] device veth0_macvtap entered promiscuous mode [ 41.513305][ T4295] device veth1_macvtap entered promiscuous mode [ 41.522671][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.525955][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.528461][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.531545][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.544666][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.547427][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.553382][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.567189][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.569970][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.572602][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.577849][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.580428][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.583148][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.590342][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.611954][ T4295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.614491][ T4295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.616759][ T4295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.619216][ T4295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.634648][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.637256][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.639798][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.642187][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.647530][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.650211][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.653173][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.545257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.548089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.594707][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.596959][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.627029][ T4308] device veth0_macvtap entered promiscuous mode [ 42.631706][ T4308] device veth1_macvtap entered promiscuous mode [ 42.660692][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.663123][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.669445][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.674970][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.844109][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.847953][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.548612][ T4307] Bluetooth: hci3: command 0x040f tx timeout [ 43.550974][ T4307] Bluetooth: hci1: command 0x040f tx timeout [ 43.553117][ T4307] Bluetooth: hci2: command 0x040f tx timeout [ 43.555833][ T4307] Bluetooth: hci0: command 0x040f tx timeout [ 43.971956][ T4394] loop1: detected capacity change from 0 to 32768 [ 43.987975][ T4297] Bluetooth: hci4: command 0x040f tx timeout [ 44.052282][ T4394] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2 (4394) [ 44.095582][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.105530][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.108238][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.111049][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.126376][ T4394] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 44.129299][ T4394] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 44.131842][ T4394] BTRFS info (device loop1): using free space tree [ 44.157859][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.173296][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.188661][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.191454][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.229584][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.073332][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.085699][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.088310][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.234330][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.238923][ T39] wlan1: Trigger new scan to find an IBSS to join [ 45.241521][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.349524][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.352501][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.392888][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.419697][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.421866][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.425370][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.428057][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.430720][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.480164][ T4394] BTRFS info (device loop1): enabling ssd optimizations [ 45.635505][ T4308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.637875][ T4308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.640181][ T4308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.642429][ T4308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.645443][ T4307] Bluetooth: hci0: command 0x0419 tx timeout [ 45.645903][ T4297] Bluetooth: hci2: command 0x0419 tx timeout [ 45.647702][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 45.648703][ T4312] Bluetooth: hci3: command 0x0419 tx timeout [ 46.024830][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 46.528744][ T4296] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 46.606033][ T4444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15'. [ 46.646241][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 46.681701][ T4448] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17'. [ 46.714283][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.716474][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.720440][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.750192][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.752732][ T4458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.752883][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.756507][ T4458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.777031][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.808164][ T4458] loop1: detected capacity change from 0 to 512 [ 46.826000][ T4460] loop0: detected capacity change from 0 to 512 [ 46.845040][ T4458] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.880092][ T4460] EXT2-fs (loop0): error: revision level too high, forcing read-only mode [ 46.882584][ T4460] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=a00a8] [ 47.248724][ T4473] xt_recent: hitcount (768) is larger than allowed maximum (255) [ 49.329445][ T4358] wlan1: Trigger new scan to find an IBSS to join [ 49.408198][ T4458] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 49.411187][ T4458] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.640149][ T4484] loop3: detected capacity change from 0 to 8 [ 49.659756][ T4484] SQUASHFS error: zlib decompression failed, data probably corrupt [ 49.667931][ T4484] SQUASHFS error: Failed to read block 0x9b: -5 [ 51.015170][ T4484] SQUASHFS error: Unable to read metadata cache entry [99] [ 51.017186][ T4484] SQUASHFS error: Unable to read inode 0x127 [ 51.036316][ T4469] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 51.051175][ T4469] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 51.177624][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 51.210150][ T4493] loop3: detected capacity change from 0 to 2048 [ 51.265149][ T4493] loop3: p2 p3 < > p4 < p5 > [ 51.266598][ T4493] loop3: partition table partially beyond EOD, truncated [ 51.274822][ T4493] loop3: p3 start 4284289 is beyond EOD, truncated [ 51.325357][ T3912] loop3: p2 p3 < > p4 < p5 > [ 51.326999][ T3912] loop3: partition table partially beyond EOD, truncated [ 51.331437][ T3912] loop3: p3 start 4284289 is beyond EOD, truncated [ 51.436944][ T4507] loop0: detected capacity change from 0 to 2048 [ 51.510524][ T4512] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.559055][ T4514] binder: 4513:4514 tried to acquire reference to desc 0, got 1 instead [ 51.573676][ T4507] syz.0.28 sent an empty control message without MSG_MORE. [ 51.575230][ T4514] binder: 4513:4514 ioctl c0306201 20000280 returned -14 [ 51.599173][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 51.600881][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 51.667072][ T4454] binder: undelivered transaction 6, process died. [ 51.669313][ T4454] binder: undelivered transaction 5, process died. [ 51.724666][ T4384] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 51.728389][ T4522] trusted_key: encrypted_key: insufficient parameters specified [ 51.777173][ T4346] kernel write not supported for file bpf-prog (pid: 4346 comm: kworker/1:5) [ 51.988832][ T4537] loop2: detected capacity change from 0 to 128 [ 52.019874][ T4537] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.047872][ T4526] udevd[4526]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 52.850011][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 52.875989][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 52.887278][ T4526] udevd[4526]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 52.901604][ T4511] udevd[4511]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 52.921883][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 53.770909][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 55.295988][ T4629] loop0: detected capacity change from 0 to 128 [ 55.332375][ T4629] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.542611][ T4637] loop2: detected capacity change from 0 to 4096 [ 55.596073][ T4637] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 58.217041][ T4637] ntfs3: loop2: Failed to load $Secure. [ 58.302447][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 58.636398][ T4668] lo speed is unknown, defaulting to 1000 [ 58.639519][ T4668] lo speed is unknown, defaulting to 1000 [ 58.655751][ T4668] lo speed is unknown, defaulting to 1000 [ 58.709832][ T4670] netlink: 'syz.1.55': attribute type 1 has an invalid length. [ 58.732123][ T4670] device ip6erspan0 entered promiscuous mode [ 58.788963][ T4671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.55'. [ 58.858683][ T4668] infiniband sz1: set active [ 58.860276][ T4668] infiniband sz1: added lo [ 58.868668][ T4673] loop2: detected capacity change from 0 to 1024 [ 58.886132][ T4673] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 58.888861][ T4673] EXT4-fs (loop2): orphan cleanup on readonly fs [ 58.938898][ T4671] device wg1 entered promiscuous mode [ 58.949458][ T4377] lo speed is unknown, defaulting to 1000 [ 58.964181][ T4673] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.56: Freeing blocks not in datazone - block = 0, count = 4096 [ 58.990442][ T4668] RDS/IB: sz1: added [ 58.994810][ T4668] smc: adding ib device sz1 with port count 1 [ 58.996676][ T4668] smc: ib device sz1 port 1 has pnetid [ 59.021175][ T4377] lo speed is unknown, defaulting to 1000 [ 59.026008][ T4668] lo speed is unknown, defaulting to 1000 [ 59.040398][ T4673] EXT4-fs (loop2): 1 orphan inode deleted [ 59.041921][ T4673] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 59.087665][ T4658] loop0: detected capacity change from 0 to 1024 [ 59.090043][ T4658] ext3: Unknown parameter 'subj_user' [ 59.145513][ T4526] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.335093][ T4668] lo speed is unknown, defaulting to 1000 [ 59.354555][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 59.577670][ T4681] loop1: detected capacity change from 0 to 512 [ 59.703426][ T4681] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 60.076495][ T4681] EXT4-fs (loop1): 1 orphan inode deleted [ 60.078381][ T4681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 60.423807][ C0] sched: RT throttling activated [ 60.435792][ T4614] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 60.438689][ T4614] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:21: Failed to release dquot type 1 [ 60.675101][ T4668] lo speed is unknown, defaulting to 1000 [ 60.739613][ T4686] overlayfs: failed to resolve './file0': -2 [ 61.423851][ T4312] Bluetooth: hci2: command 0x201b tx timeout [ 61.457499][ T4668] lo speed is unknown, defaulting to 1000 [ 61.886685][ T4668] lo speed is unknown, defaulting to 1000 [ 62.236269][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 63.055194][ T4697] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 63.306829][ T4697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.62'. [ 64.694262][ T4715] loop3: detected capacity change from 0 to 1024 [ 64.982817][ T4716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.575352][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.579868][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.608731][ T4715] hfsplus: request for non-existent node 65536 in B*Tree [ 65.611040][ T4715] hfsplus: request for non-existent node 65536 in B*Tree [ 65.613262][ T4715] hfsplus: failed to load root directory [ 67.244033][ T4446] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.081511][ T4730] loop2: detected capacity change from 0 to 256 [ 68.134026][ T4731] tipc: Failed to remove unknown binding: 66,1,1/0:1501596889/1501596891 [ 68.143385][ T4731] tipc: Failed to remove unknown binding: 66,1,1/0:1501596889/1501596891 [ 68.156743][ T4730] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 68.224091][ T4731] tipc: Failed to remove unknown binding: 66,1,1/0:1501596889/1501596891 [ 68.386899][ T4730] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 69.083086][ T4743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.134651][ T4743] device batadv_slave_0 entered promiscuous mode [ 69.230635][ T4751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 70.175013][ T1515] cfg80211: failed to load regulatory.db [ 70.245291][ T4755] loop2: detected capacity change from 0 to 128 [ 70.423440][ T4763] loop0: detected capacity change from 0 to 512 [ 70.443411][ T4763] EXT4-fs: inline encryption not supported [ 70.484518][ T4766] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 70.510088][ T4763] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.84: inode #1: comm syz.0.84: iget: illegal inode # [ 70.529007][ T4763] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.84: error while reading EA inode 1 err=-117 [ 70.533317][ T4763] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.570232][ T4763] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.84: inode #1: comm syz.0.84: iget: illegal inode # [ 70.588412][ T4763] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.84: error while reading EA inode 1 err=-117 [ 70.594873][ T4763] EXT4-fs (loop0): 1 orphan inode deleted [ 70.602826][ T4763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.531279][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 73.438736][ T4810] loop2: detected capacity change from 0 to 64 [ 73.550412][ T4810] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop2 [ 73.554608][ T4812] binder: 4811:4812 tried to acquire reference to desc 0, got 1 instead [ 73.557389][ T4812] binder: 4811:4812 ioctl c0306201 200003c0 returned -14 [ 73.560439][ T4812] binder: 4811:4812 got transaction with invalid data ptr [ 73.563099][ T4812] binder: 4811:4812 transaction call to 4811:0 failed 11/29201/-14, size 0-24 line 3342 [ 73.594207][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.903270][ T4805] : renamed from vlan0 [ 77.632728][ T4848] binder: 4847:4848 tried to acquire reference to desc 0, got 1 instead [ 77.637428][ T4848] binder: 4847:4848 got reply transaction with bad transaction stack, transaction 16 has target 4847:0 [ 77.640682][ T4848] binder: 4847:4848 transaction reply to 0:0 failed 17/29201/-71, size 0-0 line 2970 [ 77.673484][ T7] binder: release 4847:4848 transaction 16 out, still active [ 77.676435][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.720113][ T7] binder: send failed reply for transaction 16, target dead [ 77.829711][ T4853] loop1: detected capacity change from 0 to 2048 [ 77.914517][ T4853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 78.326394][ T4843] loop0: detected capacity change from 0 to 40427 [ 78.355995][ T4843] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 78.358942][ T4843] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 78.368419][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 78.809889][ T4843] F2FS-fs (loop0): Found nat_bits in checkpoint [ 79.305466][ T4843] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 79.307660][ T4843] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.728817][ T4604] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 81.865875][ T4297] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 81.869027][ T4297] Bluetooth: hci1: Injecting HCI hardware error event [ 81.884181][ T4312] Bluetooth: hci1: hardware error 0x00 [ 83.798461][ T4921] loop0: detected capacity change from 0 to 1024 [ 83.825302][ T4921] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 83.828087][ T4921] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.842520][ T4921] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.127: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.876655][ T4921] EXT4-fs (loop0): 1 orphan inode deleted [ 83.878334][ T4921] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.945358][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 83.993046][ T4927] loop3: detected capacity change from 0 to 128 [ 84.019901][ T4927] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.085627][ T4927] process 'syz.3.129' launched '/dev/fd/3' with NULL argv: empty string added [ 84.989295][ T4944] loop4: detected capacity change from 0 to 512 [ 84.992127][ T4944] EXT4-fs: Ignoring removed i_version option [ 84.995572][ T4938] loop1: detected capacity change from 0 to 8192 [ 85.009981][ T4304] EXT4-fs (loop3): unmounting filesystem. [ 85.044887][ T4944] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.069939][ T4944] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.072484][ T4944] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 85.108782][ T4944] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.112842][ T4944] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 85.116728][ T4939] loop2: detected capacity change from 0 to 1024 [ 85.120428][ T4939] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 85.151147][ T4944] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 85.173892][ T4944] EXT4-fs (loop4): Remounting filesystem read-only [ 85.179729][ T4944] EXT4-fs (loop4): 1 truncate cleaned up [ 85.181284][ T4944] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 85.231870][ T4944] EXT4-fs warning (device loop4): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 85.413438][ T4308] EXT4-fs (loop4): unmounting filesystem. [ 85.704140][ T4312] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 86.226050][ T4961] loop4: detected capacity change from 0 to 8 [ 86.604712][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.616686][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.619844][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.681631][ T4969] loop2: detected capacity change from 0 to 8192 [ 87.262416][ T4971] loop3: detected capacity change from 0 to 1024 [ 87.317402][ T4971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.466499][ T4977] mmap: syz.4.145 (4977) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.521024][ T4977] loop4: detected capacity change from 0 to 256 [ 87.538243][ T4977] exfat: Deprecated parameter 'namecase' [ 87.556793][ T4977] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 92.451559][ T5010] netlink: 'syz.2.155': attribute type 1 has an invalid length. [ 93.326510][ T5014] loop1: detected capacity change from 0 to 512 [ 93.495966][ T5021] binder: 5020:5021 tried to acquire reference to desc 0, got 1 instead [ 93.514041][ T5019] netlink: 'syz.2.155': attribute type 1 has an invalid length. [ 93.525342][ T4445] binder: release 5020:5021 transaction 22 out, still active [ 93.527275][ T4445] binder: undelivered TRANSACTION_COMPLETE [ 93.545101][ T4445] binder: send failed reply for transaction 22, target dead [ 93.547844][ T5014] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.156: attempt to clear invalid blocks 1 len 1 [ 93.554894][ T5014] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.156: bg 0: block 343: padding at end of block bitmap is not set [ 93.558986][ T5014] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 93.561694][ T5014] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.156: invalid indirect mapped block 1819239214 (level 0) [ 93.566407][ T5014] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.156: invalid indirect mapped block 1819239214 (level 1) [ 93.572266][ T5014] EXT4-fs (loop1): 1 truncate cleaned up [ 93.573837][ T5014] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.679965][ T5029] binder: 5028:5029 tried to acquire reference to desc 0, got 1 instead [ 93.701964][ T5026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.159'. [ 93.704255][ T4455] binder: release 5028:5029 transaction 34 out, still active [ 93.706951][ T4455] binder: undelivered TRANSACTION_COMPLETE [ 93.708540][ T4455] binder: undelivered TRANSACTION_COMPLETE [ 93.742480][ T4455] binder: undelivered transaction 33, process died. [ 93.744399][ T4455] binder: send failed reply for transaction 34, target dead [ 94.517343][ T5039] loop2: detected capacity change from 0 to 16 [ 94.517890][ T5039] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 95.239011][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 95.285060][ T5036] loop3: detected capacity change from 0 to 128 [ 95.698557][ T5052] capability: warning: `syz.1.163' uses deprecated v2 capabilities in a way that may be insecure [ 97.441761][ T5036] syz.3.165: attempt to access beyond end of device [ 97.441761][ T5036] loop3: rw=2049, sector=145, nr_sectors = 800 limit=128 [ 97.782140][ T5036] syz.3.165: attempt to access beyond end of device [ 97.782140][ T5036] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 97.809969][ T5036] syz.3.165: attempt to access beyond end of device [ 97.809969][ T5036] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 97.818489][ T5036] syz.3.165: attempt to access beyond end of device [ 97.818489][ T5036] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 97.839369][ T5036] syz.3.165: attempt to access beyond end of device [ 97.839369][ T5036] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 97.873667][ T5036] syz.3.165: attempt to access beyond end of device [ 97.873667][ T5036] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 100.520515][ T4312] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 100.523111][ T4312] Bluetooth: hci4: Injecting HCI hardware error event [ 100.526699][ T4312] Bluetooth: hci4: hardware error 0x00 [ 101.605020][ T5106] loop0: detected capacity change from 0 to 256 [ 101.624118][ T5106] ======================================================= [ 101.624118][ T5106] WARNING: The mand mount option has been deprecated and [ 101.624118][ T5106] and is ignored by this kernel. Remove the mand [ 101.624118][ T5106] option from the mount to silence this warning. [ 101.624118][ T5106] ======================================================= [ 101.988694][ T5106] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.991639][ T5106] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 102.047274][ T5106] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 102.609342][ T5111] MPTCP: kernel_bind error, err=-98 [ 103.321745][ T4312] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 107.520800][ T5137] Zero length message leads to an empty skb [ 110.873237][ T5184] loop0: detected capacity change from 0 to 512 [ 110.915549][ T5184] EXT4-fs: Ignoring removed oldalloc option [ 110.931902][ T5184] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.085166][ T5194] binder: 5193:5194 tried to acquire reference to desc 0, got 1 instead [ 111.088589][ T5194] binder: 5193:5194 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 111.092066][ T5194] binder: 5194 RLIMIT_NICE not set [ 111.097123][ T5194] binder: 5194 RLIMIT_NICE not set [ 111.101373][ T5184] EXT4-fs (loop0): 1 truncate cleaned up [ 111.103189][ T5184] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 111.106781][ T7] binder: release 5193:5194 transaction 39 out, still active [ 111.108804][ T7] binder: undelivered TRANSACTION_COMPLETE [ 111.124726][ T5198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.127239][ T5198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.140996][ T4455] binder: release 5193:5194 transaction 39 in, still active [ 111.143005][ T4455] binder: send failed reply for transaction 39, target dead [ 111.200592][ T5201] syz.2.211 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.756361][ T5212] binder: 5210:5212 tried to acquire reference to desc 0, got 1 instead [ 111.779139][ T5212] binder_alloc: 5210: pid 5210 spamming oneway? 2 buffers allocated for a total size of 5120 [ 111.788500][ T5212] binder_alloc: 5210: pid 5210 spamming oneway? 3 buffers allocated for a total size of 5128 [ 111.791894][ T5212] binder: 5210:5212 BC_FREE_BUFFER u0000000020ffd000 matched unreturned or currently freeing buffer [ 111.808631][ T4445] binder: undelivered TRANSACTION_COMPLETE [ 111.810353][ T4445] binder: undelivered TRANSACTION_COMPLETE [ 111.811989][ T4445] binder: undelivered TRANSACTION_COMPLETE [ 111.848264][ T4445] binder: undelivered transaction 45, process died. [ 111.850171][ T4445] binder: undelivered transaction 46, process died. [ 111.852088][ T4445] binder: undelivered transaction 44, process died. [ 112.059295][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.063364][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.066415][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.069729][ T5225] device bridge_slave_0 left promiscuous mode [ 112.072875][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.896617][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 112.909204][ T5225] device bridge_slave_1 left promiscuous mode [ 112.911016][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.993312][ T5236] loop3: detected capacity change from 0 to 512 [ 112.998342][ T5225] bond0: (slave bond_slave_0): Releasing backup interface [ 113.026548][ T5236] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 114.560562][ T4556] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 114.891337][ T5225] bond0: (slave bond_slave_1): Releasing backup interface [ 114.985440][ T5225] team0: Port device team_slave_0 removed [ 114.998529][ T5225] team0: Port device team_slave_1 removed [ 115.011944][ T5225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.014177][ T5225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.027474][ T5225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.029554][ T5225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.078970][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.083012][ T5229] team0: Port device bond0 added [ 116.269009][ T4297] Bluetooth: hci5: command 0x1003 tx timeout [ 116.271182][ T4312] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 117.019773][ T5248] loop0: detected capacity change from 0 to 32768 [ 117.062105][ T5248] XFS (loop0): Mounting V5 Filesystem [ 117.108193][ T5248] XFS (loop0): Ending clean mount [ 117.181982][ T5300] loop1: detected capacity change from 0 to 8 [ 118.078510][ T4300] XFS (loop0): Unmounting Filesystem [ 119.227527][ T5321] loop3: detected capacity change from 0 to 128 [ 119.281280][ T5321] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.277059][ T4304] EXT4-fs (loop3): unmounting filesystem. [ 120.325926][ T5338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.346941][ T5338] device batadv_slave_0 entered promiscuous mode [ 121.675806][ T5364] lo speed is unknown, defaulting to 1000 [ 121.678080][ T5364] lo speed is unknown, defaulting to 1000 [ 121.685956][ T5364] lo speed is unknown, defaulting to 1000 [ 121.699837][ T5364] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.721841][ T5364] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 121.846516][ T5364] lo speed is unknown, defaulting to 1000 [ 121.853265][ T5364] lo speed is unknown, defaulting to 1000 [ 121.860229][ T5364] lo speed is unknown, defaulting to 1000 [ 121.865943][ T5364] lo speed is unknown, defaulting to 1000 [ 121.871975][ T5364] lo speed is unknown, defaulting to 1000 [ 124.479132][ T5400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.254'. [ 125.621228][ T5410] loop0: detected capacity change from 0 to 8 [ 126.168325][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.170134][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.983204][ T5427] loop0: detected capacity change from 0 to 512 [ 127.000990][ T5427] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 127.004103][ T5427] EXT2-fs (loop0): error: couldn't mount RDWR because of unsupported optional features (1000000) [ 127.301966][ T5434] loop2: detected capacity change from 0 to 512 [ 127.334400][ T5434] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.336333][ T5434] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.411115][ T5434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 127.419653][ T5436] netlink: 96 bytes leftover after parsing attributes in process `syz.0.262'. [ 127.966601][ T5445] loop3: detected capacity change from 0 to 256 [ 128.538238][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 129.435941][ T5471] tipc: Started in network mode [ 129.452278][ T5471] tipc: Node identity ac1414aa, cluster identity 4711 [ 129.484520][ T5471] tipc: Enabled bearer , priority 10 [ 130.236083][ T5471] tipc: Enabled bearer , priority 0 [ 130.504652][ T5490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.275'. [ 130.585176][ T5493] tipc: Enabled bearer , priority 0 [ 130.588106][ T5493] device syzkaller0 entered promiscuous mode [ 130.601670][ T5493] tipc: Resetting bearer [ 130.694475][ T5492] tipc: Resetting bearer [ 130.718870][ T5496] binder: 5495:5496 tried to acquire reference to desc 0, got 1 instead [ 130.734865][ T5496] binder: 5495:5496 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 130.739033][ T5496] binder: 5496 RLIMIT_NICE not set [ 130.740382][ T5496] binder: 5496 RLIMIT_NICE not set [ 130.758000][ T5496] binder: release 5495:5496 transaction 51 in, still active [ 130.759978][ T5496] binder: send failed reply for transaction 51 to 5495:5496 [ 130.767998][ T5496] binder: 5495:5496 got reply transaction with no transaction stack [ 130.770182][ T5496] binder: 5495:5496 transaction reply to 0:0 failed 52/29201/-71, size 0-0 line 2955 [ 130.773431][ T4425] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.763458][ T4455] tipc: Node number set to 2886997162 [ 131.809272][ T4312] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 131.813709][ T4312] Bluetooth: hci2: Injecting HCI hardware error event [ 131.821090][ T4297] Bluetooth: hci2: hardware error 0x00 [ 132.445821][ T5492] tipc: Disabling bearer [ 132.572986][ T27] audit: type=1326 audit(132.595:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe35a7a8 code=0x7ffc0000 [ 132.599412][ T27] audit: type=1326 audit(132.625:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbe35a7a8 code=0x7ffc0000 [ 132.634256][ T27] audit: type=1326 audit(132.635:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe35a7a8 code=0x7ffc0000 [ 132.778236][ T27] audit: type=1326 audit(132.645:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbe35a7a8 code=0x7ffc0000 [ 133.612219][ T27] audit: type=1326 audit(132.655:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe35a7a8 code=0x7ffc0000 [ 134.030202][ T27] audit: type=1326 audit(132.655:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe35a7a8 code=0x7ffc0000 [ 134.059235][ T27] audit: type=1326 audit(132.655:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbe35a7a8 code=0x7ffc0000 [ 134.266163][ T27] audit: type=1326 audit(132.655:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe35a7a8 code=0x7ffc0000 [ 134.272603][ T27] audit: type=1326 audit(132.655:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe35a7a8 code=0x7ffc0000 [ 134.280852][ T27] audit: type=1326 audit(132.655:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=138 compat=0 ip=0xffffbe35a7a8 code=0x7ffc0000 [ 134.332377][ T5523] xt_nat: multiple ranges no longer supported [ 136.309344][ T4297] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 136.451181][ T5534] loop0: detected capacity change from 0 to 1024 [ 136.477026][ T5534] EXT4-fs: Ignoring removed nobh option [ 136.478556][ T5534] EXT4-fs: Ignoring removed bh option [ 136.638802][ T5534] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.714323][ T5534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 136.726800][ T5541] netlink: 'syz.4.289': attribute type 1 has an invalid length. [ 136.813829][ T5544] siw: device registration error -23 [ 137.630216][ T5546] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.632587][ T5546] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.650418][ T5546] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.693963][ T5546] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.711958][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 137.741070][ T5546] bond1: (slave geneve2): making interface the new active one [ 137.763182][ T5546] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 137.781705][ T5548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.788049][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 137.792862][ T5552] tmpfs: Unknown parameter 'nolazytime' [ 137.808804][ T5554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 137.878203][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 141.658877][ T5587] batman_adv: batadv0: Adding interface: ip6gretap1 [ 141.660702][ T5587] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.682157][ T5587] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 141.706950][ T5585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.731219][ T5585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.733398][ T5585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.739200][ T5585] batman_adv: batadv0: Removing interface: ip6gretap1 [ 141.903188][ T5597] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 141.975852][ T5594] infiniband sz1: set active [ 142.650277][ T4345] lo speed is unknown, defaulting to 1000 [ 142.693935][ T5601] lo speed is unknown, defaulting to 1000 [ 142.739828][ T5604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 142.742266][ T5604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 142.838843][ T5601] lo speed is unknown, defaulting to 1000 [ 142.842922][ T5606] loop0: detected capacity change from 0 to 512 [ 142.873426][ T5606] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.882887][ T5606] EXT4-fs: Ignoring removed bh option [ 142.905772][ T5606] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.908826][ T5606] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.920079][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 142.948486][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 142.976313][ T5606] EXT4-fs (loop0): 1 truncate cleaned up [ 142.977967][ T5606] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 143.105166][ T5618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 143.119116][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 143.195153][ T5626] netlink: 'syz.1.317': attribute type 1 has an invalid length. [ 143.242684][ T5626] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 143.258697][ T5626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.290247][ T11] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 143.295528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 143.407974][ T4609] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 143.573530][ T5632] netlink: 156 bytes leftover after parsing attributes in process `syz.3.319'. [ 144.365798][ T5645] batman_adv: batadv0: Adding interface: ip6gretap1 [ 144.367782][ T5645] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.395900][ T5645] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 144.408527][ T5645] batman_adv: batadv0: Removing interface: ip6gretap1 [ 145.589502][ T5662] loop2: detected capacity change from 0 to 512 [ 145.674233][ T5662] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.329: casefold flag without casefold feature [ 145.687011][ T5662] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.329: couldn't read orphan inode 15 (err -117) [ 145.721052][ T5662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 145.817091][ T5669] loop3: detected capacity change from 0 to 512 [ 145.826966][ T5669] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 145.833924][ T5669] EXT2-fs (loop3): error: couldn't mount RDWR because of unsupported optional features (1000000) [ 146.868276][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 146.980556][ T4295] EXT4-fs (loop2): unmounting filesystem. [ 148.292495][ T5691] Bluetooth: MGMT ver 1.22 [ 148.400353][ T5689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.335'. [ 148.414813][ T5694] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 148.417406][ T5694] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 149.268019][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 149.487187][ T5713] lo speed is unknown, defaulting to 1000 [ 149.525181][ T5713] lo speed is unknown, defaulting to 1000 [ 149.612615][ T5717] loop3: detected capacity change from 0 to 512 [ 149.617905][ T5717] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.345: casefold flag without casefold feature [ 149.621722][ T5717] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.345: couldn't read orphan inode 15 (err -117) [ 149.642935][ T5717] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.076587][ T4304] EXT4-fs (loop3): unmounting filesystem. [ 151.231846][ T5740] loop3: detected capacity change from 0 to 2048 [ 151.238209][ T5740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.455260][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 153.455273][ T27] audit: type=1326 audit(153.475:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f5a7a8 code=0x7ffc0000 [ 153.530021][ T27] audit: type=1326 audit(153.485:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff91f5a7a8 code=0x7ffc0000 [ 153.569439][ T27] audit: type=1326 audit(153.545:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f5a7a8 code=0x7ffc0000 [ 153.600657][ T27] audit: type=1326 audit(153.545:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f5a7a8 code=0x7ffc0000 [ 153.606453][ T27] audit: type=1326 audit(153.545:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff91f84ec8 code=0x7ffc0000 [ 153.647730][ T27] audit: type=1326 audit(153.675:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffff91f5a7a8 code=0x7ffc0000 [ 153.653436][ T27] audit: type=1326 audit(153.675:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f5a7a8 code=0x7ffc0000 [ 153.669012][ T27] audit: type=1326 audit(153.675:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f5a7a8 code=0x7ffc0000 [ 153.772317][ T27] audit: type=1326 audit(153.675:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff92cf481c code=0x7ffc0000 [ 154.235851][ T27] audit: type=1326 audit(153.675:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f5a7a8 code=0x7ffc0000 [ 156.876436][ T5787] tipc: Enabling of bearer rejected, failed to enable media [ 161.446980][ T5840] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 164.902492][ T4312] Bluetooth: hci3: command 0x0406 tx timeout [ 164.904547][ T4312] Bluetooth: hci0: command 0x0406 tx timeout [ 165.638924][ T5880] netlink: 76 bytes leftover after parsing attributes in process `syz.1.394'. [ 168.440700][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 168.687453][ C0] vcan0: j1939_tp_rxtimer: 0x000000005590f198: rx timeout, send abort [ 168.790520][ C0] vcan0: j1939_tp_rxtimer: 0x000000000593bb7d: rx timeout, send abort [ 168.847662][ T5903] tipc: Started in network mode [ 168.849055][ T5903] tipc: Node identity ac1414aa, cluster identity 4711 [ 168.852168][ T5903] tipc: Enabled bearer , priority 10 [ 168.857786][ T5906] lo speed is unknown, defaulting to 1000 [ 169.737481][ T5917] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 169.794219][ T5906] lo speed is unknown, defaulting to 1000 [ 169.856916][ T4345] tipc: Node number set to 2886997162 [ 172.076704][ T5952] loop0: detected capacity change from 0 to 16 [ 172.148398][ T5952] erofs: (device loop0): mounted with root inode @ nid 36. [ 172.938226][ T5959] loop0: detected capacity change from 0 to 8 [ 172.940403][ T5959] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 172.948332][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.418'. [ 172.986418][ T5960] Unable to handle kernel paging request at virtual address dfff800000000068 [ 172.989037][ T5960] KASAN: null-ptr-deref in range [0x0000000000000340-0x0000000000000347] [ 172.991378][ T5960] Mem abort info: [ 172.992427][ T5960] ESR = 0x0000000096000006 [ 172.993825][ T5960] EC = 0x25: DABT (current EL), IL = 32 bits [ 172.995452][ T5960] SET = 0, FnV = 0 [ 172.996506][ T5960] EA = 0, S1PTW = 0 [ 172.997571][ T5960] FSC = 0x06: level 2 translation fault [ 172.999079][ T5960] Data abort info: [ 172.999730][ T4446] udevd[4446]: incorrect cramfs checksum on /dev/loop0 [ 173.000194][ T5960] ISV = 0, ISS = 0x00000006 [ 173.003388][ T5960] CM = 0, WnR = 0 [ 173.004433][ T5960] [dfff800000000068] address between user and kernel address ranges [ 173.006673][ T5960] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 173.008506][ T5960] Modules linked in: [ 173.009666][ T5960] CPU: 0 PID: 5960 Comm: syz.1.418 Not tainted 6.1.141-syzkaller #0 [ 173.011071][ T4446] udevd[4446]: incorrect cramfs checksum on /dev/loop0 [ 173.011717][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.016164][ T5960] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 173.018239][ T5960] pc : find_match+0xa0/0xb0c [ 173.019494][ T5960] lr : find_match+0x74/0xb0c [ 173.020946][ T4446] udevd[4446]: incorrect cramfs checksum on /dev/loop0 [ 173.020977][ T5960] sp : ffff800020d46020 [ 173.023957][ T5960] x29: ffff800020d46040 x28: 1fffe0001b8d8e84 x27: dfff800000000000 [ 173.026138][ T5960] x26: 0000000000000340 x25: ffff0000dc6c7437 x24: 0000000000000201 [ 173.028253][ T5960] x23: 0000000000000002 x22: ffff0000dc6c7420 x21: 0000000000000000 [ 173.030385][ T5960] x20: 1fffe0001b8d8e86 x19: 0000000000000000 x18: 0000000000000000 [ 173.031086][ T4446] udevd[4446]: incorrect cramfs checksum on /dev/loop0 [ 173.032537][ T5960] x17: ffff8000181a1000 x16: ffff8000082d0750 x15: 0000000000000002 [ 173.036597][ T5960] x14: 000000000000c0fe x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 173.038870][ T5960] x11: ff0080001077fb04 x10: 0000000000000002 x9 : ffff0000caa73780 [ 173.041071][ T5960] x8 : 0000000000000068 x7 : ffff800020d463d0 x6 : 0000000000000002 [ 173.042408][ T4446] udevd[4446]: incorrect cramfs checksum on /dev/loop0 [ 173.043217][ T5960] x5 : ffff800020d463d0 x4 : ffff800020d463c0 x3 : 0000000000000002 [ 173.047380][ T5960] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 173.049550][ T5960] Call trace: [ 173.050416][ T5960] find_match+0xa0/0xb0c [ 173.050644][ T5959] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 173.051843][ T5960] rt6_nh_find_match+0xcc/0x138 [ 173.056088][ T5960] nexthop_for_each_fib6_nh+0x1a8/0x3d0 [ 173.057547][ T5960] __find_rr_leaf+0x3b8/0x5c8 [ 173.058825][ T5960] fib6_table_lookup+0x308/0x8b8 [ 173.060118][ T5960] ip6_pol_route+0x1f4/0x1024 [ 173.061341][ T5960] ip6_pol_route_output+0x60/0x94 [ 173.062654][ T5960] fib6_rule_lookup+0x258/0x4a8 [ 173.063975][ T5960] ip6_route_output_flags_noref+0x250/0x314 [ 173.065510][ T5960] ip6_route_output_flags+0xe4/0x368 [ 173.066959][ T5960] ip6_dst_lookup_tail+0x274/0x12c0 [ 173.068343][ T5960] ip6_dst_lookup_flow+0x54/0xe0 [ 173.069662][ T5960] inet6_csk_route_req+0x418/0x60c [ 173.071048][ T5960] tcp_v6_route_req+0x2a8/0x3dc [ 173.072369][ T5960] tcp_conn_request+0xa48/0x247c [ 173.073724][ T5960] tcp_v6_conn_request+0x264/0x380 [ 173.075096][ T5960] tcp_rcv_state_process+0x11d4/0x380c [ 173.076561][ T5960] tcp_v6_do_rcv+0x868/0x1128 [ 173.077796][ T5960] tcp_v6_rcv+0x1978/0x1fa0 [ 173.079009][ T5960] ip6_protocol_deliver_rcu+0x928/0x11d0 [ 173.080539][ T5960] ip6_input_finish+0x164/0x298 [ 173.081903][ T5960] NF_HOOK+0x2c4/0x358 [ 173.083062][ T5960] ip6_input+0x90/0xa8 [ 173.084142][ T5960] ip6_rcv_finish+0x1f4/0x220 [ 173.085338][ T5960] NF_HOOK+0x2c4/0x358 [ 173.086430][ T5960] ipv6_rcv+0x9c/0xbc [ 173.087469][ T5960] __netif_receive_skb+0xcc/0x2ac [ 173.088495][ T4446] udevd[4446]: incorrect cramfs checksum on /dev/loop0 [ 173.088818][ T5960] netif_receive_skb+0x1e8/0x8f0 [ 173.091960][ T5960] tun_rx_batched+0x478/0x5b4 [ 173.093266][ T5960] tun_get_user+0x1fa0/0x3240 [ 173.094503][ T5960] tun_chr_write_iter+0xfc/0x204 [ 173.095806][ T5960] vfs_write+0x5ac/0x7c4 [ 173.096951][ T5960] ksys_write+0x120/0x210 [ 173.098105][ T5960] __arm64_sys_write+0x7c/0x90 [ 173.099390][ T5960] invoke_syscall+0x98/0x2bc [ 173.100626][ T5960] el0_svc_common+0x138/0x258 [ 173.101909][ T5960] do_el0_svc+0x58/0x13c [ 173.103099][ T5960] el0_svc+0x58/0x138 [ 173.104162][ T5960] el0t_64_sync_handler+0x84/0xf0 [ 173.105560][ T5960] el0t_64_sync+0x18c/0x190 [ 173.106783][ T5960] Code: 96055809 f94002c8 910d011a d343ff48 (387b6908) [ 173.108623][ T5960] ---[ end trace 0000000000000000 ]--- [ 173.524429][ T5960] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 173.526636][ T5960] SMP: stopping secondary CPUs [ 173.528013][ T5960] Kernel Offset: disabled [ 173.529188][ T5960] CPU features: 0x080000,02070084,26017203 [ 173.530759][ T5960] Memory Limit: none [ 173.931015][ T5960] Rebooting in 86400 seconds..