last executing test programs: 4m35.245126786s ago: executing program 0 (id=16): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0xfffffffffffffffe) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, 0x0) 4m34.972347041s ago: executing program 0 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4m33.864706958s ago: executing program 0 (id=25): socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x10000000000000}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000003c0)=0x2) 4m32.350731131s ago: executing program 0 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xf, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/169, 0xa9) 4m29.667013472s ago: executing program 0 (id=39): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000480)="0022ff0f", 0x4, 0x90, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240), 0xfffffffffffffde6, 0x12, 0x0, 0xffffffffffffffba) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4m29.234546938s ago: executing program 0 (id=46): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @val=@iter={0x0}}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @val=@iter={0x0}}, 0x40) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 4m28.351881822s ago: executing program 32 (id=46): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @val=@iter={0x0}}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @val=@iter={0x0}}, 0x40) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 17.761787017s ago: executing program 4 (id=939): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 16.438997638s ago: executing program 4 (id=944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000200)=0x1c, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) 14.99414413s ago: executing program 4 (id=946): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@discard}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x90000005}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 13.851510368s ago: executing program 4 (id=952): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 12.930067181s ago: executing program 4 (id=954): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001980)="d527cf11805d55533beee663b219fc6742ceda12c4ba069e5d711c602617720ced4aeef3c627ec8ad698db10e3f3dbd3712fbe8eb20ba74f94971ff02659784db4600a1b79ec37b13575abaf52a8afe4"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 12.626942506s ago: executing program 4 (id=960): close(0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x3}, {0xa4}, {0x6}]}) 9.239432578s ago: executing program 1 (id=971): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) sendto$unix(r4, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) 9.238893948s ago: executing program 5 (id=972): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x440}], 0x85, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) 9.13304233s ago: executing program 1 (id=973): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@allow_utime={'allow_utime', 0x3d, 0x356}}, {@dmask={'dmask', 0x3d, 0x400005}}, {@sys_tz}, {@namecase}, {@codepage={'codepage', 0x3d, 'iso8859-2'}}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x4}}, {@codepage={'codepage', 0x3d, 'iso8859-15'}}]}, 0x1, 0x154a, &(0x7f0000001680)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8011) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x3000046, &(0x7f0000000cc0)={[{@delalloc}, {@data_err_abort}, {@lazytime}, {@dioread_lock}, {@dioread_lock}, {@resgid}, {@jqfmt_vfsv0}, {@dioread_nolock}, {@nobh}, {@user_xattr}, {@mb_optimize_scan}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}]}, 0xfe, 0x562, &(0x7f0000000440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x4012011, r1, 0x1000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000009c0)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@resuid}, {@resgid}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r2, 0x10, 0x2, 0x7fff) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) 9.052397631s ago: executing program 5 (id=975): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x18000000) 7.386700087s ago: executing program 5 (id=976): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 7.375896287s ago: executing program 2 (id=986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}], 0x400000000000150, 0x0, 0x0) 6.297208653s ago: executing program 2 (id=978): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0xf, 0x7fffffff, 0x9, 0x10}}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 6.173183805s ago: executing program 1 (id=979): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440c0517b180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 6.166478335s ago: executing program 5 (id=980): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x35, r3}, 0x10) 5.950992089s ago: executing program 2 (id=981): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000100)) 4.034301828s ago: executing program 2 (id=983): socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x18, 0x5, 0x86b0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)="1c0000005e000faeefc0a6fa998757b6f17d700800f60b17d4090c93", 0x1c}], 0x1}, 0x0) 3.981329039s ago: executing program 3 (id=984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r6, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback={0x0, 0xffffac1414aa}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 3.811298131s ago: executing program 3 (id=985): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x1, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffff5c26}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44051}, 0x40001) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x8, 0x24, 0x67, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, {{0x4e24, 0x4e21, 0x4, 0x1, 0x9, 0x0, 0x0, 0x2, 0x7, "5c50bf", 0xf, "e88499"}}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@RTM_GETNSID={0x14, 0x5a, 0x300, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8) 3.791706512s ago: executing program 5 (id=987): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000240)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@fat=@dos1xfloppy}, {@uni_xlateno}, {@utf8no}, {@shortname_mixed}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@rodir}, {@numtail}]}, 0x1, 0x36a, &(0x7f0000000300)="$eJzs3U9oY0UYAPAvfWnSXdD2JgpC9CZo2e5NL7ZIFxZ7UQn+OYjB7aokVWix2B62rQfFo+BRT94U9OBBPIqgiDcPXl1BVsWD7m3BxZHkvSSvSdrtLnal+PtBk+nMfDPf+0PyGl6mLyxG+8J0XLx69UrMzFSiuvjYYlyrxFxk0bcb42oT6gCAk+FaSvFnyo22zUwOqdyGtACAY9R7/38pIhoxl9e8+fVh/ZN3fwA48Yq//08d1ueAzwEiXjuWlACAYzb2+f/9+5prvZ9q/9dq6a4AAOCkeurZ5x5fWol4stGYiVh7e7O52YxHhu1LF+OV6MRqnInZuB6RXyh0Hyq9x3PnV5bPNBqNnfhlLpoRMVUENvMrhaWsF1+PhZiNuSK+uNpIKWXnPltZXmj0RMTuTm/+WKtsNqfjdDH/j6djdXjh0R+k9xRxfmX5bKMYoLnWj9+J2BveqNDNfz5m4/sXB8Ok1L+DcWX50kI/6WH8ZrMeFwZ74cBPQAAAAAAAAAAAAAAAAAAAAAAA4JbMNwbmBuvnpO5zvlLO/PyE9t76OHl8sT7QXr4+UKqnSOmPNx5qvpPFvvWBRtfn2bSQIAAAAAAAAAAAAAAAAAAAAAxsbNWi1emsrm9sbbfLhZ31ja2piOjWvPrtJ1+divE+NyhU8ynqEYMpGsW02+1WyvqdUxYxHp51J+/XfPT5IONyn/pgKyamUT+4qdO5476f3x/W3Jv1R/572CeLyRuYldJ4dGTktTvzlG5mRw0KZ8s19fHZL6eUSjVvlcMvPT8+YFQiqjd/4LbbU3Fwn9QtfHPl5bv7e7/1Zco98ODs05ff+/C3dqvTnTl6R7C2vnE9tVuVfucjzF4Ml3qHYHhuVCIvVMpnQvWwAff217SyH35/5p53vzvaTkjlmte75/NInyzfnE9Hw2t5oZvmSNOpYfh0sRGd1ekJJ/+NCrdwTO/64IuPU/rp1yNPMTQ19rJR+XdefQAAAAAAAAAAAAAAAAAAgLLSd8ULxZd9pw+LeviJ488MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG6f4f//LxX2dmOk5iiFv3YmRNVX1zciav/1ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/3TwAAAP//D7VfEw==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9fc69000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000240), 0x10) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.747200773s ago: executing program 1 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @empty, 0x1d, 0x3, 'sh\x00', 0x30, 0x4, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 2.411511213s ago: executing program 2 (id=989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)) 2.410721873s ago: executing program 3 (id=990): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18}], 0x1, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000980)={0x50, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x6001}, 0x10044001) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x1000004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.180619632s ago: executing program 5 (id=991): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@allow_utime={'allow_utime', 0x3d, 0x356}}, {@dmask={'dmask', 0x3d, 0x400005}}, {@sys_tz}, {@namecase}, {@codepage={'codepage', 0x3d, 'iso8859-2'}}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x4}}, {@codepage={'codepage', 0x3d, 'iso8859-15'}}]}, 0x1, 0x154a, &(0x7f0000001680)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8011) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x3000046, &(0x7f0000000cc0)={[{@delalloc}, {@data_err_abort}, {@lazytime}, {@dioread_lock}, {@dioread_lock}, {@resgid}, {@jqfmt_vfsv0}, {@dioread_nolock}, {@nobh}, {@user_xattr}, {@mb_optimize_scan}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}]}, 0xfe, 0x562, &(0x7f0000000440)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIuHMyla+uPCV7MS9HhQG+8miE9K6PpMpp0rHXgduFuvJEheOFAvNd7L4f/gH/FQIdDRvHGm8hJT7quSdasy9rMfD5w2vfNe5L3PDnnefOenIQEMLQmsj+FiJcj4psk4nBEJHnbaOSNE2vrrT68Xs6WJBqNT/5KsvX2R0S59Vit+x3MKy9FxK9fRZwstPdbW16ZL1Uq6WJe3xsLVyZryyunLi2U5tK59PL0zMyZt2am333n7b7E2fhy7f/Hdz848/Xx1e9+vn/kdhJn41DensXVh25ubKxMxET+nIzF2U0rTvWhs0GS7PYGsC0jeZ6PRTYGHI6RPOuB/77sZbEBDKlE/sOQas0DWuf2fToPfmE8eH/tBKg9/tG190ZiX/Pc6MBq8tiZUXa+O96H/rM+fvnjzu1sif69DwGwpRs3I+L06Gj7+Jfk49/2ne5hnc19GP9g59zN5j9vdJr/FNbnP9Fh/nOwQ+5ux9b5X7jfh266yuZ/73Wc/65ftBofyWv/a875xpKLlyppNrb9PyJOxNjerP6k6zlnVu81urVtnP9lS9Z/ay6Yb8f90b2P32e2VC89S8wbPbgZ8UrH+W+yvv+TDvs/ez7O99jHsfTOa93ato7/+Wr8GPF6x/3/6IpWVpqsd70+Odk8HiZbR0W7v28d+61b/7sdf7b/Dzw5/vFk4/Xa2tP38cO+f9K8uG9z22PxR+/H/57k02Z5T37btVK9vjgVsSf5qP326Uf3bdVb62fxnzj+5PGv0/G/PyI+7zH+W0d/erVb2yDs/9mn2v9PX7j34Rffd+u/t/HvzWbpRH5LL+Nfrxv4LM8dAAAAAAAADJpCRByKpFBcLxcKxeLa5zuOxoFCpVqrn7xYXbo8G83vyo7HWKF1pfvwhs9DTOWfh23VpzfVZyLiSER8O7K/WS+Wq5XZ3Q4eAAAAAAAAAAAAAAAAAAAABsTBLt//z/w+0rb6Z3/u/CYCz5Of/IbhtWX+9+OXnoCB5PUfhpf8h+El/2F4yX8YXvIfhpf8h+El/2F4yX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq/PnzmVLY/Xh9XJWn726vDRfvXpqNq3NFxeWysVydfFKca5anaukxXJ1YavHq1SrV6amY+naZD2t1SdryysXFqpLl+sXLi2U5tIL6diORAUAAAAAAAAAAAAAAAAAAAAvltryynypUkkXFRS2VRgdjM1Q6HNht0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjk3wAAAP//cHo1gQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x4012011, r1, 0x1000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000009c0)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@resuid}, {@resgid}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r2, 0x10, 0x2, 0x7fff) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) 1.180057552s ago: executing program 1 (id=992): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) 943.333995ms ago: executing program 2 (id=993): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x8012, &(0x7f00000011c0), 0xfe, 0x47d, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) pwritev2(r0, &(0x7f0000001780)=[{&(0x7f0000000580)='\x00', 0x1}], 0x1, 0x44000, 0x0, 0x0) ftruncate(r0, 0x3f00) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) 135.824538ms ago: executing program 3 (id=994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r2, 0x0) shutdown(r2, 0x0) 91.113859ms ago: executing program 3 (id=995): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 74.807679ms ago: executing program 1 (id=996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x6eafe621d11f40f8, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 0s ago: executing program 3 (id=997): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001480)={0x3, 0x0, [{0xeeef0000, 0x84, &(0x7f00000013c0)=""/132}, {0x0, 0x86, &(0x7f0000001540)=""/134}, {0x4, 0xd2, &(0x7f0000002840)=""/210}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[], [{@fsmagic={'fsmagic', 0x3d, 0x4}}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000003100)=""/4100, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. [ 38.801107][ T4285] cgroup: Unknown subsys name 'net' [ 39.093408][ T4285] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 39.397481][ T4285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 40.492128][ T4303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.492600][ T4306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 40.497044][ T4311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 40.497908][ T4306] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 40.500194][ T4311] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.502094][ T4306] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 40.504475][ T4311] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 40.505788][ T4306] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.507590][ T4311] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 40.509969][ T4312] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 40.512521][ T4311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 40.513785][ T4312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 40.516317][ T4311] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 40.520008][ T4306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.520247][ T4311] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 40.522710][ T4313] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 40.524667][ T4311] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 40.529196][ T4311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 40.531509][ T4311] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 40.532549][ T4312] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 40.533721][ T4311] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.536872][ T4313] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 40.538825][ T4311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 40.540618][ T4312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.541862][ T4311] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 40.545852][ T4312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 40.546977][ T4311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 40.554126][ T4312] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 40.564237][ T4313] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 40.566525][ T4313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 40.779892][ T4302] chnl_net:caif_netlink_parms(): no params data found [ 40.859456][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 40.874693][ T4296] chnl_net:caif_netlink_parms(): no params data found [ 40.891454][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.893643][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.896169][ T4302] device bridge_slave_0 entered promiscuous mode [ 40.905752][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.907725][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.910917][ T4302] device bridge_slave_1 entered promiscuous mode [ 40.924152][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 40.941617][ T4307] chnl_net:caif_netlink_parms(): no params data found [ 40.984836][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.987531][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.989909][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.992804][ T4305] device bridge_slave_0 entered promiscuous mode [ 41.007562][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.010597][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.012587][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.015149][ T4305] device bridge_slave_1 entered promiscuous mode [ 41.047573][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.049821][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.052340][ T4296] device bridge_slave_0 entered promiscuous mode [ 41.069696][ T4302] team0: Port device team_slave_0 added [ 41.073438][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.076165][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.078826][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.081392][ T4296] device bridge_slave_1 entered promiscuous mode [ 41.091329][ T4302] team0: Port device team_slave_1 added [ 41.093136][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.095067][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.097621][ T4297] device bridge_slave_0 entered promiscuous mode [ 41.105650][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.126802][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.128946][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.131531][ T4297] device bridge_slave_1 entered promiscuous mode [ 41.144044][ T4296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.151963][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.153842][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.160903][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.175539][ T4296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.182889][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.184941][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.187500][ T4307] device bridge_slave_0 entered promiscuous mode [ 41.190890][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.192792][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.200107][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.213983][ T4305] team0: Port device team_slave_0 added [ 41.216032][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.222896][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.225504][ T4307] device bridge_slave_1 entered promiscuous mode [ 41.232898][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.236921][ T4296] team0: Port device team_slave_0 added [ 41.240228][ T4296] team0: Port device team_slave_1 added [ 41.252603][ T4305] team0: Port device team_slave_1 added [ 41.254738][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.256663][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.264146][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.279290][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.288815][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.290742][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.297803][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.303649][ T4307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.312991][ T4307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.340150][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.342074][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.349115][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.353166][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.355085][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.362118][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.381689][ T4297] team0: Port device team_slave_0 added [ 41.439781][ T4302] device hsr_slave_0 entered promiscuous mode [ 41.478248][ T4302] device hsr_slave_1 entered promiscuous mode [ 41.520155][ T4307] team0: Port device team_slave_0 added [ 41.523480][ T4297] team0: Port device team_slave_1 added [ 41.526738][ T4307] team0: Port device team_slave_1 added [ 41.589683][ T4296] device hsr_slave_0 entered promiscuous mode [ 41.628432][ T4296] device hsr_slave_1 entered promiscuous mode [ 41.678111][ T4296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.680432][ T4296] Cannot create hsr debugfs directory [ 41.693833][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.695803][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.703041][ T4307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.724425][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.726394][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.733760][ T4307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.737455][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.739539][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.746614][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.766285][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.768273][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.775125][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.819807][ T4305] device hsr_slave_0 entered promiscuous mode [ 41.858321][ T4305] device hsr_slave_1 entered promiscuous mode [ 41.897996][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.900246][ T4305] Cannot create hsr debugfs directory [ 41.979650][ T4307] device hsr_slave_0 entered promiscuous mode [ 42.018307][ T4307] device hsr_slave_1 entered promiscuous mode [ 42.058008][ T4307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.060184][ T4307] Cannot create hsr debugfs directory [ 42.149641][ T4297] device hsr_slave_0 entered promiscuous mode [ 42.198521][ T4297] device hsr_slave_1 entered promiscuous mode [ 42.238191][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.240301][ T4297] Cannot create hsr debugfs directory [ 42.408966][ T4302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.439697][ T4302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.496000][ T4302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.559519][ T4302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.588638][ T4313] Bluetooth: hci3: command 0x0409 tx timeout [ 42.588646][ T4303] Bluetooth: hci0: command 0x0409 tx timeout [ 42.588795][ T4303] Bluetooth: hci2: command 0x0409 tx timeout [ 42.590572][ T4313] Bluetooth: hci1: command 0x0409 tx timeout [ 42.616445][ T4296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.668001][ T4313] Bluetooth: hci4: command 0x0409 tx timeout [ 42.669822][ T4296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.711557][ T4296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.776207][ T4296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.833927][ T4305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.864103][ T4305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.899898][ T4305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.930414][ T4305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 43.019315][ T4307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.059596][ T4307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.111137][ T4307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.152979][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.162563][ T4307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.217579][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.221294][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.225995][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.235420][ T4297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.278452][ T4297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.330939][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.335769][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.341136][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.343227][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.352820][ T4297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.390647][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.395798][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.404330][ T4297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 43.452472][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.455263][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.458355][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.460330][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.463694][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.483776][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.486370][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.489169][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.492383][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.495317][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.506192][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.512450][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.528847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.531623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.534186][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.536350][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.540068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.544178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.546889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.564132][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.566679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.569905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.572539][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.574446][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.576750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.580788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.591887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.594600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.606077][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.610126][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.612715][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.615247][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.619730][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.623506][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.632607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.635500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.640656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.643277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.645936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.648881][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.650798][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.653122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.655646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.681707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.684444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.687009][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.689047][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.696761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.702833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.705571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.715208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.718489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.721743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.729001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.731623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.735692][ T4307] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.739650][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.754248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.766584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.770582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.773131][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.775050][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.780648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.783421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.794999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.797756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.808641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.821596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.824335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.845920][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.849556][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.852082][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.854135][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.856592][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.864969][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.871353][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.874918][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.877681][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.884570][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.887383][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.894100][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.896899][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.914113][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.916860][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.922985][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.925589][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.933741][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.946615][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.965353][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.969540][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.972227][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.975027][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.977215][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.985730][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.988526][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.004178][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.010432][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.014705][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.016840][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.021512][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.044862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.047758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.052329][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.054321][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.057057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.061446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.064053][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.066085][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.081971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.084859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.087798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.099334][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.105313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.107565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.116692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.125691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.134658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.138483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.166072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.174704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.178229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.181175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.183990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.186867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.196881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.200142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.202619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.221430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.224425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.231808][ T4297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.235334][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.244195][ T4302] device veth0_vlan entered promiscuous mode [ 44.246507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.255610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.258750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.260943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.267036][ T4296] device veth0_vlan entered promiscuous mode [ 44.280371][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.283406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.286092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.295295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.299425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.315703][ T4296] device veth1_vlan entered promiscuous mode [ 44.320856][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.323513][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.326167][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.342235][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.344886][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.347485][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.352631][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.355241][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.359672][ T4302] device veth1_vlan entered promiscuous mode [ 44.374399][ T4305] device veth0_vlan entered promiscuous mode [ 44.376988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.379969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.382721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.411096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.413629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.416246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.434603][ T4296] device veth0_macvtap entered promiscuous mode [ 44.437757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.441339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.443964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.450761][ T4305] device veth1_vlan entered promiscuous mode [ 44.455789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.459259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.461784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.464292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.467039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.474147][ T4307] device veth0_vlan entered promiscuous mode [ 44.477608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.485918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.488287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.491671][ T4296] device veth1_macvtap entered promiscuous mode [ 44.505030][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.510930][ T4302] device veth0_macvtap entered promiscuous mode [ 44.516429][ T4307] device veth1_vlan entered promiscuous mode [ 44.530205][ T4302] device veth1_macvtap entered promiscuous mode [ 44.543956][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.546946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.551179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.553753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.556295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.564792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.567602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.570805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.573537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.586915][ T4305] device veth0_macvtap entered promiscuous mode [ 44.596073][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.606012][ T4305] device veth1_macvtap entered promiscuous mode [ 44.609782][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.612362][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.614788][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.617111][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.620684][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.625027][ T4296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.627543][ T4296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.630724][ T4296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.633135][ T4296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.663704][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.666693][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.670625][ T4310] Bluetooth: hci2: command 0x041b tx timeout [ 44.671601][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.672340][ T4310] Bluetooth: hci3: command 0x041b tx timeout [ 44.674546][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.675789][ T4310] Bluetooth: hci0: command 0x041b tx timeout [ 44.678714][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.678727][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.678740][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.679683][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.680525][ T4313] Bluetooth: hci1: command 0x041b tx timeout [ 44.687557][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.696082][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.701012][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.706198][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.710950][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.713651][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.717001][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.721795][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.724699][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.730395][ T4307] device veth0_macvtap entered promiscuous mode [ 44.734319][ T4307] device veth1_macvtap entered promiscuous mode [ 44.741496][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.744232][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.746847][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.751366][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.755134][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.758464][ T4313] Bluetooth: hci4: command 0x041b tx timeout [ 44.760780][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.763550][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.766222][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.770547][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.773222][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.786293][ T4305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.789301][ T4305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.791721][ T4305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.794048][ T4305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.810207][ T4302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.812835][ T4302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.815199][ T4302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.817540][ T4302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.824322][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.839371][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.842301][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.844928][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.847737][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.851248][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.854141][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.859328][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.875080][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.877798][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.884561][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.887501][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.891425][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.894168][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.896817][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.899918][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.903707][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.918642][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.920821][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.923585][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.924036][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.926341][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.930992][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.936055][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.955514][ T4307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.959413][ T4307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.961854][ T4307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.964209][ T4307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.983772][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.985978][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.994582][ T4297] device veth0_vlan entered promiscuous mode [ 45.016442][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.019983][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.023280][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.026339][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.030529][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.082624][ T4297] device veth1_vlan entered promiscuous mode [ 45.101097][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.103251][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.106329][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.128420][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.131336][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.144845][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.147094][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.166567][ T4297] device veth0_macvtap entered promiscuous mode [ 45.178426][ T4297] device veth1_macvtap entered promiscuous mode [ 45.193578][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.196535][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.199446][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.202241][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.204841][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.213420][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.216090][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.225639][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.236078][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.241080][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.244027][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.246691][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.256125][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.259094][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.261893][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.264659][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.267447][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.276952][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.282079][ T4297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.284472][ T4297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.286928][ T4297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.296944][ T4297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.313453][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.317682][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.322115][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.324754][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.327379][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.332068][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.334717][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.346693][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.352722][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.096836][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.100292][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.105772][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.109366][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.256778][ T311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.259693][ T311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.293489][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.297230][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.338332][ T311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.340520][ T311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.344372][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.360565][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.363111][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.392349][ T311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.394642][ T311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.398170][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.767781][ T4303] Bluetooth: hci2: command 0x040f tx timeout [ 46.768788][ T4313] Bluetooth: hci3: command 0x040f tx timeout [ 46.773189][ T4310] Bluetooth: hci1: command 0x040f tx timeout [ 46.775621][ T4313] Bluetooth: hci0: command 0x040f tx timeout [ 47.293826][ T4402] loop4: detected capacity change from 0 to 1024 [ 47.690472][ T4312] Bluetooth: hci4: command 0x040f tx timeout [ 48.014722][ T4402] hfsplus: request for non-existent node 65536 in B*Tree [ 48.016831][ T4402] hfsplus: request for non-existent node 65536 in B*Tree [ 48.019304][ T4402] hfsplus: failed to load root directory [ 48.302475][ T27] audit: type=1326 audit(48.270:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a15a7a8 code=0x7fc00000 [ 48.344697][ T4290] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.404749][ T27] audit: type=1326 audit(48.370:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4389 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8a15a7a8 code=0x7fc00000 [ 49.295911][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 49.297610][ T4303] Bluetooth: hci0: command 0x0419 tx timeout [ 49.299344][ T4303] Bluetooth: hci1: command 0x0419 tx timeout [ 49.300953][ T4303] Bluetooth: hci3: command 0x0419 tx timeout [ 49.406420][ T4426] loop2: detected capacity change from 0 to 128 [ 49.463975][ T4426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 49.496408][ T4426] process 'syz.2.13' launched '/dev/fd/3' with NULL argv: empty string added [ 49.918198][ T4312] Bluetooth: hci4: command 0x0419 tx timeout [ 50.376645][ T4446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.389813][ T4446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.476295][ T4446] loop3: detected capacity change from 0 to 1024 [ 50.528262][ T4307] EXT4-fs (loop2): unmounting filesystem. [ 50.543642][ T4446] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.708084][ T27] audit: type=1326 audit(51.670:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1f5a7a8 code=0x7fc00000 [ 51.713852][ T27] audit: type=1326 audit(51.670:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb1f5a7a8 code=0x7fc00000 [ 51.733727][ T4476] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 51.736365][ T27] audit: type=1326 audit(51.670:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1f5a7a8 code=0x7fc00000 [ 51.746355][ T27] audit: type=1326 audit(51.670:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1f5a7a8 code=0x7fc00000 [ 51.753869][ T27] audit: type=1326 audit(51.670:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1f5a7a8 code=0x7fc00000 [ 51.755738][ T4305] EXT4-fs (loop3): unmounting filesystem. [ 51.766302][ T27] audit: type=1326 audit(51.670:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1f5a7a8 code=0x7fc00000 [ 51.773996][ T27] audit: type=1326 audit(51.670:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1f5a7a8 code=0x7fc00000 [ 51.785187][ T4476] sch_tbf: burst 9987 is lower than device lo mtu (65550) ! [ 51.787426][ T27] audit: type=1326 audit(51.670:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1f5a7a8 code=0x7fc00000 [ 55.198046][ T4516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.655782][ T4511] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 55.976828][ T4303] Bluetooth: hci0: hardware error 0x09 [ 57.331793][ T4544] loop1: detected capacity change from 0 to 256 [ 57.355562][ T4310] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.355839][ T4544] ======================================================= [ 57.355839][ T4544] WARNING: The mand mount option has been deprecated and [ 57.355839][ T4544] and is ignored by this kernel. Remove the mand [ 57.355839][ T4544] option from the mount to silence this warning. [ 57.355839][ T4544] ======================================================= [ 57.367953][ T4313] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.370714][ T4313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.377790][ T4313] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.380886][ T4313] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.383065][ T4313] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.653471][ T311] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.106086][ T4544] FAT-fs (loop1): Directory bread(block 64) failed [ 58.129144][ T4544] FAT-fs (loop1): Directory bread(block 65) failed [ 58.132720][ T4544] FAT-fs (loop1): Directory bread(block 66) failed [ 58.147990][ T4544] FAT-fs (loop1): Directory bread(block 67) failed [ 58.149840][ T4544] FAT-fs (loop1): Directory bread(block 68) failed [ 58.151654][ T4544] FAT-fs (loop1): Directory bread(block 69) failed [ 58.153515][ T4544] FAT-fs (loop1): Directory bread(block 70) failed [ 58.155300][ T4544] FAT-fs (loop1): Directory bread(block 71) failed [ 58.157130][ T4544] FAT-fs (loop1): Directory bread(block 72) failed [ 58.170772][ T311] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.178245][ T4544] FAT-fs (loop1): Directory bread(block 73) failed [ 58.179604][ T4558] netlink: 'syz.4.52': attribute type 13 has an invalid length. [ 58.382779][ T4303] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 59.468163][ T4303] Bluetooth: hci2: command 0x0409 tx timeout [ 61.429424][ T4584] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 61.436752][ T4584] CIFS mount error: No usable UNC path provided in device string! [ 61.436752][ T4584] [ 61.439864][ T4584] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 62.064106][ T4313] Bluetooth: hci2: command 0x041b tx timeout [ 62.147875][ C1] sched: RT throttling activated [ 62.914901][ T4594] loop2: detected capacity change from 0 to 256 [ 63.197740][ T4594] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.201063][ T4594] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 63.307754][ T4594] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 63.922526][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.925211][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.108966][ T4313] Bluetooth: hci2: command 0x040f tx timeout [ 64.868120][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.870339][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.501987][ T4616] capability: warning: `syz.3.65' uses deprecated v2 capabilities in a way that may be insecure [ 65.982466][ T4558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.040866][ T4558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.218163][ T4303] Bluetooth: hci2: command 0x0419 tx timeout [ 67.171523][ T4558] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.174130][ T4558] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.176609][ T4558] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.179355][ T4558] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.512497][ T311] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.529172][ T4597] netlink: 'syz.1.61': attribute type 1 has an invalid length. [ 67.544597][ T4601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.61'. [ 67.795734][ T311] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.866181][ T4629] loop4: detected capacity change from 0 to 32768 [ 67.929959][ T4644] loop3: detected capacity change from 0 to 512 [ 67.932321][ T4644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.946090][ T4644] EXT4-fs: Mount option(s) incompatible with ext3 [ 67.976886][ T4551] chnl_net:caif_netlink_parms(): no params data found [ 67.982496][ T4346] kernel write not supported for file bpf-prog (pid: 4346 comm: kworker/1:4) [ 68.077796][ T4448] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.100253][ T4648] overlayfs: workdir and upperdir must reside under the same mount [ 68.246820][ T4551] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.256906][ T4551] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.284193][ T4551] device bridge_slave_0 entered promiscuous mode [ 68.386414][ T4665] loop2: detected capacity change from 0 to 2048 [ 68.523213][ T4670] loop3: detected capacity change from 0 to 1024 [ 68.554511][ T4673] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.585008][ T4670] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 68.585082][ T4670] hfsplus: failed to load root directory [ 69.199319][ T4551] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.199785][ T4551] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.380122][ T4551] device bridge_slave_1 entered promiscuous mode [ 69.413791][ T4673] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 69.413838][ T4673] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 69.416589][ T4673] Remounting filesystem read-only [ 69.478064][ T4313] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 69.481056][ T4313] CPU: 1 PID: 4313 Comm: kworker/u5:8 Not tainted 6.1.141-syzkaller #0 [ 69.483312][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.486073][ T4313] Workqueue: hci3 hci_rx_work [ 69.487355][ T4313] Call trace: [ 69.488257][ T4313] dump_backtrace+0x1c8/0x1f4 [ 69.489544][ T4313] show_stack+0x2c/0x3c [ 69.490714][ T4313] __dump_stack+0x30/0x40 [ 69.491919][ T4313] dump_stack_lvl+0xf8/0x160 [ 69.493210][ T4313] dump_stack+0x1c/0x5c [ 69.494353][ T4313] sysfs_create_dir_ns+0x22c/0x24c [ 69.495747][ T4313] kobject_add_internal+0x5a8/0xb30 [ 69.497126][ T4313] kobject_add+0x134/0x1f8 [ 69.498428][ T4313] device_add+0x3f0/0xf94 [ 69.499587][ T4313] hci_conn_add_sysfs+0xbc/0x1cc [ 69.500956][ T4313] le_conn_complete_evt+0xa24/0xf8c [ 69.502441][ T4313] hci_le_enh_conn_complete_evt+0x114/0x3f8 [ 69.504042][ T4313] hci_le_meta_evt+0x2c0/0x4a4 [ 69.505319][ T4313] hci_event_packet+0x6ac/0xf08 [ 69.506623][ T4313] hci_rx_work+0x324/0xaa0 [ 69.507849][ T4313] process_one_work+0x7f4/0x13a8 [ 69.509197][ T4313] worker_thread+0x8c8/0xfbc [ 69.510455][ T4313] kthread+0x250/0x2d8 [ 69.511579][ T4313] ret_from_fork+0x10/0x20 [ 69.512803][ C1] vkms_vblank_simulate: vblank timer overrun [ 69.517790][ T4313] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 69.521593][ T4313] Bluetooth: hci3: failed to register connection device [ 69.639061][ T1515] cfg80211: failed to load regulatory.db [ 69.676425][ T4551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.946515][ T4699] binder: 4695:4699 ioctl c0306201 0 returned -14 [ 70.957994][ T4684] loop2: detected capacity change from 0 to 131072 [ 71.028025][ T4684] F2FS-fs (loop2): Found nat_bits in checkpoint [ 71.368201][ T4684] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.799233][ T4551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.438845][ T4313] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 72.441729][ T4313] Bluetooth: hci1: Injecting HCI hardware error event [ 72.456601][ T4313] Bluetooth: hci1: hardware error 0x00 [ 72.990997][ T4551] team0: Port device team_slave_0 added [ 73.046070][ T4551] team0: Port device team_slave_1 added [ 74.414152][ T4731] binder: 4730:4731 tried to acquire reference to desc 0, got 1 instead [ 74.491769][ T4731] binder: 4730:4731 got reply transaction with bad transaction stack, transaction 5 has target 4730:0 [ 74.495162][ T4731] binder: 4730:4731 transaction reply to 0:0 failed 6/29201/-71, size 0-0 line 2970 [ 74.518559][ T4551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.521160][ T4551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.538197][ T4551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.542727][ T4551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.544743][ T4551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.557074][ T4468] binder: release 4730:4731 transaction 5 out, still active [ 74.560971][ T4468] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.577245][ T4551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.688935][ T4386] binder: send failed reply for transaction 5, target dead [ 74.909668][ T4313] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 75.129130][ T4551] device hsr_slave_0 entered promiscuous mode [ 75.169547][ T4551] device hsr_slave_1 entered promiscuous mode [ 75.208215][ T4551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.211498][ T4551] Cannot create hsr debugfs directory [ 75.922771][ T4759] binder: 4758:4759 tried to acquire reference to desc 0, got 1 instead [ 75.925325][ T4759] binder: 4758:4759 ioctl c0306201 200003c0 returned -14 [ 75.959805][ T4759] binder: 4758:4759 got transaction with out-of-order buffer fixup [ 75.962007][ T4759] binder: 4759:4758 failed to fixup parent [ 75.963699][ T4759] binder: 4758:4759 transaction call to 4758:0 failed 11/29201/-22, size 104-24 line 3549 [ 76.018512][ T4386] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.335877][ T4778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 78.517808][ T4793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.524599][ T4793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.986000][ T4551] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.047332][ T4813] binder: 4812:4813 tried to acquire reference to desc 0, got 1 instead [ 79.060048][ T4795] netlink: 'syz.2.111': attribute type 10 has an invalid length. [ 79.064983][ T4813] binder: 4812:4813 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 79.069248][ T4795] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.071389][ T4795] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.090718][ T4813] binder: 4813 RLIMIT_NICE not set [ 79.092172][ T4813] binder: 4813 RLIMIT_NICE not set [ 79.105778][ T4795] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.107738][ T4795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.110624][ T4795] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.112510][ T4795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.138416][ T4795] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 79.180057][ T4813] binder: 4813 RLIMIT_NICE not set [ 79.182113][ T4813] binder_alloc: 4812: binder_alloc_buf, no vma [ 79.194509][ T4813] binder: cannot allocate buffer: vma cleared, target dead or dying [ 79.194544][ T4813] binder: 4812:4813 transaction reply to 4812:4813 failed 18/29189/-3, size 0-0 line 3239 [ 79.213401][ T4813] binder: send failed reply for transaction 17 to 4812:4813 [ 79.723874][ T311] device hsr_slave_0 left promiscuous mode [ 79.728304][ T4581] Bluetooth: hci5: Frame reassembly failed (-84) [ 79.958605][ T311] device hsr_slave_1 left promiscuous mode [ 80.088564][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.091901][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.169064][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.239162][ T311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.414407][ T311] device bridge_slave_1 left promiscuous mode [ 80.417335][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.437843][ T4823] Bluetooth: hci5: Frame reassembly failed (-90) [ 80.518371][ T311] device bridge_slave_0 left promiscuous mode [ 80.520436][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.554245][ T4830] binder: 4829:4830 tried to acquire reference to desc 0, got 1 instead [ 80.557761][ T4830] binder: 4829:4830 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 80.564846][ T4830] binder: 4830 RLIMIT_NICE not set [ 80.566374][ T4830] binder: 4830 RLIMIT_NICE not set [ 80.572259][ T4350] binder_debug: 3 callbacks suppressed [ 80.572281][ T4350] binder: release 4829:4830 transaction 23 out, still active [ 80.575923][ T4350] binder: undelivered TRANSACTION_COMPLETE [ 80.593577][ T4350] binder: release 4829:4830 transaction 23 in, still active [ 80.595697][ T4350] binder: send failed reply for transaction 23, target dead [ 80.921747][ T311] device veth1_macvtap left promiscuous mode [ 80.929062][ T311] device veth0_macvtap left promiscuous mode [ 80.942714][ T311] device veth1_vlan left promiscuous mode [ 80.962616][ T311] device veth0_vlan left promiscuous mode [ 81.644346][ T4844] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96 [ 81.787999][ T4303] Bluetooth: hci5: command 0x1003 tx timeout [ 81.790970][ T4313] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 82.006365][ C0] vcan0: j1939_tp_rxtimer: 0x00000000bf416220: rx timeout, send abort [ 82.506407][ C0] vcan0: j1939_tp_rxtimer: 0x000000009fd781fa: rx timeout, send abort [ 82.510863][ C0] vcan0: j1939_tp_rxtimer: 0x00000000bf416220: abort rx timeout. Force session deactivation [ 82.643813][ T4857] mmap: syz.3.132 (4857) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.673194][ T4857] loop3: detected capacity change from 0 to 256 [ 82.687222][ T4857] exfat: Deprecated parameter 'namecase' [ 82.697337][ T4857] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 82.781766][ T4859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 83.008860][ C0] vcan0: j1939_tp_rxtimer: 0x000000009fd781fa: abort rx timeout. Force session deactivation [ 83.940863][ T311] team0 (unregistering): Port device team_slave_1 removed [ 84.121327][ T311] team0 (unregistering): Port device team_slave_0 removed [ 84.300125][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.509416][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.951326][ T311] bond0 (unregistering): Released all slaves [ 87.172620][ T4551] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.318008][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 87.387939][ T4551] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.434530][ T4870] binder: 4869:4870 tried to acquire reference to desc 0, got 1 instead [ 87.436957][ T4870] binder: 4869:4870 ioctl c0306201 200003c0 returned -14 [ 87.460253][ T4551] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.464830][ T4870] binder: 4869:4870 got transaction with invalid offsets ptr [ 87.466954][ T4870] binder: 4869:4870 transaction call to 4869:0 failed 28/29201/-22, size 4216-24 line 3585 [ 87.480467][ T4287] binder: undelivered TRANSACTION_ERROR: 29201 [ 87.687067][ T4551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.713622][ T4551] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.766793][ T4551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.777594][ T4551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.797326][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.805475][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.813196][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.870676][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.895895][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.898170][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.949720][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.993101][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.998729][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.000804][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.036671][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.053699][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.067596][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.088549][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.100343][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.110641][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.121410][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.130435][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.140645][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.149940][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.161232][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.171598][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.179065][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.383673][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.386024][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.396467][ T4551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.661010][ T4922] loop3: detected capacity change from 0 to 512 [ 89.664140][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.666973][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.745315][ T4551] device veth0_vlan entered promiscuous mode [ 89.767645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.771971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.783487][ T4922] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 89.802599][ T4551] device veth1_vlan entered promiscuous mode [ 89.819127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.821880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.833896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.858364][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.861077][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.863729][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.867669][ T4551] device veth0_macvtap entered promiscuous mode [ 89.872963][ T4551] device veth1_macvtap entered promiscuous mode [ 89.905740][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.917040][ T4922] EXT4-fs (loop3): unmounting filesystem. [ 89.919562][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.940086][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.955924][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.965473][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.979757][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.997055][ T4551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.005254][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.006035][ T4939] loop2: detected capacity change from 0 to 256 [ 90.014906][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.017718][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.024512][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.025293][ T4939] exfat: Deprecated parameter 'namecase' [ 90.038803][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.041630][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.052308][ T4939] exfat: Deprecated parameter 'codepage' [ 90.053133][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.053879][ T4939] exfat: Bad value for 'codepage' [ 90.065736][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.075437][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.084972][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.095977][ T4551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.103094][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.106049][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.115787][ T4551] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.123317][ T4551] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.135702][ T4551] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.147254][ T4551] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.194101][ T4944] loop2: detected capacity change from 0 to 1024 [ 90.196536][ T4944] EXT4-fs: Ignoring removed nobh option [ 90.219619][ T4944] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.327573][ T4944] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 90.425046][ T4944] loop2: detected capacity change from 0 to 1024 [ 90.427288][ T4944] EXT4-fs: Ignoring removed orlov option [ 91.129337][ T4944] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.140627][ T311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.142965][ T311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.160933][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.247054][ T311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.249552][ T311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.253764][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.572834][ T4964] loop1: detected capacity change from 0 to 4096 [ 91.583991][ T4964] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 92.183960][ T4307] EXT4-fs (loop2): unmounting filesystem. [ 92.353827][ T4964] ntfs3: loop1: Failed to load $Secure. [ 93.583370][ T4964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 94.226107][ T5004] binder: 5002:5004 tried to acquire reference to desc 0, got 1 instead [ 94.233221][ T5004] binder: 5002:5004 got transaction with invalid data ptr [ 94.235469][ T5004] binder: 5002:5004 transaction call to 5002:0 failed 33/29201/-14, size 0-24 line 3342 [ 94.245498][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.441921][ T5030] bridge0: port 3(vxlan0) entered blocking state [ 95.448254][ T5030] bridge0: port 3(vxlan0) entered disabled state [ 95.450858][ T5030] device vxlan0 entered promiscuous mode [ 95.464718][ T5034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.474440][ T5034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.896554][ T5062] device ip6tnl1 entered promiscuous mode [ 98.505159][ T5098] No such timeout policy "syz1" [ 99.252010][ T5102] binder: 5101:5102 tried to acquire reference to desc 0, got 1 instead [ 99.267364][ T5102] binder: 5101:5102 ioctl c0306201 20000700 returned -14 [ 99.279444][ T1515] binder: undelivered TRANSACTION_COMPLETE [ 99.293464][ T1515] binder: undelivered transaction 38, process died. [ 99.904222][ T4313] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 99.906825][ T4313] Bluetooth: hci3: Injecting HCI hardware error event [ 99.910191][ T4303] Bluetooth: hci3: hardware error 0x00 [ 100.864651][ T5158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.200'. [ 102.374586][ T5197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.208'. [ 102.379812][ T5197] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.382492][ T5197] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.384933][ T5197] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.387369][ T5197] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.391596][ T5197] Zero length message leads to an empty skb [ 102.872953][ T5200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 103.032179][ T4303] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 104.116961][ T5223] binder: 5222:5223 tried to acquire reference to desc 0, got 1 instead [ 104.120642][ T5223] binder: 5222:5223 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 104.124161][ T5223] binder: 5223 RLIMIT_NICE not set [ 104.125548][ T5223] binder: 5223 RLIMIT_NICE not set [ 104.143089][ T5223] binder: 5223 RLIMIT_NICE not set [ 104.144629][ T5223] binder_alloc: 5222: binder_alloc_buf, no vma [ 104.146298][ T5223] binder: cannot allocate buffer: vma cleared, target dead or dying [ 104.146327][ T5223] binder: 5222:5223 transaction reply to 5222:5223 failed 48/29189/-3, size 0-0 line 3239 [ 104.162007][ T5223] binder: send failed reply for transaction 47 to 5222:5223 [ 104.169934][ T4344] binder: undelivered TRANSACTION_COMPLETE [ 104.171573][ T4344] binder: undelivered TRANSACTION_ERROR: 29189 [ 104.187222][ T5225] netlink: 168 bytes leftover after parsing attributes in process `syz.5.219'. [ 104.197017][ T4468] binder: undelivered TRANSACTION_ERROR: 29190 [ 105.421526][ T5239] netlink: 165 bytes leftover after parsing attributes in process `syz.3.223'. [ 105.503572][ T5245] netlink: 'syz.2.226': attribute type 10 has an invalid length. [ 105.515654][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.517684][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.554093][ T5245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 105.556819][ T5245] device vxlan0 left promiscuous mode [ 105.565985][ T5245] bridge0: port 3(vxlan0) entered disabled state [ 106.375617][ T5245] device bridge_slave_1 left promiscuous mode [ 106.377503][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.414970][ T5245] device bridge_slave_0 left promiscuous mode [ 106.416800][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.458847][ T5256] loop5: detected capacity change from 0 to 128 [ 106.476686][ T5256] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 106.509025][ T5256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.518718][ T5245] bond0: (slave bridge0): Releasing backup interface [ 107.141245][ T5290] binder: 5289:5290 tried to acquire reference to desc 0, got 1 instead [ 107.166435][ T5290] binder: 5289:5290 got transaction with invalid data ptr [ 107.179641][ T5290] binder: 5289:5290 transaction async to 5289:0 failed 53/29201/-14, size 72-48 line 3342 [ 107.207118][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 107.696540][ T5306] loop4: detected capacity change from 0 to 8 [ 110.719793][ T5326] loop2: detected capacity change from 0 to 1024 [ 110.774279][ T5326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.756029][ T5333] binder: 5332:5333 tried to acquire reference to desc 0, got 1 instead [ 111.786056][ T5333] binder_alloc: 5332: binder_alloc_buf failed to map page at 20ffd000 in userspace [ 111.789077][ T5333] binder: cannot allocate buffer: memory allocation failed [ 111.789110][ T5333] binder: 5332:5333 transaction async to 5332:0 failed 64/29201/-12, size 0-0 line 3239 [ 111.830086][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.713843][ T5378] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.014166][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 114.020742][ T5397] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 114.109611][ T5397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 114.737459][ T5413] netlink: 'syz.2.270': attribute type 4 has an invalid length. [ 114.748718][ T5412] loop4: detected capacity change from 0 to 2048 [ 114.791703][ T5412] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 114.807741][ T5413] netlink: 'syz.2.270': attribute type 4 has an invalid length. [ 114.945633][ T5422] tipc: Started in network mode [ 114.955155][ T5422] tipc: Node identity ac14140f, cluster identity 4711 [ 114.957641][ T5422] tipc: New replicast peer: 255.255.255.255 [ 114.975546][ T5422] tipc: Enabled bearer , priority 10 [ 116.648133][ T4287] tipc: Node number set to 2886997007 [ 116.757809][ T5450] netlink: 'syz.3.282': attribute type 10 has an invalid length. [ 116.892934][ T5450] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.705661][ T5449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.766865][ T5471] loop1: detected capacity change from 0 to 512 [ 117.789589][ T5471] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 117.793305][ T5471] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.808301][ T5471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c099, mo2=0082] [ 117.831138][ T5471] System zones: 1-12 [ 117.836731][ T5471] EXT4-fs (loop1): 1 truncate cleaned up [ 117.840523][ T5471] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 117.911975][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 117.995084][ T5482] loop2: detected capacity change from 0 to 512 [ 118.412853][ T5507] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 118.435870][ T5507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.649767][ T5507] device ip6erspan0 entered promiscuous mode [ 118.681202][ T5507] bond1: (slave ip6erspan0): making interface the new active one [ 118.695511][ T5507] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 118.792865][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 118.967720][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 118.967732][ T27] audit: type=1326 audit(119.253:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 118.982474][ T27] audit: type=1326 audit(119.274:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 119.000530][ T27] audit: type=1326 audit(119.274:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 119.017868][ T27] audit: type=1326 audit(119.274:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 119.035755][ T27] audit: type=1326 audit(119.284:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 119.071927][ T27] audit: type=1326 audit(119.284:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 119.098178][ T27] audit: type=1326 audit(119.284:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 119.122488][ T27] audit: type=1326 audit(119.284:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 119.198435][ T27] audit: type=1326 audit(119.284:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 119.234360][ T27] audit: type=1326 audit(119.284:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x7ffc0000 [ 122.858359][ T5574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.315'. [ 124.737790][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.326'. [ 124.875632][ T5609] loop2: detected capacity change from 0 to 128 [ 124.907484][ T5609] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 124.925103][ T5609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.618742][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.621103][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.080952][ T5635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.088255][ T5635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.151492][ T5639] binder: 5638:5639 tried to acquire reference to desc 0, got 1 instead [ 126.155198][ T5639] binder: 5638:5639 got transaction with invalid data ptr [ 126.157419][ T5639] binder: 5638:5639 transaction call to 5638:0 failed 69/29201/-14, size 0-24 line 3342 [ 126.167672][ T4287] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.516090][ T5660] loop2: detected capacity change from 0 to 64 [ 127.369717][ T5694] loop4: detected capacity change from 0 to 256 [ 127.712854][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.891922][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.359'. [ 127.899760][ T5723] overlayfs: failed to clone upperpath [ 128.148044][ T5737] tipc: Started in network mode [ 128.149487][ T5737] tipc: Node identity 4, cluster identity 4711 [ 128.151197][ T5737] tipc: Node number set to 4 [ 129.262271][ T5755] loop2: detected capacity change from 0 to 1024 [ 129.311155][ T5755] hfsplus: bad catalog entry used to create inode [ 129.313054][ T5755] hfsplus: failed to load root directory [ 129.370472][ T5758] netlink: 'syz.4.368': attribute type 11 has an invalid length. [ 129.372697][ T5758] netlink: 36 bytes leftover after parsing attributes in process `syz.4.368'. [ 129.456108][ T5767] loop1: detected capacity change from 0 to 8 [ 129.515902][ T5767] SQUASHFS error: zlib decompression failed, data probably corrupt [ 129.519157][ T5767] SQUASHFS error: Failed to read block 0x9b: -5 [ 129.521297][ T5767] SQUASHFS error: Unable to read metadata cache entry [99] [ 129.523693][ T5767] SQUASHFS error: Unable to read inode 0x127 [ 129.606607][ T5767] loop1: detected capacity change from 0 to 512 [ 129.613672][ T5767] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.874936][ T5767] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 130.925326][ T5790] loop4: detected capacity change from 0 to 512 [ 131.099032][ T5790] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.068181][ T4296] EXT4-fs (loop1): unmounting filesystem. [ 134.232212][ T4297] EXT4-fs (loop4): unmounting filesystem. [ 134.896634][ T5847] netlink: del zone limit has 4 unknown bytes [ 137.916154][ T5880] loop4: detected capacity change from 0 to 256 [ 137.983415][ T5880] FAT-fs (loop4): Directory bread(block 64) failed [ 137.985437][ T5880] FAT-fs (loop4): Directory bread(block 65) failed [ 137.997674][ T5880] FAT-fs (loop4): Directory bread(block 66) failed [ 138.003778][ T5880] FAT-fs (loop4): Directory bread(block 67) failed [ 138.013932][ T5880] FAT-fs (loop4): Directory bread(block 68) failed [ 138.015828][ T5880] FAT-fs (loop4): Directory bread(block 69) failed [ 138.027097][ T5880] FAT-fs (loop4): Directory bread(block 70) failed [ 138.057088][ T5880] FAT-fs (loop4): Directory bread(block 71) failed [ 138.059382][ T5880] FAT-fs (loop4): Directory bread(block 72) failed [ 138.068885][ T5880] FAT-fs (loop4): Directory bread(block 73) failed [ 141.798141][ T5915] loop1: detected capacity change from 0 to 8 [ 143.746723][ T5935] loop1: detected capacity change from 0 to 256 [ 143.767044][ T5935] FAT-fs (loop1): Directory bread(block 64) failed [ 143.778192][ T5935] FAT-fs (loop1): Directory bread(block 65) failed [ 143.780066][ T5935] FAT-fs (loop1): Directory bread(block 66) failed [ 143.781868][ T5935] FAT-fs (loop1): Directory bread(block 67) failed [ 143.783678][ T5935] FAT-fs (loop1): Directory bread(block 68) failed [ 143.791986][ T5935] FAT-fs (loop1): Directory bread(block 69) failed [ 143.793819][ T5935] FAT-fs (loop1): Directory bread(block 70) failed [ 143.809273][ T5935] FAT-fs (loop1): Directory bread(block 71) failed [ 143.811226][ T5935] FAT-fs (loop1): Directory bread(block 72) failed [ 143.813026][ T5935] FAT-fs (loop1): Directory bread(block 73) failed [ 143.955585][ T5944] fuse: Bad value for 'fd' [ 143.981182][ T5935] syz.1.420: attempt to access beyond end of device [ 143.981182][ T5935] loop1: rw=2051, sector=1224, nr_sectors = 128 limit=256 [ 146.312505][ T5951] netlink: 'syz.4.424': attribute type 1 has an invalid length. [ 146.413566][ T5954] device bond1 entered promiscuous mode [ 147.136753][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 147.143897][ T5954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.365405][ T5951] device ip6gretap1 entered promiscuous mode [ 147.367577][ T5951] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 147.372947][ T5963] netlink: 'syz.1.427': attribute type 11 has an invalid length. [ 147.432141][ T4388] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 147.460166][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 147.612828][ T4581] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 148.252467][ T5973] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 148.794645][ T5985] loop2: detected capacity change from 0 to 256 [ 148.816733][ T5985] FAT-fs (loop2): Directory bread(block 64) failed [ 148.823921][ T5985] FAT-fs (loop2): Directory bread(block 65) failed [ 148.825858][ T5985] FAT-fs (loop2): Directory bread(block 66) failed [ 148.828251][ T5985] FAT-fs (loop2): Directory bread(block 67) failed [ 148.830030][ T5985] FAT-fs (loop2): Directory bread(block 68) failed [ 148.831749][ T5985] FAT-fs (loop2): Directory bread(block 69) failed [ 148.833575][ T5985] FAT-fs (loop2): Directory bread(block 70) failed [ 148.835507][ T5985] FAT-fs (loop2): Directory bread(block 71) failed [ 148.837332][ T5985] FAT-fs (loop2): Directory bread(block 72) failed [ 148.844415][ T5985] FAT-fs (loop2): Directory bread(block 73) failed [ 148.917580][ T5985] syz.2.436: attempt to access beyond end of device [ 148.917580][ T5985] loop2: rw=2051, sector=1224, nr_sectors = 128 limit=256 [ 149.139712][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 152.846581][ T6030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.451'. [ 159.336240][ T6099] overlayfs: failed to clone upperpath [ 160.342024][ T6108] tipc: Started in network mode [ 160.343619][ T6108] tipc: Node identity 4, cluster identity 4711 [ 160.345405][ T6108] tipc: Node number set to 4 [ 160.404577][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 160.765676][ T6129] overlayfs: failed to clone upperpath [ 163.051322][ T6156] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 163.608050][ T4303] Bluetooth: hci4: command 0x0406 tx timeout [ 163.923355][ T6156] bond2: (slave gretap1): making interface the new active one [ 163.945630][ T6156] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 164.095179][ T6156] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 164.984366][ T6178] tipc: Enabled bearer , priority 10 [ 165.032752][ T6178] tipc: Enabled bearer , priority 10 [ 169.515893][ T6218] netlink: 20 bytes leftover after parsing attributes in process `syz.5.502'. [ 170.800154][ T6231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.873029][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 170.873041][ T27] audit: type=1326 audit(171.236:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6233 comm="syz.2.509" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa535a7a8 code=0x0 [ 173.055242][ T27] audit: type=1326 audit(173.416:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1f5a7a8 code=0x7fc00000 [ 173.087136][ T27] audit: type=1326 audit(173.446:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1f5a7a8 code=0x7fc00000 [ 173.148868][ T27] audit: type=1326 audit(173.516:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1f5a7a8 code=0x7fc00000 [ 173.244807][ T6262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.517'. [ 173.944868][ T27] audit: type=1326 audit(173.636:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1f5a7a8 code=0x7fc00000 [ 174.154214][ T27] audit: type=1326 audit(174.326:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb1f5a7a8 code=0x7fc00000 [ 179.467822][ T6317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.531'. [ 181.250493][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.543'. [ 181.256610][ T6323] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 182.238379][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.543'. [ 184.027985][ T4313] Bluetooth: hci2: command 0x0406 tx timeout [ 184.093903][ T6345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.180231][ T6365] device bridge_slave_0 left promiscuous mode [ 185.182159][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.288243][ T6365] device bridge_slave_1 left promiscuous mode [ 185.314970][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.006807][ T6365] bond0: (slave bond_slave_0): Releasing backup interface [ 186.096901][ T6365] bond0: (slave bond_slave_1): Releasing backup interface [ 186.194449][ T6365] team0: Port device team_slave_0 removed [ 186.197586][ T6365] team0: Port device team_slave_1 removed [ 186.200041][ T6365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.202599][ T6365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.205675][ T6365] bond1: (slave ip6gretap1): Removing an active aggregator [ 186.208862][ T6365] bond1: (slave ip6gretap1): Releasing backup interface [ 186.260905][ T6365] device ip6gretap1 left promiscuous mode [ 186.806086][ T6365] bond2: (slave gretap1): Releasing active interface [ 187.049278][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.051069][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.553392][ T6399] netlink: 'syz.4.560': attribute type 12 has an invalid length. [ 191.045126][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.066553][ T6434] device bridge_slave_0 left promiscuous mode [ 191.094195][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.129726][ T6434] device bridge_slave_1 left promiscuous mode [ 191.131693][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.170748][ T6434] bond0: (slave bond_slave_0): Releasing backup interface [ 191.228066][ T6434] bond0: (slave bond_slave_1): Releasing backup interface [ 191.316683][ T6434] team0: Port device team_slave_0 removed [ 191.326194][ T6434] team0: Port device team_slave_1 removed [ 191.328816][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.331170][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.334798][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.337158][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.350441][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.573'. [ 191.374475][ T6448] netlink: 'syz.5.574': attribute type 12 has an invalid length. [ 191.632089][ T6457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.828348][ T6485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.587'. [ 195.853227][ T6488] netlink: 'syz.1.586': attribute type 12 has an invalid length. [ 195.857548][ T6496] netlink: 28 bytes leftover after parsing attributes in process `syz.5.588'. [ 195.993181][ T6489] netlink: 'syz.5.588': attribute type 1 has an invalid length. [ 196.045109][ T6489] device bond1 entered promiscuous mode [ 196.847699][ T6493] bond1: (slave ip6gretap1): making interface the new active one [ 196.884080][ T6493] device ip6gretap1 entered promiscuous mode [ 196.892077][ T6493] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 217.159835][ T6727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.646'. [ 218.238194][ T6739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.256674][ T6743] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 218.371671][ T6745] netlink: 'syz.4.651': attribute type 1 has an invalid length. [ 218.384110][ T6745] device bond3 entered promiscuous mode [ 218.435827][ T6749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.439220][ T6749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.444948][ T6749] bond0: (slave bond_slave_0): Releasing backup interface [ 219.228541][ T6749] bond0: (slave bond_slave_1): Releasing backup interface [ 219.331021][ T6749] team0: Port device team_slave_0 removed [ 219.345210][ T6749] team0: Port device team_slave_1 removed [ 219.347526][ T6749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.350087][ T6749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.353222][ T6749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.355519][ T6749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.458695][ T6750] bond3: (slave ip6gretap2): making interface the new active one [ 219.461306][ T6750] device ip6gretap2 entered promiscuous mode [ 219.464091][ T6750] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 220.624445][ T6745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.651'. [ 220.627541][ T6745] device bond3 left promiscuous mode [ 220.658996][ T6745] device ip6gretap2 left promiscuous mode [ 220.661787][ T6745] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.663973][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 220.716417][ T6768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.745769][ T4303] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 220.749426][ T4303] CPU: 1 PID: 4303 Comm: kworker/u5:3 Not tainted 6.1.141-syzkaller #0 [ 220.751848][ T4303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.754708][ T4303] Workqueue: hci4 hci_rx_work [ 220.756142][ T4303] Call trace: [ 220.757047][ T4303] dump_backtrace+0x1c8/0x1f4 [ 220.758357][ T4303] show_stack+0x2c/0x3c [ 220.759590][ T4303] __dump_stack+0x30/0x40 [ 220.760812][ T4303] dump_stack_lvl+0xf8/0x160 [ 220.762079][ T4303] dump_stack+0x1c/0x5c [ 220.763277][ T4303] sysfs_create_dir_ns+0x22c/0x24c [ 220.764689][ T4303] kobject_add_internal+0x5a8/0xb30 [ 220.766128][ T4303] kobject_add+0x134/0x1f8 [ 220.767373][ T4303] device_add+0x3f0/0xf94 [ 220.768602][ T4303] hci_conn_add_sysfs+0xbc/0x1cc [ 220.770019][ T4303] le_conn_complete_evt+0xa24/0xf8c [ 220.771561][ T4303] hci_le_enh_conn_complete_evt+0x114/0x3f8 [ 220.773221][ T4303] hci_le_meta_evt+0x2c0/0x4a4 [ 220.774520][ T4303] hci_event_packet+0x6ac/0xf08 [ 220.775992][ T4303] hci_rx_work+0x324/0xaa0 [ 220.777272][ T4303] process_one_work+0x7f4/0x13a8 [ 220.778717][ T4303] worker_thread+0x8c8/0xfbc [ 220.779983][ T4303] kthread+0x250/0x2d8 [ 220.781184][ T4303] ret_from_fork+0x10/0x20 [ 220.782944][ T4303] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 220.834090][ T4303] Bluetooth: hci4: failed to register connection device [ 226.870044][ T6813] lo speed is unknown, defaulting to 1000 [ 226.894212][ T6813] lo speed is unknown, defaulting to 1000 [ 227.603715][ T6813] lo speed is unknown, defaulting to 1000 [ 227.664966][ T6822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.667193][ T6822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.670897][ T6822] device bridge_slave_0 left promiscuous mode [ 227.672942][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.710481][ T6822] device bridge_slave_1 left promiscuous mode [ 227.713623][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.762168][ T6813] infiniband sz1: set active [ 227.764187][ T6813] infiniband sz1: added lo [ 227.782961][ T6813] infiniband sz1: Couldn't open port 1 [ 227.805618][ T6822] bond0: (slave bond_slave_0): Releasing backup interface [ 227.824391][ T6813] RDS/IB: sz1: added [ 227.825975][ T6813] smc: adding ib device sz1 with port count 1 [ 227.828572][ T6813] smc: ib device sz1 port 1 has pnetid [ 227.868220][ T6822] bond0: (slave bond_slave_1): Releasing backup interface [ 227.961528][ T6822] team0: Port device team_slave_0 removed [ 227.977156][ T6822] team0: Port device team_slave_1 removed [ 227.979765][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.981920][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.984916][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.987116][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.996093][ T6822] bond0: (slave wlan1): Releasing backup interface [ 228.095626][ T6822] bond1: (slave ip6erspan0): Releasing active interface [ 228.147828][ T4346] lo speed is unknown, defaulting to 1000 [ 228.154327][ T4287] lo speed is unknown, defaulting to 1000 [ 228.157824][ T6813] lo speed is unknown, defaulting to 1000 [ 228.211304][ T6813] lo speed is unknown, defaulting to 1000 [ 228.246900][ T6813] lo speed is unknown, defaulting to 1000 [ 228.280094][ T6813] lo speed is unknown, defaulting to 1000 [ 228.312737][ T6813] lo speed is unknown, defaulting to 1000 [ 233.764359][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 239.307986][ T6940] netlink: 'syz.4.707': attribute type 10 has an invalid length. [ 240.586934][ T6959] syz.1.710 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 240.642561][ T6939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.853595][ T6978] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 241.936073][ T6981] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 248.516557][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.518391][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.541851][ T7055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.738'. [ 248.544419][ T7055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.738'. [ 249.274245][ T7069] netlink: 96 bytes leftover after parsing attributes in process `syz.3.742'. [ 249.462860][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.745'. [ 256.754093][ T7138] trusted_key: encrypted_key: insufficient parameters specified [ 262.432347][ T7195] infiniband syz1: set active [ 262.433686][ T7195] infiniband syz1: added syz_tun [ 262.442833][ T7195] infiniband syz1: Couldn't open port 1 [ 262.464847][ T7195] RDS/IB: syz1: added [ 262.466036][ T7195] smc: adding ib device syz1 with port count 1 [ 262.467814][ T7195] smc: ib device syz1 port 1 has pnetid [ 265.272087][ T7233] device vlan2 entered promiscuous mode [ 265.273966][ T7233] device syz_tun entered promiscuous mode [ 267.693101][ T7256] fuse: Unknown parameter 'fd18446744073709551615' [ 268.304363][ T7269] ptrace attach of "./syz-executor exec"[4307] was attempted by ""[7269] [ 270.306686][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.810'. [ 272.933891][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 272.947021][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 277.540187][ T7392] bridge0: port 3(vlan2) entered blocking state [ 277.542271][ T7392] bridge0: port 3(vlan2) entered disabled state [ 277.545342][ T7392] device vlan2 entered promiscuous mode [ 277.546946][ T7392] device bond0 entered promiscuous mode [ 277.554096][ T7392] device bond_slave_0 entered promiscuous mode [ 277.556128][ T7392] device bond_slave_1 entered promiscuous mode [ 278.500685][ T7410] netlink: del zone limit has 4 unknown bytes [ 279.126128][ T7412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.848'. [ 280.256127][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 280.303792][ T7429] netlink: 'syz.3.855': attribute type 5 has an invalid length. [ 280.306098][ T7429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.855'. [ 280.311350][ T7429] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 280.313721][ T7429] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 280.316302][ T7429] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 280.318792][ T7429] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 280.321444][ T7429] device geneve2 entered promiscuous mode [ 280.575792][ T7438] lo speed is unknown, defaulting to 1000 [ 280.577953][ T7438] lo speed is unknown, defaulting to 1000 [ 280.590963][ T7438] lo speed is unknown, defaulting to 1000 [ 280.607245][ T7438] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 280.630855][ T7438] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 281.483109][ T7438] lo speed is unknown, defaulting to 1000 [ 281.485608][ T7438] lo speed is unknown, defaulting to 1000 [ 281.487682][ T7438] lo speed is unknown, defaulting to 1000 [ 281.491208][ T7438] lo speed is unknown, defaulting to 1000 [ 281.493315][ T7438] lo speed is unknown, defaulting to 1000 [ 281.813587][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 285.893148][ T7480] netlink: del zone limit has 4 unknown bytes [ 286.962731][ T7485] device ip6tnl2 entered promiscuous mode [ 287.153683][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'. [ 287.169751][ T7490] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 288.285131][ T7507] netlink: 32 bytes leftover after parsing attributes in process `syz.3.878'. [ 288.297444][ T7507] netlink: 32 bytes leftover after parsing attributes in process `syz.3.878'. [ 294.427729][ T7554] batman_adv: batadv0: Adding interface: ip6gretap3 [ 294.432683][ T7554] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.443512][ T7554] batman_adv: batadv0: Not using interface ip6gretap3 (retrying later): interface not active [ 294.452986][ T7554] batman_adv: batadv0: Removing interface: ip6gretap3 [ 296.603269][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.902'. [ 297.733861][ T7600] syz.4.906 sent an empty control message without MSG_MORE. [ 301.829573][ T7615] tipc: Enabling of bearer rejected, failed to enable media [ 302.243229][ T7656] netlink: 'syz.3.923': attribute type 10 has an invalid length. [ 302.365181][ T7656] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 302.375090][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.923'. [ 303.245703][ T7657] bond0: (slave bridge0): Releasing backup interface [ 303.891535][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 307.792951][ T7776] netlink: 'syz.4.939': attribute type 10 has an invalid length. [ 307.798817][ T7776] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 307.808859][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'. [ 307.870434][ T7776] bond0: (slave bridge0): Releasing backup interface [ 310.409481][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.411266][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.665324][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 312.669453][ T7828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.956'. [ 313.218274][ T7840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.955'. [ 314.161175][ T7848] device gtp0 entered promiscuous mode [ 314.230285][ T7851] tipc: Enabling of bearer rejected, already enabled [ 314.237591][ T7851] tipc: Enabled bearer , priority 0 [ 315.046273][ T27] audit: type=1326 audit(315.406:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.4.960" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c95a7a8 code=0x0 [ 318.346618][ T7921] MPTCP: kernel_bind error, err=-98 [ 325.487320][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'. [ 325.515791][ T8018] Unable to handle kernel paging request at virtual address dfff800000000068 [ 325.518615][ T8018] KASAN: null-ptr-deref in range [0x0000000000000340-0x0000000000000347] [ 325.520986][ T8018] Mem abort info: [ 325.521945][ T8018] ESR = 0x0000000096000006 [ 325.523112][ T8018] EC = 0x25: DABT (current EL), IL = 32 bits [ 325.524786][ T8018] SET = 0, FnV = 0 [ 325.525820][ T8018] EA = 0, S1PTW = 0 [ 325.526863][ T8018] FSC = 0x06: level 2 translation fault [ 325.528441][ T8018] Data abort info: [ 325.529510][ T8018] ISV = 0, ISS = 0x00000006 [ 325.530802][ T8018] CM = 0, WnR = 0 [ 325.531802][ T8018] [dfff800000000068] address between user and kernel address ranges [ 325.534137][ T8018] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 325.536102][ T8018] Modules linked in: [ 325.537135][ T8018] CPU: 1 PID: 8018 Comm: syz.1.996 Not tainted 6.1.141-syzkaller #0 [ 325.539278][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.542028][ T8018] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 325.544199][ T8018] pc : find_match+0xa0/0xb0c [ 325.545449][ T8018] lr : find_match+0x74/0xb0c [ 325.546690][ T8018] sp : ffff800020d16020 [ 325.547830][ T8018] x29: ffff800020d16040 x28: 1fffe0001a49ef44 x27: dfff800000000000 [ 325.550007][ T8018] x26: 0000000000000340 x25: ffff0000d24f7a37 x24: 0000000000000201 [ 325.552223][ T8018] x23: 0000000000000002 x22: ffff0000d24f7a20 x21: 0000000000000000 [ 325.554386][ T8018] x20: 1fffe0001a49ef46 x19: 0000000000000000 x18: 0000000000000000 [ 325.556614][ T8018] x17: 000000000040004e x16: ffff8000082d0750 x15: 0000000000000002 [ 325.558776][ T8018] x14: 000000000000c0fe x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 325.560936][ T8018] x11: ff0080001077fb04 x10: 0000000000000002 x9 : ffff0000d96d9bc0 [ 325.563067][ T8018] x8 : 0000000000000068 x7 : ffff800020d163d0 x6 : 0000000000000002 [ 325.565216][ T8018] x5 : ffff800020d163d0 x4 : ffff800020d163c0 x3 : 0000000000000002 [ 325.567368][ T8018] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 325.569504][ T8018] Call trace: [ 325.570354][ T8018] find_match+0xa0/0xb0c [ 325.571478][ T8018] rt6_nh_find_match+0xcc/0x138 [ 325.572783][ T8018] nexthop_for_each_fib6_nh+0x1a8/0x3d0 [ 325.574287][ T8018] __find_rr_leaf+0x3b8/0x5c8 [ 325.575573][ T8018] fib6_table_lookup+0x308/0x8b8 [ 325.576896][ T8018] ip6_pol_route+0x1f4/0x1024 [ 325.578212][ T8018] ip6_pol_route_output+0x60/0x94 [ 325.579547][ T8018] fib6_rule_lookup+0x258/0x4a8 [ 325.580880][ T8018] ip6_route_output_flags_noref+0x250/0x314 [ 325.582525][ T8018] ip6_route_output_flags+0xe4/0x368 [ 325.583968][ T8018] ip6_dst_lookup_tail+0x274/0x12c0 [ 325.585372][ T8018] ip6_dst_lookup_flow+0x54/0xe0 [ 325.586684][ T8018] inet6_csk_route_req+0x418/0x60c [ 325.588062][ T8018] tcp_v6_route_req+0x2a8/0x3dc [ 325.589376][ T8018] tcp_conn_request+0xa48/0x247c [ 325.590726][ T8018] tcp_v6_conn_request+0x264/0x380 [ 325.592071][ T8018] tcp_rcv_state_process+0x11d4/0x380c [ 325.593521][ T8018] tcp_v6_do_rcv+0x868/0x1128 [ 325.594764][ T8018] tcp_v6_rcv+0x1978/0x1fa0 [ 325.595995][ T8018] ip6_protocol_deliver_rcu+0x928/0x11d0 [ 325.597545][ T8018] ip6_input_finish+0x164/0x298 [ 325.598854][ T8018] NF_HOOK+0x2c4/0x358 [ 325.599938][ T8018] ip6_input+0x90/0xa8 [ 325.601069][ T8018] ip6_rcv_finish+0x1f4/0x220 [ 325.602355][ T8018] NF_HOOK+0x2c4/0x358 [ 325.603432][ T8018] ipv6_rcv+0x9c/0xbc [ 325.604494][ T8018] __netif_receive_skb+0xcc/0x2ac [ 325.605891][ T8018] netif_receive_skb+0x1e8/0x8f0 [ 325.607220][ T8018] tun_rx_batched+0x478/0x5b4 [ 325.608523][ T8018] tun_get_user+0x1fa0/0x3240 [ 325.609786][ T8018] tun_chr_write_iter+0xfc/0x204 [ 325.611204][ T8018] vfs_write+0x5ac/0x7c4 [ 325.612352][ T8018] ksys_write+0x120/0x210 [ 325.613507][ T8018] __arm64_sys_write+0x7c/0x90 [ 325.614800][ T8018] invoke_syscall+0x98/0x2bc [ 325.616030][ T8018] el0_svc_common+0x138/0x258 [ 325.617320][ T8018] do_el0_svc+0x58/0x13c [ 325.618513][ T8018] el0_svc+0x58/0x138 [ 325.619592][ T8018] el0t_64_sync_handler+0x84/0xf0 [ 325.620991][ T8018] el0t_64_sync+0x18c/0x190 [ 325.622218][ T8018] Code: 96055809 f94002c8 910d011a d343ff48 (387b6908) [ 325.624072][ T8018] ---[ end trace 0000000000000000 ]--- [ 326.063352][ T8018] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 326.065456][ T8018] SMP: stopping secondary CPUs [ 326.066759][ T8018] Kernel Offset: disabled [ 326.067949][ T8018] CPU features: 0x080000,02070084,26017203 [ 326.069567][ T8018] Memory Limit: none [ 326.504041][ T8018] Rebooting in 86400 seconds..