last executing test programs: 14.563738092s ago: executing program 4 (id=313): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$packet(r0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, 0x0, 0x0, 0x33, 0x0) 13.615945676s ago: executing program 4 (id=317): socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) syz_emit_ethernet(0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756f7461c667727071756f74615f626c6f636b5f68646c69"]) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 13.499617777s ago: executing program 0 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x3, 0x14, &(0x7f0000000180)=""/88) recvmsg$unix(0xffffffffffffffff, 0x0, 0x42) 9.687048215s ago: executing program 1 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac010902"], 0x0) bind$can_j1939(r5, &(0x7f0000000100), 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 9.671420675s ago: executing program 0 (id=320): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)={{0x108, 0x5, 0x9, 0x163, 0x286, 0x9742, 0x128, 0x8}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r3, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) 7.443974288s ago: executing program 3 (id=322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x2a2, 0x0, 0x0, 0x3, 0x32, 0x0, 0x82000, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 7.410497259s ago: executing program 4 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0xf5000000, 0xffffffffffffffff}}, 0x28) write$FUSE_OPEN(r0, 0x0, 0x0) 7.409461969s ago: executing program 0 (id=324): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000190c0)=0x7) setregid(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000125c0), 0x8000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000012600)=@l={0x92, 0x8, 0xb0, 0x1b, 0x8, 0xdb, 0x8}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000ac1e000100800000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a0101000000000000000000000000000a010100000000000000000000000000640101000000000000000000000000003c000000000000000a0002001c000400feff4e244e230000fc0100"/116], 0xbc}}, 0x0) sendto$inet6(r3, &(0x7f0000000080), 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) 7.127995333s ago: executing program 4 (id=325): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "aef0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x40, 0xb, 0x3, "a32100"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.599249931s ago: executing program 3 (id=326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$NFT_BATCH(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.522394212s ago: executing program 0 (id=327): r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000040085000000330000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x13, 0x1, {0x80000003, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 6.416071604s ago: executing program 3 (id=328): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x26d, &(0x7f0000000600)="$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") chroot(&(0x7f0000000000)='./file0/../file0\x00') 6.414611364s ago: executing program 1 (id=329): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 6.329729995s ago: executing program 2 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x3, 0x14, &(0x7f0000000180)=""/88) recvmsg$unix(0xffffffffffffffff, 0x0, 0x42) 6.294939206s ago: executing program 1 (id=331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$KDFONTOP_SET(r6, 0x4b6a, &(0x7f0000000000)={0x200e, 0x200c, 0x3, 0x1d, 0x200b, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xee01, 0xee01) 5.506796648s ago: executing program 3 (id=332): socketpair(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r3, 0x0}]) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) 4.972406315s ago: executing program 0 (id=333): socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) syz_emit_ethernet(0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756f7461c667727071756f74615f626c6f636b5f68646c69"]) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 4.922304726s ago: executing program 4 (id=334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x20048800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x240480d1}, 0x0) 4.870999907s ago: executing program 1 (id=335): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r0], 0x48}}, 0x0) 3.646399975s ago: executing program 2 (id=336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x2a2, 0x0, 0x0, 0x3, 0x32, 0x0, 0x82000, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 3.641463495s ago: executing program 3 (id=337): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000190c0)=0x7) setregid(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000125c0), 0x8000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000012600)=@l={0x92, 0x8, 0xb0, 0x1b, 0x8, 0xdb, 0x8}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000ac1e000100800000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a0101000000000000000000000000000a010100000000000000000000000000640101000000000000000000000000003c000000000000000a0002001c000400feff4e244e230000fc0100"/116], 0xbc}}, 0x0) sendto$inet6(r3, &(0x7f0000000080), 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) 2.613430131s ago: executing program 2 (id=338): r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)=')\x80', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r2, 0x20, &(0x7f0000000440)={&(0x7f0000001340)=""/4092, 0xffc, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_io_uring_setup(0x5020, 0x0, 0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2.263108306s ago: executing program 0 (id=339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac010902"], 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r5}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.262330006s ago: executing program 4 (id=340): landlock_restrict_self(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x8d) pwritev2(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x5405, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0xb, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x800) open$dir(&(0x7f00000000c0)='./file0\x00', 0x101040, 0xc4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) capset(&(0x7f0000000380)={0x19980330}, 0x0) fadvise64(r4, 0xfcff, 0x20000, 0x3) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x677, &(0x7f0000002100)="$eJzs3c1vHGcdB/DvrNdONpTUbZM2RZUSNRIgIhI7Vgrm0oAQyqFCVTlwthInsbJJi+Mit0LUvF97yB9QDr5xQEjcI8qFC9x69bESgksvmNOimZ1db/y6bhOvHT6favw8M888z/ye387szu422gD/t65dSPNhily78MZyub62OtNeW52526snOZakkTS7RYr/dDqdj5Or6S55udxYD1fsdJwHC7NvffLZ2qfdtWa9VPs3xnbpN5yVesm5JGN1+bjGu77XeMf3Gq7oZ6ZM2Ple4mDUxpN0Kv960N3yk789028Z0Nqu955nPnAEFN3XzS0mkxP1hV7eB3RfFbs3AkfayqgDAAAAgAPw7HrWs5yTo44DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjpL69/+Lemn06udS9H7/f6Lelrp+uJzd3+4Pn1QcAAAAAAAAAHCAzq5nPcs52VvvFNV3/q9WK6eqv1/Ku7mf+SzmYpYzl6UsZTHTSSYHBppYnltaWpzu9+z9nwFbe17etuflPQI9VpetxzFrAAAAAAAAAHjq/DLXNr7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAw6BIxrpFtZzq1SfTaCY5nmSi3G8l+UevfpQ9HHUAAAAA8AV0htzv2fWsZzkn+/2K6j3/i9X7/uN5N/eylIUspZ353Kg+C+i+62+src6011Zn7pbL1nG/++99hVuNmO5nD9sf+Uy1Rys3s1BtuZjreTtFcSONqmfpTC+e7eP6RRlT8XrX+JCR3ajLcuYf1uUWH+xrsjvZ54cpk1VGxvsZmapjK7Px3O6Z2Oejs/lI02n0gz216UibJvFIzl8f8ngn6rKcz293yvlIbM7E5YGz78Xdc5587c9/+PHt9r07t2/ev3B4pjScsbrsPq+0tmZiZiATLz3NmdhiqsrE6f76tfwgP8qFnMubWcxCfpq5LGU+5/L9qjZXn8/FwCW/Q6auPrL25l6RTNRnaPfBejSm7BHTq1Xfk1nID/N2bmQ+r1X/Xc50vpUruZLZgUf49BDPtI0drvrOl7cN/vzX60orye/qsnKrudfEn7Ayr88N5HXwOXeyahvcspGl5/fxetTL0h93D6X5lbpSHuNXdXk4bM7E9EAmXtg9E7+vnlbut+/dWbw9985wh3v+w7pSXke/OVSvEuX58nz5YFVrj54dZdsLddt4tWzka6L+xqXbr7Gl7XS/rXulrux4pU7U93BbR7pctb20bdtM1XZmoG3z/Va7fz/0NHz5A/DUOvGNExOtf7b+3vqo9evW7dYbx7937NvHXpnI+F/Hv9OcGvtq45XiT/koP994/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx+9997/85cuz2/uKnS6XQ+2KHpKFd6P2d2gAd9+ZlkVFOeSHI4Mv/fTqdTbykOQzy7VzqlY+l8zu5/STLczs0k2zWdHX0SRvzEBDxxl5buvnPp/nvvf3Ph7tyt+Vvz92avXJmdmr3y2sylmwvt+anu31FHCTwJGy/6o44EAAAAAAAAAAAAGNZB/HOCnY9+/CCnCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxR1y6k+TBFpqcuTpXra6sz7XLp1Tf2bCZpJCl+lhQfJ1fTXTI5MFyx03EeLMy+9clna59ujNXs7d/Yrd9wVuol55KM1eXjGu/6Fx6v6M+wTNj5XuJg1P4XAAD//wBtBiI=") 1.30802397s ago: executing program 1 (id=341): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75b, &(0x7f0000000d40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000001}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x610, 0x2a0, 0x458, 0x388, 0x1d0, 0x388, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, 0x0, {[{{@uncond, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x7400}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) 1.216010832s ago: executing program 2 (id=342): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 193.485567ms ago: executing program 2 (id=343): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) socket(0x15, 0x5, 0x0) r0 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r0}) r1 = syz_io_uring_setup(0x4bf9, &(0x7f0000000280)={0x0, 0xfffffffd, 0x10100, 0xfffffffd, 0x200002}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x20, 0x0, @fd=r1, 0x45, 0x0, 0x0, 0x5}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 115.168238ms ago: executing program 3 (id=344): r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000040085000000330000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x13, 0x1, {0x80000003, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 56.067979ms ago: executing program 1 (id=345): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x6, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r0, r1, 0x6, 0x0, @val=@netfilter={0xa, 0x0, 0x3}}, 0x3c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r1, 0x6, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 2 (id=346): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts. [ 41.334415][ T4015] cgroup: Unknown subsys name 'net' [ 41.611403][ T4015] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.949727][ T4015] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 43.498380][ T4029] chnl_net:caif_netlink_parms(): no params data found [ 43.518776][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 43.567295][ T4028] chnl_net:caif_netlink_parms(): no params data found [ 43.622709][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.625297][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.627996][ T4026] device bridge_slave_0 entered promiscuous mode [ 43.634609][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.636765][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.639718][ T4026] device bridge_slave_1 entered promiscuous mode [ 43.644608][ T4029] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.647603][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.650413][ T4029] device bridge_slave_0 entered promiscuous mode [ 43.653624][ T4027] chnl_net:caif_netlink_parms(): no params data found [ 43.664557][ T4030] chnl_net:caif_netlink_parms(): no params data found [ 43.674273][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.676427][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.680229][ T4029] device bridge_slave_1 entered promiscuous mode [ 43.723798][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.726011][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.728699][ T4028] device bridge_slave_0 entered promiscuous mode [ 43.733455][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.737200][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.739182][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.741958][ T4028] device bridge_slave_1 entered promiscuous mode [ 43.763696][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.780189][ T4029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.801288][ T4029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.806599][ T4028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.842336][ T4028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.862897][ T4026] team0: Port device team_slave_0 added [ 43.866776][ T4026] team0: Port device team_slave_1 added [ 43.890922][ T4027] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.893387][ T4027] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.902382][ T4027] device bridge_slave_0 entered promiscuous mode [ 43.907429][ T4029] team0: Port device team_slave_0 added [ 43.909472][ T4030] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.911489][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.914363][ T4030] device bridge_slave_0 entered promiscuous mode [ 43.920717][ T4028] team0: Port device team_slave_0 added [ 43.929643][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.931671][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.939068][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.943181][ T4027] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.945549][ T4027] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.948349][ T4027] device bridge_slave_1 entered promiscuous mode [ 43.951677][ T4029] team0: Port device team_slave_1 added [ 43.959757][ T4030] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.961706][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.964542][ T4030] device bridge_slave_1 entered promiscuous mode [ 43.968457][ T4028] team0: Port device team_slave_1 added [ 43.976705][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.978668][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.986402][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.022563][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.024635][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.035049][ T4028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.049779][ T4027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.054051][ T4030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.057718][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.059731][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.067523][ T4028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.072267][ T4027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.075352][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.077454][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.084612][ T4029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.095237][ T4030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.113655][ T4029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.115846][ T4029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.122858][ T4029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.187396][ T4026] device hsr_slave_0 entered promiscuous mode [ 44.225423][ T4026] device hsr_slave_1 entered promiscuous mode [ 44.267540][ T4030] team0: Port device team_slave_0 added [ 44.277938][ T4027] team0: Port device team_slave_0 added [ 44.281376][ T4027] team0: Port device team_slave_1 added [ 44.291018][ T4030] team0: Port device team_slave_1 added [ 44.357016][ T4029] device hsr_slave_0 entered promiscuous mode [ 44.395301][ T4029] device hsr_slave_1 entered promiscuous mode [ 44.445047][ T4029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.447442][ T4029] Cannot create hsr debugfs directory [ 44.486933][ T4028] device hsr_slave_0 entered promiscuous mode [ 44.525338][ T4028] device hsr_slave_1 entered promiscuous mode [ 44.565082][ T4028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.567148][ T4028] Cannot create hsr debugfs directory [ 44.579099][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.581034][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.588290][ T4027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.621334][ T4027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.623269][ T4027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.630836][ T4027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.640347][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.642386][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.650167][ T4030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.675955][ T4030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.677828][ T4030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.685292][ T4030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.826933][ T4027] device hsr_slave_0 entered promiscuous mode [ 44.875231][ T4027] device hsr_slave_1 entered promiscuous mode [ 44.924912][ T4027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.927175][ T4027] Cannot create hsr debugfs directory [ 45.037247][ T4030] device hsr_slave_0 entered promiscuous mode [ 45.075551][ T4030] device hsr_slave_1 entered promiscuous mode [ 45.115062][ T4030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.117305][ T4030] Cannot create hsr debugfs directory [ 45.256634][ T4017] Bluetooth: hci1: command 0x0409 tx timeout [ 45.258971][ T4017] Bluetooth: hci4: command 0x0409 tx timeout [ 45.260872][ T4017] Bluetooth: hci2: command 0x0409 tx timeout [ 45.261389][ T4029] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.262705][ T4017] Bluetooth: hci3: command 0x0409 tx timeout [ 45.267046][ T4017] Bluetooth: hci0: command 0x0409 tx timeout [ 45.317023][ T4029] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.361390][ T4029] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.436222][ T4029] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.508547][ T4026] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.567278][ T4026] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.610882][ T4026] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.663571][ T4026] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.794633][ T4028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.845811][ T4028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.891011][ T4028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.927591][ T4028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.991121][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.007522][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.026806][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.029890][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.033644][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.045758][ T4030] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.101233][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.104031][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.107598][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.110698][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.113915][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.116046][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.120546][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.144738][ T4030] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.189346][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.198831][ T4030] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.247248][ T4030] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.287684][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.290555][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.293324][ T1798] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.295385][ T1798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.299998][ T4027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.338057][ T4027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.381387][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.384214][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.387286][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.389314][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.391748][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.396040][ T4027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.438673][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.441481][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.444100][ T1798] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.446110][ T1798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.460841][ T4027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.507841][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.511088][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.514059][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.519198][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.540714][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.544140][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.548458][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.551679][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.554719][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.559819][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.563134][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.567107][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.587964][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.591400][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.594505][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.598161][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.601095][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.603816][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.641256][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.644231][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.648452][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.651160][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.662686][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.670104][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.690821][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.730892][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.733670][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.741041][ T4028] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.768712][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.771540][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.774357][ T1614] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.776556][ T1614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.780116][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.807295][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.809735][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.812801][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.815941][ T1614] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.817931][ T1614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.846439][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.849929][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.853094][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.859465][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.872444][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.898055][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.900964][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.904665][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.908795][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.911722][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.914023][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.917051][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.919343][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.921619][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.924571][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.936997][ T4027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.941813][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.946661][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.951652][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.968684][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.971691][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.982738][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.986726][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.989396][ T1798] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.991372][ T1798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.994380][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.999915][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.002528][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.009451][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.026361][ T4027] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.028852][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.031720][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.034312][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.036342][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.055075][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.058756][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.061848][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.067640][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.083916][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.088332][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.091411][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.094516][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.101533][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.104595][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.108799][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.110856][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.113277][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.118262][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.122154][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.126398][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.144317][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.148705][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.151449][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.153513][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.162841][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.176227][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.179054][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.181761][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.184484][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.198923][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.202283][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.208595][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.211572][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.214659][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.229749][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.233134][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.237718][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.241463][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.247944][ T4026] device veth0_vlan entered promiscuous mode [ 47.258298][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.261029][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.263721][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.267843][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.276876][ T4026] device veth1_vlan entered promiscuous mode [ 47.288345][ T4027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.292041][ T4027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.295446][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.298199][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.300488][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.302661][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.306969][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.321924][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.335945][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 47.340257][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 47.342072][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 47.344513][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 47.348300][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.351085][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.356824][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.359628][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 47.362552][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.372281][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.399586][ T4029] device veth0_vlan entered promiscuous mode [ 47.412629][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.417978][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.431893][ T4026] device veth0_macvtap entered promiscuous mode [ 47.444639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.449791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.452731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.463423][ T4029] device veth1_vlan entered promiscuous mode [ 47.484103][ T4026] device veth1_macvtap entered promiscuous mode [ 47.492841][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.499324][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.502070][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.504687][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.510507][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.525716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.528521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.533150][ T4028] device veth0_vlan entered promiscuous mode [ 47.542264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.546512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.550894][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.557809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.560656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.569529][ T4029] device veth0_macvtap entered promiscuous mode [ 47.579693][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.588956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.591739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.594558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.598783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.601180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.604175][ T4029] device veth1_macvtap entered promiscuous mode [ 47.610068][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.612367][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.616546][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.619446][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.627758][ T4028] device veth1_vlan entered promiscuous mode [ 47.637333][ T4026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.639933][ T4026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.642287][ T4026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.644697][ T4026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.663933][ T4027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.670413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.673260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.676535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.699605][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.702854][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.710369][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.717696][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.720629][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.723836][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.750661][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.753814][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.759509][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.764368][ T4029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.770100][ T4029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.772511][ T4029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.782741][ T4029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.793451][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.797994][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.822519][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.830740][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.833993][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.842586][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.848614][ T4028] device veth0_macvtap entered promiscuous mode [ 47.853917][ T4028] device veth1_macvtap entered promiscuous mode [ 47.864094][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.867475][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.870238][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.872783][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.879008][ T4030] device veth0_vlan entered promiscuous mode [ 47.903755][ T4030] device veth1_vlan entered promiscuous mode [ 47.940645][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.943499][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.948169][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.950981][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.955855][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.981803][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.986438][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.989190][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.992877][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.999814][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.002778][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.024562][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.028025][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.030633][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.033435][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.038644][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.054289][ T4030] device veth0_macvtap entered promiscuous mode [ 48.059203][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.061986][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.065302][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.068243][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.076141][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.089405][ T4028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.091873][ T4028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.094233][ T4028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.098404][ T4028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.118220][ T1798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.120558][ T1798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.122846][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.123522][ T4030] device veth1_macvtap entered promiscuous mode [ 48.133015][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.138152][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.141210][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.143867][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.153453][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.156315][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.159160][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.163351][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.169030][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.171914][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.175621][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.178461][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.181341][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.183993][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.187359][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.190224][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.192671][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.200367][ T4027] device veth0_vlan entered promiscuous mode [ 48.227502][ T4027] device veth1_vlan entered promiscuous mode [ 48.241196][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.244054][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.250965][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.253888][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.257340][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.260150][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.264602][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.270695][ T1798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.272973][ T1798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.293052][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.297909][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.300750][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.311146][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.314243][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.372054][ T4030] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.374528][ T4030] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.378670][ T4030] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.381113][ T4030] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.397177][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.401461][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.420370][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.423286][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.427401][ T1798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.463354][ T4027] device veth0_macvtap entered promiscuous mode [ 48.524368][ T4027] device veth1_macvtap entered promiscuous mode [ 48.903752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.972226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.241528][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.243843][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.267176][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.270038][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.272688][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.276855][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.279510][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.282249][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.294992][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.297794][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.303754][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.327064][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.329942][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.332570][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.343469][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.346539][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.349275][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.351882][ T4027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.366391][ T4027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.370566][ T4027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.388657][ T1835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.391438][ T1835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.394283][ T1835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.402245][ T1835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.411890][ T1835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.417570][ T4076] Bluetooth: hci1: command 0x040f tx timeout [ 49.419325][ T4076] Bluetooth: hci4: command 0x040f tx timeout [ 49.427641][ T4076] Bluetooth: hci2: command 0x040f tx timeout [ 49.435123][ T4076] Bluetooth: hci3: command 0x040f tx timeout [ 49.436984][ T4076] Bluetooth: hci0: command 0x040f tx timeout [ 49.526956][ T4118] udc-core: couldn't find an available UDC or it's busy [ 49.526980][ T4118] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.351731][ T4027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.360198][ T4027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.362636][ T4027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.365567][ T4027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.413581][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.420431][ T4113] lo speed is unknown, defaulting to 1000 [ 50.422190][ T4113] lo speed is unknown, defaulting to 1000 [ 50.427306][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.430411][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.466263][ T4113] lo speed is unknown, defaulting to 1000 [ 50.470249][ T4113] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.494049][ T1835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.502673][ T4113] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 50.504562][ T1835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.525331][ T1835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.547633][ T4113] lo speed is unknown, defaulting to 1000 [ 50.596880][ T4113] lo speed is unknown, defaulting to 1000 [ 50.795487][ T1614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.799781][ T4113] lo speed is unknown, defaulting to 1000 [ 50.803257][ T1614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.808547][ T1798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.814522][ T1798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.856715][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.859768][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.864047][ T4113] lo speed is unknown, defaulting to 1000 [ 50.869304][ T4113] lo speed is unknown, defaulting to 1000 [ 50.879287][ T1835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.882055][ T1835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.888041][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.767259][ T4085] Bluetooth: hci0: command 0x0419 tx timeout [ 51.772816][ T4085] Bluetooth: hci3: command 0x0419 tx timeout [ 51.780331][ T4085] Bluetooth: hci2: command 0x0419 tx timeout [ 51.783306][ T4085] Bluetooth: hci4: command 0x0419 tx timeout [ 51.789259][ T4085] Bluetooth: hci1: command 0x0419 tx timeout [ 53.486327][ T4148] device veth0_to_team entered promiscuous mode [ 54.406265][ T4075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.475588][ T4075] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.795400][ T4085] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 57.119665][ T4199] loop2: detected capacity change from 0 to 7 [ 57.155888][ T4199] Dev loop2: unable to read RDB block 7 [ 57.157598][ T4199] loop2: unable to read partition table [ 57.159265][ T4199] loop2: partition table beyond EOD, truncated [ 57.161078][ T4199] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 57.807477][ T4085] usb 1-1: device not accepting address 2, error -71 [ 58.314777][ C0] sched: RT throttling activated [ 58.613767][ T4215] udc-core: couldn't find an available UDC or it's busy [ 58.615900][ T4215] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.303173][ T4224] binder: 4223:4224 tried to acquire reference to desc 0, got 1 instead [ 60.322472][ T4224] binder: 4223:4224 not enough space to store 2 fds in buffer [ 60.346997][ T4224] binder: 4223:4224 transaction failed 29201/-22, size 96-24 line 3331 [ 60.371880][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.758474][ T4250] syz.1.38 uses obsolete (PF_INET,SOCK_PACKET) [ 65.148919][ T4274] netlink: 60 bytes leftover after parsing attributes in process `syz.3.45'. [ 65.888930][ T4283] udc-core: couldn't find an available UDC or it's busy [ 65.901928][ T4283] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.989871][ T4292] loop3: detected capacity change from 0 to 2048 [ 67.460951][ T4309] sp0: Synchronizing with TNC [ 67.882388][ T4292] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.958259][ T4315] xt_TPROXY: Can be used only with -p tcp or -p udp [ 69.618335][ T4326] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 69.664399][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.666619][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.025693][ T26] audit: type=1326 audit(70.950:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4347 comm="syz.0.68" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9601c768 code=0x0 [ 73.348036][ T4374] udc-core: couldn't find an available UDC or it's busy [ 73.362878][ T4374] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 75.313520][ T7] cfg80211: failed to load regulatory.db [ 75.653934][ T4414] netlink: 44 bytes leftover after parsing attributes in process `syz.1.87'. [ 81.807033][ T4462] input: syz0 as /devices/virtual/input/input2 [ 82.856977][ T4478] netem: change failed [ 83.050322][ T4482] netlink: 64 bytes leftover after parsing attributes in process `syz.1.109'. [ 83.060328][ T4486] process 'syz.4.110' launched './file2' with NULL argv: empty string added [ 83.901362][ T149] block nbd4: Attempted send on invalid socket [ 83.903781][ T149] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.945607][ T149] block nbd4: Attempted send on invalid socket [ 83.947514][ T149] blk_update_request: I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.981342][ T4489] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 83.984682][ T149] block nbd4: Attempted send on invalid socket [ 83.986585][ T149] blk_update_request: I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.995884][ T4489] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 84.025898][ T227] block nbd4: Attempted send on invalid socket [ 84.027855][ T227] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.031062][ T227] block nbd4: Attempted send on invalid socket [ 84.032825][ T227] blk_update_request: I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.039210][ T4489] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 84.056346][ T227] block nbd4: Attempted send on invalid socket [ 84.058195][ T227] blk_update_request: I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.065273][ T4489] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 84.115559][ T227] block nbd4: Attempted send on invalid socket [ 84.117559][ T227] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.120946][ T227] block nbd4: Attempted send on invalid socket [ 84.122751][ T227] blk_update_request: I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.126627][ T4489] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 84.129573][ T227] block nbd4: Attempted send on invalid socket [ 84.131319][ T227] blk_update_request: I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.144635][ T4489] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 84.149690][ T227] block nbd4: Attempted send on invalid socket [ 84.151424][ T227] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.154971][ T4489] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 84.162744][ T4489] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 84.178092][ T4489] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 88.167999][ T4527] udc-core: couldn't find an available UDC or it's busy [ 88.169911][ T4527] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.209584][ T4530] netlink: 64 bytes leftover after parsing attributes in process `syz.3.122'. [ 96.005503][ T4572] capability: warning: `syz.4.128' uses deprecated v2 capabilities in a way that may be insecure [ 98.935923][ T4576] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 103.049426][ T4613] loop4: detected capacity change from 0 to 32768 [ 103.743662][ T4613] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 103.749768][ T4613] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 103.929566][ T4613] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 103.947730][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 103.950636][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 104.139459][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 188ms [ 104.158461][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 104.165406][ T4613] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 104.434098][ T4630] mmap: syz.3.152 (4630) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 104.670125][ T4648] netlink: 32 bytes leftover after parsing attributes in process `syz.1.155'. [ 104.771577][ T4616] loop0: detected capacity change from 0 to 65536 [ 107.731882][ T4683] use of bytesused == 0 is deprecated and will be removed in the future, [ 107.734615][ T4683] use the actual size instead. [ 109.646674][ T4678] loop4: detected capacity change from 0 to 32768 [ 109.662016][ T4678] ======================================================= [ 109.662016][ T4678] WARNING: The mand mount option has been deprecated and [ 109.662016][ T4678] and is ignored by this kernel. Remove the mand [ 109.662016][ T4678] option from the mount to silence this warning. [ 109.662016][ T4678] ======================================================= [ 110.033161][ T4706] loop1: detected capacity change from 0 to 2048 [ 110.903621][ T4678] JBD2: recovery failed [ 110.905542][ T4678] (syz.4.158,4678,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 110.908215][ T4678] (syz.4.158,4678,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 110.917172][ T4678] (syz.4.158,4678,0):ocfs2_check_volume:2493 ERROR: status = -5 [ 110.941075][ T4678] (syz.4.158,4678,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 110.991572][ T4678] (syz.4.158,4678,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 112.285382][ T4706] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.378351][ T4722] xt_TPROXY: Can be used only with -p tcp or -p udp [ 112.436219][ T4724] loop4: detected capacity change from 0 to 8 [ 112.731791][ T4731] netlink: 36 bytes leftover after parsing attributes in process `syz.0.177'. [ 112.755163][ T4731] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.784038][ T4724] bridge0: port 3(syz_tun) entered blocking state [ 112.792724][ T4724] bridge0: port 3(syz_tun) entered disabled state [ 112.801435][ T4724] device syz_tun entered promiscuous mode [ 112.818389][ T4724] bridge0: port 3(syz_tun) entered blocking state [ 112.820473][ T4724] bridge0: port 3(syz_tun) entered forwarding state [ 112.833454][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 112.876503][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.888315][ T4734] bridge0: port 3(syz_tun) entered blocking state [ 112.890510][ T4734] bridge0: port 3(syz_tun) entered disabled state [ 112.894542][ T4734] device syz_tun entered promiscuous mode [ 112.900047][ T4734] bridge0: port 3(syz_tun) entered blocking state [ 112.901992][ T4734] bridge0: port 3(syz_tun) entered forwarding state [ 113.814174][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b7118934: rx timeout, send abort [ 114.317579][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b7118934: abort rx timeout. Force session deactivation [ 116.165597][ T4760] udc-core: couldn't find an available UDC or it's busy [ 116.178343][ T4760] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 116.886009][ T4767] loop1: detected capacity change from 0 to 2048 [ 117.025474][ T4767] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.116238][ T4779] xt_TPROXY: Can be used only with -p tcp or -p udp [ 117.203941][ T4775] loop0: detected capacity change from 0 to 4096 [ 117.385643][ T4775] ntfs3: Bad value for 'uid' [ 117.428065][ T4775] loop0: detected capacity change from 0 to 512 [ 117.587424][ T4775] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.188: Invalid inode bitmap blk 4 in block_group 0 [ 117.592420][ T4775] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 117.618520][ T4775] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.188: iget: bad extended attribute block 1 [ 117.942494][ T4787] loop2: detected capacity change from 0 to 32768 [ 118.668072][ T4787] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.193 (4787) [ 118.745360][ T4787] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 118.749772][ T4787] BTRFS info (device loop2): turning on sync discard [ 118.751645][ T4787] BTRFS info (device loop2): enabling auto defrag [ 118.753448][ T4787] BTRFS info (device loop2): doing ref verification [ 118.804446][ T4787] BTRFS info (device loop2): use no compression [ 118.806751][ T4787] BTRFS info (device loop2): force clearing of disk cache [ 118.808782][ T4787] BTRFS info (device loop2): disabling free space tree [ 118.810787][ T4787] BTRFS info (device loop2): has skinny extents [ 120.893782][ T4787] BTRFS error (device loop2): open_ctree failed: -22 [ 121.550983][ T4844] loop0: detected capacity change from 0 to 2048 [ 121.612715][ T4802] loop1: detected capacity change from 0 to 32768 [ 121.653004][ T4844] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.661116][ T4802] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.197 (4802) [ 121.700670][ T4802] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 121.703543][ T4802] BTRFS info (device loop1): enabling disk space caching [ 121.715031][ T4802] BTRFS info (device loop1): doing ref verification [ 121.723697][ T4802] BTRFS info (device loop1): use zlib compression, level 3 [ 121.726016][ T4802] BTRFS info (device loop1): force clearing of disk cache [ 121.728019][ T4802] BTRFS info (device loop1): setting nodatacow, compression disabled [ 121.734129][ T4850] xt_TPROXY: Can be used only with -p tcp or -p udp [ 121.761153][ T4802] BTRFS info (device loop1): doing ref verification [ 121.763122][ T4802] BTRFS info (device loop1): disk space caching is enabled [ 121.781639][ T4802] BTRFS info (device loop1): has skinny extents [ 121.948352][ T4802] BTRFS error (device loop1): open_ctree failed: -12 [ 122.047444][ T4870] loop2: detected capacity change from 0 to 1024 [ 122.144351][ T4240] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4240) [ 122.271273][ T4870] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,acl,,errors=continue. Quota mode: writeback. [ 124.305674][ T4075] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.828908][ T4898] netlink: 64 bytes leftover after parsing attributes in process `syz.3.214'. [ 124.855075][ T4075] usb 1-1: Using ep0 maxpacket: 8 [ 124.975215][ T4075] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 124.977815][ T4075] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 124.983423][ T4075] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 125.085172][ T4075] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 125.092713][ T4075] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 125.102161][ T4906] udc-core: couldn't find an available UDC or it's busy [ 125.104621][ T4906] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.108659][ T4075] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 125.314913][ T4075] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 125.318593][ T4075] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 125.319209][ T4910] loop2: detected capacity change from 0 to 512 [ 125.321538][ T4075] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 125.363298][ T4910] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.376222][ T4910] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.419448][ T4910] EXT4-fs (loop2): 1 truncate cleaned up [ 125.423592][ T4910] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000008,i_version,,errors=continue. Quota mode: none. [ 125.554963][ T4075] usb 1-1: string descriptor 0 read error: -22 [ 125.556937][ T4075] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 125.559497][ T4075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.623383][ T4075] adutux 1-1:168.0: interrupt endpoints not found [ 125.884314][ T4886] loop0: detected capacity change from 0 to 1024 [ 125.893743][ T4904] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.896646][ T4904] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.057476][ T4886] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,acl,,errors=continue. Quota mode: writeback. [ 126.614025][ T4902] loop3: detected capacity change from 0 to 131072 [ 127.518946][ T13] usb 1-1: USB disconnect, device number 4 [ 127.639419][ T4902] F2FS-fs (loop3): Test dummy encryption mode enabled [ 127.661685][ T4902] F2FS-fs (loop3): invalid crc value [ 127.835345][ T4902] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.924074][ T4902] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.179738][ T4902] fscrypt (loop3, inode 10): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 129.488279][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.554929][ T4074] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.667627][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.794926][ T4074] usb 1-1: Using ep0 maxpacket: 32 [ 129.915326][ T4074] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 129.918127][ T4074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 130.075113][ T4074] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 130.077974][ T4074] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 130.080572][ T4074] usb 1-1: Product: syz [ 130.082968][ T4074] usb 1-1: Manufacturer: syz [ 130.087973][ T4074] usb 1-1: SerialNumber: syz [ 130.109261][ T4074] usb 1-1: config 0 descriptor?? [ 130.158028][ T4074] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 130.178543][ T4074] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 130.396888][ T13] usb 1-1: USB disconnect, device number 5 [ 130.419104][ T13] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 131.515355][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.517137][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.911381][ T4991] udc-core: couldn't find an available UDC or it's busy [ 132.942860][ T4991] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 133.365338][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 133.666045][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 133.721837][ T4904] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.724542][ T4904] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.729717][ T4904] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.732411][ T4904] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.755699][ T4991] udc-core: couldn't find an available UDC or it's busy [ 133.757807][ T4991] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 133.760910][ T4991] udc-core: couldn't find an available UDC or it's busy [ 133.762940][ T4991] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.450994][ T13] usb 1-1: config 4 has an invalid interface number: 15 but max is 0 [ 134.453350][ T13] usb 1-1: config 4 has no interface number 0 [ 134.457065][ T13] usb 1-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 134.459868][ T13] usb 1-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 134.462552][ T13] usb 1-1: config 4 interface 15 has no altsetting 0 [ 134.621565][ T5002] udc-core: couldn't find an available UDC or it's busy [ 134.623712][ T5002] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.645077][ T13] usb 1-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 134.647709][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.649886][ T13] usb 1-1: Product: syz [ 134.650994][ T13] usb 1-1: Manufacturer: syz [ 134.652281][ T13] usb 1-1: SerialNumber: syz [ 134.847830][ T4988] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.849897][ T4988] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.856689][ T5002] udc-core: couldn't find an available UDC or it's busy [ 134.858714][ T5002] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 134.862633][ T5002] udc-core: couldn't find an available UDC or it's busy [ 134.881006][ T5002] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 136.185115][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 136.215178][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 137.042946][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 137.055177][ T5029] udc-core: couldn't find an available UDC or it's busy [ 137.057294][ T5029] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.262720][ T5035] udc-core: couldn't find an available UDC or it's busy [ 137.276085][ T5035] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.290984][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 137.306177][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 137.309362][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 137.316005][ T5035] udc-core: couldn't find an available UDC or it's busy [ 137.317971][ T5035] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.340685][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 137.365032][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 137.395125][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 137.415161][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 138.179634][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 138.184986][ T5038] udc-core: couldn't find an available UDC or it's busy [ 138.187121][ T5038] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.194973][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 138.225205][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 138.259679][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 138.275008][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 138.295080][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 138.466068][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 138.472173][ T5038] udc-core: couldn't find an available UDC or it's busy [ 138.474368][ T5038] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.484952][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 138.505080][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 138.526217][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 138.560548][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 138.586246][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 138.604967][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 138.627474][ T5045] udc-core: couldn't find an available UDC or it's busy [ 138.629807][ T5045] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.635584][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 138.664949][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 138.685610][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 138.706244][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 138.725037][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 138.880789][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 138.895011][ T13] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 138.914901][ T13] ax88179_178a 1-1:4.15 eth0: register 'ax88179_178a' at usb-dummy_hcd.0-1, Toshiba USB Ethernet Adapter, d6:e3:58:21:18:bc [ 138.922592][ T13] usb 1-1: USB disconnect, device number 6 [ 138.925248][ T13] ax88179_178a 1-1:4.15 eth0: unregister 'ax88179_178a' usb-dummy_hcd.0-1, Toshiba USB Ethernet Adapter [ 139.781503][ T5053] udc-core: couldn't find an available UDC or it's busy [ 139.783429][ T5053] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 139.809927][ T5053] udc-core: couldn't find an available UDC or it's busy [ 139.816079][ T5053] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.750396][ T5062] udc-core: couldn't find an available UDC or it's busy [ 140.752405][ T5062] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 141.702430][ T5073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 143.055449][ T5082] udc-core: couldn't find an available UDC or it's busy [ 143.057431][ T5082] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 143.181622][ T5086] loop1: detected capacity change from 0 to 1024 [ 143.238087][ T5086] hfsplus: unable to parse mount options [ 146.831810][ T5126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'. [ 147.046357][ T5134] udc-core: couldn't find an available UDC or it's busy [ 147.065684][ T5134] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 147.856942][ T5143] usb usb8: usbfs: process 5143 (syz.1.288) did not claim interface 0 before use [ 149.225921][ T5171] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 150.472478][ T5186] udc-core: couldn't find an available UDC or it's busy [ 150.474536][ T5186] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 151.577771][ T5195] lo speed is unknown, defaulting to 1000 [ 153.844927][ T5205] loop3: detected capacity change from 0 to 2048 [ 153.949833][ T5205] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.960469][ T5205] xt_TPROXY: Can be used only with -p tcp or -p udp [ 160.988645][ T5253] udc-core: couldn't find an available UDC or it's busy [ 160.990598][ T5253] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 163.003255][ T5258] loop2: detected capacity change from 0 to 2048 [ 163.842818][ T5271] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 163.861939][ T5275] udc-core: couldn't find an available UDC or it's busy [ 163.888687][ T5258] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.028263][ T5275] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 164.041883][ T5258] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.082626][ T5283] loop3: detected capacity change from 0 to 128 [ 165.582420][ T5299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'. [ 168.199132][ T5318] loop4: detected capacity change from 0 to 16 [ 169.038095][ T4867] Bluetooth: hci2: command 0x0406 tx timeout [ 169.099750][ T5318] erofs: (device loop4): mounted with root inode @ nid 36. [ 169.343857][ T5327] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 169.361274][ T5327] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 169.392315][ T5327] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 169.396319][ T5323] loop1: detected capacity change from 0 to 2048 [ 169.420879][ T5328] capability: warning: `syz.4.340' uses 32-bit capabilities (legacy support in use) [ 169.459594][ T5327] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 169.481858][ T5327] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 169.495418][ T5327] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 169.506736][ T5327] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 169.559817][ T5327] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 169.601571][ T5327] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 169.613049][ T5327] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 169.626779][ T5327] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 169.644963][ T5327] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 169.649855][ T5327] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 169.669878][ T5327] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 170.208393][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 170.210361][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 170.212161][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 170.212666][ T5327] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 170.213924][ T4085] Bluetooth: hci1: command 0x0406 tx timeout [ 170.251727][ T5327] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 170.269327][ T5327] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 170.287041][ T5323] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.304534][ T5327] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 170.318917][ T5323] xt_TPROXY: Can be used only with -p tcp or -p udp [ 170.336882][ T5327] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 170.339546][ T5327] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 170.342348][ T5327] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 170.361117][ T5327] attempt to access beyond end of device [ 170.361117][ T5327] loop4: rw=524288, want=848, limit=16 [ 170.392554][ T5327] attempt to access beyond end of device [ 170.392554][ T5327] loop4: rw=524288, want=13478624104, limit=16 [ 170.427711][ T5327] attempt to access beyond end of device [ 170.427711][ T5327] loop4: rw=524288, want=13478624080, limit=16 [ 170.443242][ T5327] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 170.459807][ T5327] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 170.521605][ T5327] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 170.524517][ T5327] attempt to access beyond end of device [ 170.524517][ T5327] loop4: rw=524288, want=32, limit=16 [ 170.536623][ T5327] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[3537] [ 170.542103][ T5327] ================================================================== [ 170.544437][ T5327] BUG: KASAN: vmalloc-out-of-bounds in hex_dump_to_buffer+0x36c/0xda4 [ 170.546649][ T5327] Read of size 1 at addr ffff80001bbdf000 by task syz.4.340/5327 [ 170.548841][ T5327] [ 170.549452][ T5327] CPU: 1 PID: 5327 Comm: syz.4.340 Not tainted 5.15.184-syzkaller #0 [ 170.551652][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.554398][ T5327] Call trace: [ 170.555289][ T5327] dump_backtrace+0x0/0x43c [ 170.556526][ T5327] show_stack+0x2c/0x3c [ 170.557665][ T5327] __dump_stack+0x30/0x40 [ 170.558841][ T5327] dump_stack_lvl+0xf8/0x160 [ 170.560146][ T5327] print_address_description+0x78/0x30c [ 170.561691][ T5327] kasan_report+0xec/0x15c [ 170.562872][ T5327] __asan_report_load1_noabort+0x44/0x50 [ 170.564407][ T5327] hex_dump_to_buffer+0x36c/0xda4 [ 170.565760][ T5327] print_hex_dump+0x11c/0x230 [ 170.567009][ T5327] z_erofs_lz4_decompress+0xa40/0xe90 [ 170.568442][ T5327] z_erofs_decompress+0x820/0xe78 [ 170.569785][ T5327] z_erofs_decompress_queue+0x1038/0x1994 [ 170.571395][ T5327] z_erofs_runqueue+0x1110/0x12fc [ 170.572804][ T5327] z_erofs_readahead+0x7cc/0xb3c [ 170.574182][ T5327] read_pages+0x138/0x424 [ 170.575366][ T5327] page_cache_ra_unbounded+0x4fc/0x5dc [ 170.576914][ T5327] force_page_cache_ra+0x32c/0x394 [ 170.578287][ T5327] generic_fadvise+0x3c8/0x65c [ 170.579597][ T5327] __arm64_sys_fadvise64_64+0x12c/0x174 [ 170.581227][ T5327] invoke_syscall+0x98/0x2b8 [ 170.582504][ T5327] el0_svc_common+0x138/0x258 [ 170.583802][ T5327] do_el0_svc+0x58/0x14c [ 170.585005][ T5327] el0_svc+0x78/0x1e0 [ 170.586143][ T5327] el0t_64_sync_handler+0xcc/0xe4 [ 170.587567][ T5327] el0t_64_sync+0x1a0/0x1a4 [ 170.588837][ T5327] [ 170.589462][ T5327] [ 170.590047][ T5327] Memory state around the buggy address: [ 170.591585][ T5327] ffff80001bbdef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 170.593827][ T5327] ffff80001bbdef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 170.595998][ T5327] >ffff80001bbdf000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 170.598211][ T5327] ^ [ 170.599411][ T5327] ffff80001bbdf080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 170.601604][ T5327] ffff80001bbdf100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 170.603777][ T5327] ================================================================== [ 170.605952][ T5327] Disabling lock debugging due to kernel taint [ 170.607713][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.609751][ T5327] Unable to handle kernel paging request at virtual address ffff80001bbdf000 [ 170.612181][ T5327] Mem abort info: [ 170.613195][ T5327] ESR = 0x0000000096000007 [ 170.614435][ T5327] EC = 0x25: DABT (current EL), IL = 32 bits [ 170.616343][ T5327] SET = 0, FnV = 0 [ 170.617436][ T5327] EA = 0, S1PTW = 0 [ 170.618493][ T5327] FSC = 0x07: level 3 translation fault [ 170.620024][ T5327] Data abort info: [ 170.621047][ T5327] ISV = 0, ISS = 0x00000007 [ 170.622308][ T5327] CM = 0, WnR = 0 [ 170.623441][ T5327] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000211394000 [ 170.625550][ T5327] [ffff80001bbdf000] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=10000001024c4003, pte=0000000000000000 [ 170.629316][ T5327] Internal error: Oops: 0000000096000007 [#1] PREEMPT SMP [ 170.631225][ T5327] Modules linked in: [ 170.632296][ T5327] CPU: 1 PID: 5327 Comm: syz.4.340 Tainted: G B 5.15.184-syzkaller #0 [ 170.634850][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.637554][ T5327] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 170.639587][ T5327] pc : hex_dump_to_buffer+0x250/0xda4 [ 170.640999][ T5327] lr : hex_dump_to_buffer+0x36c/0xda4 [ 170.642599][ T5327] sp : ffff80001f4f6a80 [ 170.643855][ T5327] x29: ffff80001f4f6ac0 x28: 0000000000000023 x27: 000000000000000c [ 170.646179][ T5327] x26: 0000000000000010 x25: ffff80001f4f6b80 x24: 0000000000000021 [ 170.648557][ T5327] x23: 000000000000000b x22: 0000000000000021 x21: 0000000000000010 [ 170.650861][ T5327] x20: dfff800000000000 x19: ffff80001bbdf000 x18: 0000000000000005 [ 170.653181][ T5327] x17: 0000000000000002 x16: ffff8000082d4b38 x15: 00000000ffffffff [ 170.655504][ T5327] x14: 0000000000ff0100 x13: 0000000000000001 x12: 0000000000080000 [ 170.657744][ T5327] x11: 000000000007ffff x10: ffff800025879000 x9 : 0000000000000000 [ 170.660079][ T5327] x8 : ffff0000d993b680 x7 : 0000000000000000 x6 : 0000000000000001 [ 170.662419][ T5327] x5 : ffff80001f4f6298 x4 : 0000000000000000 x3 : ffff800008184528 [ 170.664773][ T5327] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000001 [ 170.667117][ T5327] Call trace: [ 170.668053][ T5327] hex_dump_to_buffer+0x250/0xda4 [ 170.669617][ T5327] print_hex_dump+0x11c/0x230 [ 170.671030][ T5327] z_erofs_lz4_decompress+0xa40/0xe90 [ 170.672657][ T5327] z_erofs_decompress+0x820/0xe78 [ 170.674109][ T5327] z_erofs_decompress_queue+0x1038/0x1994 [ 170.675841][ T5327] z_erofs_runqueue+0x1110/0x12fc [ 170.677399][ T5327] z_erofs_readahead+0x7cc/0xb3c [ 170.678802][ T5327] read_pages+0x138/0x424 [ 170.680097][ T5327] page_cache_ra_unbounded+0x4fc/0x5dc [ 170.681684][ T5327] force_page_cache_ra+0x32c/0x394 [ 170.683221][ T5327] generic_fadvise+0x3c8/0x65c [ 170.684623][ T5327] __arm64_sys_fadvise64_64+0x12c/0x174 [ 170.686197][ T5327] invoke_syscall+0x98/0x2b8 [ 170.687518][ T5327] el0_svc_common+0x138/0x258 [ 170.688898][ T5327] do_el0_svc+0x58/0x14c [ 170.690167][ T5327] el0_svc+0x78/0x1e0 [ 170.691277][ T5327] el0t_64_sync_handler+0xcc/0xe4 [ 170.692706][ T5327] el0t_64_sync+0x1a0/0x1a4 [ 170.694156][ T5327] Code: 8b170113 d343fe68 38f46908 35000868 (3940027a) [ 170.697142][ T5327] ---[ end trace 5d56fc63e6e2b117 ]--- [ 171.489221][ T5327] Kernel panic - not syncing: Oops: Fatal exception [ 171.491207][ T5327] SMP: stopping secondary CPUs [ 171.492675][ T5327] Kernel Offset: disabled [ 171.493940][ T5327] CPU features: 0x8,000081c1,21302e40 [ 171.495570][ T5327] Memory Limit: none [ 172.210218][ T5327] Rebooting in 86400 seconds..