last executing test programs: 6.735470919s ago: executing program 0 (id=1041): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b000104000000090400000207010100090501022000000000", @ANYRES8=r2, @ANYRES16=r0, @ANYBLOB], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000011c0)={0xffffffffffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x1}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r5, &(0x7f00000004c0)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1, 0x9) pipe2$9p(&(0x7f0000000180), 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x237bc3f1, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) r9 = dup(r7) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 3.94082079s ago: executing program 3 (id=1069): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="000010c20800"}) 3.92029963s ago: executing program 1 (id=1070): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e30800200000009", 0x9, r3) 3.892480712s ago: executing program 2 (id=1071): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) sync() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x7}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) 3.721030719s ago: executing program 3 (id=1072): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="3d0d8f929d36bc9c19d99c138002cdf0e58683ee6a6abe3f845d219f9f86cc41c0ed8b279cd28575a6a528070679baf75e3a4f87987e5460c109d882afd2c2bfb760eaaae9b0710000", @ANYRES16=0x0], 0x1, 0x1a4, &(0x7f0000000700)="$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") 3.23575328s ago: executing program 0 (id=1073): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@private2, 0x4e23, 0x480, 0x4e22, 0x978a, 0x2, 0x50, 0x80, 0x2c, r8}, {0x8, 0x3, 0x40, 0x4, 0x7, 0x2, 0x660, 0x27e}, {0x1cb9f94, 0x5, 0xff, 0x4}, 0x5, 0x0, 0x2, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3504, 0x0, 0x1, 0x0, 0x10000, 0x7e8, 0x2}}, 0xe8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000200)={@rand_addr=' \x01\x00', 0x60}) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000e5ffffff850000000700000018110000b62ab10216eaf6e2d20f103c56ff453026811388218cf2e5f60de61ebd0d81d36fbe87c9015a93be7479d4768518427a7a80136842e3166ded0d18899e259e298a3d319584f75c27703e565e9116042fd44586de90323011031645217ecdbac2b713dacfdda3c80c8d523f37a0e8508343333e9122575ac1aa2f5de56c24bff8ee0848f5f9d9100383", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 2.139470048s ago: executing program 0 (id=1074): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001380)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004811}, 0x4010) 2.139337558s ago: executing program 1 (id=1075): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r1, 0x2}, 0x20) 2.139238268s ago: executing program 3 (id=1076): r0 = syz_open_dev$sndpcmp(&(0x7f0000001140), 0x0, 0x40) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000001180)={0x4, [[0x0, 0x6, 0x0, 0x5, 0x6, 0x3c9, 0x4, 0x9f2], [0x10000, 0x8001, 0x3, 0x37, 0x7, 0x40, 0x0, 0x8], [0xffff, 0x4, 0x1ff, 0x3, 0x0, 0x9, 0xfffffffc, 0x2]], '\x00', [{0x4, 0x85, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x9, 0x1, 0x1, 0x0, 0x1}, {0xe, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x7f000000, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xd, 0x81}, {0x1, 0x5, 0x0, 0x1, 0x1}, {0xffffffff, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x2c0000, 0xe, 0x1, 0x1, 0x1}, {0x1ff, 0x401}, {0x8001, 0xf, 0x0, 0x1, 0x0, 0x1}, {0x9, 0xffff, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x2, 0x1, 0x1}]}) 2.08385461s ago: executing program 0 (id=1078): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@dev, @multicast2, 0x0}, &(0x7f0000000440)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in6=@loopback, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b, r5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x4d5, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000480), {[{{@arp={@broadcast, @empty, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r9}, 0x18) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"/296], 0x128}, 0x1, 0x7}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, 0x301, &(0x7f0000000080)="$eJzs3c9rE00YwPEnSdMk7du3Pby8iCgMFUSRLm3AmweLtCAGlLYRrCBs7VZDtklJQiEitoLg1bOHHjyKIII3LyJee/EvUOutl97soTiy2R/NjzWmlbRVv59D8jQzz850Z9LSaXZ288KTxfxCUkQiElDOQ1Ri3percvb92qeT0+/+8YrV5PjMWFqpqIjcvP9i+G2l//rrf98kZH3o1uZW+sv6iRmRbzN3JapyZVXQWplqrlisOE2o+Vw5byh1zbbMsqVyhbJVqnjl5pxtqQW7uLRUVWZhfqBvqWSVy8osVFXeqqpKUVVKVWXeMXMFZRiGGugTiMhQEEVbyiLtErPPt7WWLa21TqyK1jqk9qofxL3nxK91FkdJ0/i3rdsyOWLd7BkOwrbu6Xj88edx3/+fn3Y2/nrlgLqFAzJ9Y/bKeCYzMaVUUmTx8XJ2Oes+u+Uf+yUntliyNnVudkecOeKRiPM4eTkzMapqhuT04oqXv7KcdX85jC/U8jf8pLp88fPH3HzVmB+Xvt18S9IyKP9JaH7az5doXX6vnDlVl2/IoHy4LUWxZd6ZyXX5D8aUunQ109R+qlavzsNDGB4AAAAAAAAAAPbFUIHd9ftI8K/elGEkap/4CMpTzstOPbdCsL4+KoOyE74+Pxq6vt8jx3sO8RsHAAAAAOAvUq7ey5u2bZW6E8Sepdo0ETdEnEDk0bDTmbYH/N/rcWet94pIa1GsfRMNQeq8297LKa9j0s0T5QfJPfQwJPAv1sibO6/8opSEVY7uaQKM9Iae+WQpIl2dPw2BdFJZkvub2ImOp1ZzEAvaOhZaR0d+fhxt2nH3FQlGsH3WxT29HX4YJJtP1MiGe1y7zQ+Nr8ESHwAAAIDfSN0fTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JAE1/9HvDv9d7J5mL9vf2OReLeIb92Srfk+8ez7DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAI+h4AAP//0fmz5A==") ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45}}) 2.08297747s ago: executing program 2 (id=1079): io_uring_setup(0x2361, &(0x7f0000000240)={0x0, 0xc3be, 0x20, 0x1, 0x13d}) 1.977146065s ago: executing program 2 (id=1080): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001080)='./bus\x00', 0x89048f, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0), 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.976852384s ago: executing program 3 (id=1081): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x100, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x2, 0x10e5, 0x80000000}}]}, 0x40}}, 0x0) 1.976786754s ago: executing program 4 (id=1082): r0 = fsopen(&(0x7f0000000040)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='rw\x00', &(0x7f0000000080)="1968ca2aad", 0x5) 1.976654965s ago: executing program 1 (id=1083): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b000104000000090400000207010100090501022000000000", @ANYRES8=r2, @ANYRES16=r0, @ANYBLOB="4158b9c7333e678a1f19b18fa3bd50030c8a58ed8a0f234e5da54ed4ed1f545e64b9aa7602682066789f5d92ffb585ab8d4c2602028c18d40a94b41c62c85691282b88669f58dc7603"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000011c0)={0xffffffffffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x1}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r5, &(0x7f00000004c0)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1, 0x9) pipe2$9p(&(0x7f0000000180), 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x237bc3f1, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) r9 = dup(r7) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 1.552620463s ago: executing program 2 (id=1084): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0) 1.307444003s ago: executing program 4 (id=1085): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611040000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.298166154s ago: executing program 3 (id=1086): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000013}) 1.221178617s ago: executing program 4 (id=1087): capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) unshare(0x28000400) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1.220844867s ago: executing program 2 (id=1088): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@private2, 0x4e23, 0x480, 0x4e22, 0x978a, 0x2, 0x50, 0x80, 0x2c, r8}, {0x8, 0x3, 0x40, 0x4, 0x7, 0x2, 0x660, 0x27e}, {0x1cb9f94, 0x5, 0xff, 0x4}, 0x5, 0x0, 0x2, 0x0, 0x1}, {{@in6=@empty, 0x4d4, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3504, 0x0, 0x1, 0x0, 0x10000, 0x7e8, 0x2}}, 0xe8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000200)={@rand_addr=' \x01\x00', 0x60}) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000e5ffffff850000000700000018110000b62ab10216eaf6e2d20f103c56ff453026811388218cf2e5f60de61ebd0d81d36fbe87c9015a93be7479d4768518427a7a80136842e3166ded0d18899e259e298a3d319584f75c27703e565e9116042fd44586de90323011031645217ecdbac2b713dacfdda3c80c8d523f37a0e8508343333e9122575ac1aa2f5de56c24bff8ee0848f5f9d9100383", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 1.188334689s ago: executing program 4 (id=1089): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001", @ANYBLOB], 0x48) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) close(r3) 1.16842656s ago: executing program 0 (id=1090): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) sync() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x7}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) 897.163611ms ago: executing program 3 (id=1091): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfb, &(0x7f0000000380)=""/149) 318.380796ms ago: executing program 1 (id=1092): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f00000000c0)) 224.08991ms ago: executing program 4 (id=1093): unshare(0x8040480) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) 142.778114ms ago: executing program 1 (id=1094): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001080)='./bus\x00', 0x89048f, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0), 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 142.565894ms ago: executing program 2 (id=1095): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x3000000, &(0x7f0000000080)=ANY=[], 0x1, 0x5d8, &(0x7f00000006c0)="$eJzs3U1vG8cdB+Df0rJsuoDDJHaSFi0q2IcWMWqLYuLoUKBuURQ6BEWAXnLJQbDpWDCtBBJTKEFR2H299hskPcjnnnooejCQnvsVBPSQQ4HedXOxyyXFWIoixbJIJc8DDGeGszs78/fuiLuEwQDfWEtv5/SjFFm68uZGWd/a7PS2Njv3huUkZ5I0kplBlmI1KT5NbmSQ8u3yzbq74ouO887Hbyx+1n74YFCbqVO1fWO//Q7mfp0yl+RUnR9Vfzefur9iNMMyYJeHgYNJe7zL/cPs/pTXLTANisHfzV1aybkkZ+vPAalXh8bxju7oHWqVAwAAgBPque1sZyPnJz0OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEnq3/8v6tQYludSDH//f7Z+L3X5RHs06QEAAAAAAAAAwBH4/na2s5Hzw/rjovrO/1JVuVC9fisfZD3drOVqNrKcfvpZSztJa6yj2Y3lfn+tfYA9F/bcc+F45gsAAAAAAAAAX1O/y9LO9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANiuTUIKvShWG5lcZMkrNJZsvt7if/HJZPskeTHgAAAAAcg+e2s52NnB/WHxfVPf9L1X3/2XyQ1fSzkn566eZW9SxgcNff2Nrs9LY2O/fKtLvfn/7vUMOoeszg2cPeR56vtrg42mMpv8ivciVzeStrWcmvs5x+upnLz6vScoq06qcXreE49x7vjc/V3vqysb5SjaSZ21mpxnY1N/NeermVRjWHapv9j/igjE7xk9oBY3SrzssZ/aXOp0OrisjpUUTm69iX0Xh+/0gc8jx58kjtNEbPoC48g5ifq/My1n+a6pgvjJ19L+0fieTSf7739zu91bt3bq9fmZ4pfUVPRqIzFomXv1GRmK2jMVhFD7daXqr2PZ+V/DLv5Va6eT2LeT0LeS2vZT6LuT4W14sHuNYah7vWLv+wLjST/LnOp0MZ1+fH4jq+0rWqtvF3dqL0wtGvSDPfqQvlMX5f59PhyUi0xyLx4v6R+Ovj8nW9t3p37c7y+wc83g/qvLxs/zhVa3N5vrxQ/mNVtc+fHWXbi3u2tau2C6O2xq62i6O2L7tSZ+vPcLt7WqjaXt6zrVO1vTLWttenHACm3rlXz802/9v8d/OT5h+ad5pvnv3ZmcUz353N6X/N/OPU3xoPGz8uXs0n+e3O/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDVrX/40d3lXq+7pqCgoDAqTHplAp61a/17719b//CjH63cW363+253tdNpX19YvL64cP3a7ZVed37wOulhAs/Azh/9SY8EAAAAAAAAAAAAOKjj+O8Ek54jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLItvZ3Tj1KkPX91vqxvbXZ6ZRqWd7acSdJIUvwmKT5NbmSQ0hrrrvii47zz8RuLn7UfPtjpa2a4fWO//Q7mfp0yl+RUnR9Vfzefur9iNMMyYJeHgYNJ+38AAAD//+NBDmE=") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fe) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}]) 87.655836ms ago: executing program 4 (id=1096): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 86.365476ms ago: executing program 0 (id=1097): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x100, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x2, 0x10e5, 0x80000000}}]}, 0x40}}, 0x0) 0s ago: executing program 1 (id=1098): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0xfffffffd}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. syzkaller login: [ 48.606932][ T4171] cgroup: Unknown subsys name 'net' [ 48.756169][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.991664][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.334791][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 51.375303][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.388598][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 51.428276][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.489757][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 51.537378][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.544565][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.552969][ T4195] device bridge_slave_0 entered promiscuous mode [ 51.564929][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.572026][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.579623][ T4195] device bridge_slave_1 entered promiscuous mode [ 51.603425][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.610494][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.621143][ T4181] device bridge_slave_0 entered promiscuous mode [ 51.642684][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.649742][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.657789][ T4184] device bridge_slave_0 entered promiscuous mode [ 51.669478][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.676670][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.684943][ T4181] device bridge_slave_1 entered promiscuous mode [ 51.701396][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.708453][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.716489][ T4184] device bridge_slave_1 entered promiscuous mode [ 51.745444][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.783244][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.805115][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.812675][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.820336][ T4190] device bridge_slave_0 entered promiscuous mode [ 51.829110][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.850523][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.861950][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.871235][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.878339][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.888783][ T4190] device bridge_slave_1 entered promiscuous mode [ 51.896760][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.906003][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.913214][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.921154][ T4186] device bridge_slave_0 entered promiscuous mode [ 51.930405][ T4195] team0: Port device team_slave_0 added [ 51.957698][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.965040][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.973279][ T4186] device bridge_slave_1 entered promiscuous mode [ 51.981270][ T4195] team0: Port device team_slave_1 added [ 52.018758][ T4184] team0: Port device team_slave_0 added [ 52.026478][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.038341][ T4181] team0: Port device team_slave_0 added [ 52.061173][ T4184] team0: Port device team_slave_1 added [ 52.067582][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.075633][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.101760][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.114715][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.125362][ T4181] team0: Port device team_slave_1 added [ 52.132672][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.148813][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.155818][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.181911][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.206393][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.244252][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.251581][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.277750][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.289994][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.297223][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.323150][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.337311][ T4190] team0: Port device team_slave_0 added [ 52.344011][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.350999][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.376907][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.396406][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.403466][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.429521][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.447621][ T4190] team0: Port device team_slave_1 added [ 52.458690][ T4186] team0: Port device team_slave_0 added [ 52.497607][ T4186] team0: Port device team_slave_1 added [ 52.520369][ T4195] device hsr_slave_0 entered promiscuous mode [ 52.527465][ T4195] device hsr_slave_1 entered promiscuous mode [ 52.557744][ T4181] device hsr_slave_0 entered promiscuous mode [ 52.564394][ T4181] device hsr_slave_1 entered promiscuous mode [ 52.571379][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.579098][ T4181] Cannot create hsr debugfs directory [ 52.586056][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.593437][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.619607][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.632403][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.639345][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.665385][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.676793][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.683760][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.710001][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.742192][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.749147][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.775487][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.788487][ T4184] device hsr_slave_0 entered promiscuous mode [ 52.795467][ T4184] device hsr_slave_1 entered promiscuous mode [ 52.802096][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.809641][ T4184] Cannot create hsr debugfs directory [ 52.871220][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.877797][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.884639][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.892245][ T4190] Cannot create hsr debugfs directory [ 52.966788][ T4186] device hsr_slave_0 entered promiscuous mode [ 52.973750][ T4186] device hsr_slave_1 entered promiscuous mode [ 52.980173][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.987864][ T4186] Cannot create hsr debugfs directory [ 53.021680][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 53.021680][ T24] Bluetooth: hci1: command 0x0409 tx timeout [ 53.022165][ T24] Bluetooth: hci3: command 0x0409 tx timeout [ 53.027839][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 53.046533][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 53.214210][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.227615][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.243722][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.253091][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.295705][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.305131][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.316159][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.324789][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.409846][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.419648][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.447097][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.457237][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.476971][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.493001][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.504133][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.525588][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.549146][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.567182][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.582487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.592143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.609780][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.643063][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.655837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.666284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.675474][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.682686][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.692977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.701618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.709915][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.716981][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.724636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.733802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.741904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.767618][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.779262][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.790344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.800620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.810228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.819052][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.826125][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.835165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.852004][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.860527][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.874182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.886207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.895162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.906667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.915333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.924263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.935572][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.942642][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.961196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.970883][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.979479][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.002902][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.018234][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.030024][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.057347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.067461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.076852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.086466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.095595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.104593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.113502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.122194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.129917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.175937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.187541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.199823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.210242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.219564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.228195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.239765][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.253898][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.272579][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.286533][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.296510][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.308706][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.323727][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.340445][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.367750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.377618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.386412][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.393520][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.405024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.414220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.422818][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.429852][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.438462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.447273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.455707][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.462777][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.488397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.497062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.507150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.517734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.527273][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.534398][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.545180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.554152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.563209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.570670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.579761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.595118][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.604540][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.613889][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.633518][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.644648][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.660505][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.668312][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.678669][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.687392][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.697188][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.706363][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.716201][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.724835][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.733821][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.742414][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.758241][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.767645][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.775823][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.803839][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.815521][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.825223][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.834826][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.843171][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.851703][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.859852][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.869103][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.877590][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.885153][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.901913][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.912724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.923023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.932757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.942256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.950556][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.957626][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.967391][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.992360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.000299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.010872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.019129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.028848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.037204][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.044288][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.053190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.061198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.080181][ T4195] device veth0_vlan entered promiscuous mode [ 55.099051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.101132][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 55.107392][ T4245] Bluetooth: hci3: command 0x041b tx timeout [ 55.120583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.121368][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 55.134210][ T4245] Bluetooth: hci4: command 0x041b tx timeout [ 55.139224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.141135][ T4245] Bluetooth: hci1: command 0x041b tx timeout [ 55.181400][ T4195] device veth1_vlan entered promiscuous mode [ 55.197576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.206329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.226245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.235635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.244062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.252731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.273216][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.284172][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.305579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.313975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.331620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.343817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.353448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.363024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.376781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.385443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.394245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.402477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.419882][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.428194][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.436991][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.446739][ T4184] device veth0_vlan entered promiscuous mode [ 55.473897][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.488126][ T4195] device veth0_macvtap entered promiscuous mode [ 55.499137][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.508329][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.516431][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.524950][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.532732][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.544604][ T4184] device veth1_vlan entered promiscuous mode [ 55.560627][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.570240][ T4195] device veth1_macvtap entered promiscuous mode [ 55.623176][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.631327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.645717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.655058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.666628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.675863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.684895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.693956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.710226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.718785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.735728][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.745605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.756011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.767352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.779208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.793196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.802123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.813175][ T4184] device veth0_macvtap entered promiscuous mode [ 55.832668][ T4181] device veth0_vlan entered promiscuous mode [ 55.842286][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.853249][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.862259][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.871802][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.896827][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.912202][ T4181] device veth1_vlan entered promiscuous mode [ 55.919515][ T4184] device veth1_macvtap entered promiscuous mode [ 55.928077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.943404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.952569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.960421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.968186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.012508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.020508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.029724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.041801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.050181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.058923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.068009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.076609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.084803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.101743][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.112733][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.124909][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.147892][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.158131][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.167067][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.176876][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.186083][ T4190] device veth0_vlan entered promiscuous mode [ 56.201168][ T4181] device veth0_macvtap entered promiscuous mode [ 56.217685][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.235368][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.247102][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.262555][ T4190] device veth1_vlan entered promiscuous mode [ 56.269800][ T4181] device veth1_macvtap entered promiscuous mode [ 56.282666][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.290665][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.298646][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.306892][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.315757][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.328656][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.337674][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.346595][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.355580][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.397969][ T4186] device veth0_vlan entered promiscuous mode [ 56.405645][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.415245][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.424073][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.433133][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.466553][ T4186] device veth1_vlan entered promiscuous mode [ 56.491198][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.501244][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.504827][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.509531][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.523781][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.537421][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.550079][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.588075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.596410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.606032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.614878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.623827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.632947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.664005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.678512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.690358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.699232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.710563][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.721633][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.732363][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.743041][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.754452][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.763911][ T4190] device veth0_macvtap entered promiscuous mode [ 56.784028][ T4186] device veth0_macvtap entered promiscuous mode [ 56.795551][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.803193][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.810355][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.817629][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.826788][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.836200][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.844983][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.873317][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.882890][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.892018][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.900707][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.913465][ T4186] device veth1_macvtap entered promiscuous mode [ 56.920635][ T1475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.929567][ T4190] device veth1_macvtap entered promiscuous mode [ 56.942624][ T1475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.953981][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.962355][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.970199][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.986342][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.998353][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.009022][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.019735][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.030632][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.042703][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.054918][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.084565][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.094270][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.107903][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.119456][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.129739][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.140754][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.150712][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.162596][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.172998][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.182583][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 57.184933][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.190410][ T4252] Bluetooth: hci2: command 0x040f tx timeout [ 57.201167][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.215325][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.224287][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.225930][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.232047][ T4252] Bluetooth: hci3: command 0x040f tx timeout [ 57.249356][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 57.257688][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.263104][ T4223] Bluetooth: hci1: command 0x040f tx timeout [ 57.269186][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.285306][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.295387][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.306113][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.317122][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.328248][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.337169][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.351518][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.367005][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.387823][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.397925][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.406961][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.416250][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.427835][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.452141][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.463002][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.481392][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.492650][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.503979][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.515028][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.525084][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.535788][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.547119][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.561720][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.570496][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.579323][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.589917][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.612050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.627675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.746160][ T4298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 57.755975][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.765292][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.785056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.801557][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.844223][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.860127][ T4300] ======================================================= [ 57.860127][ T4300] WARNING: The mand mount option has been deprecated and [ 57.860127][ T4300] and is ignored by this kernel. Remove the mand [ 57.860127][ T4300] option from the mount to silence this warning. [ 57.860127][ T4300] ======================================================= [ 57.862704][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.911520][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.933730][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.939967][ T4300] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 57.945592][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.952415][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.969387][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.975725][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.991631][ T4301] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 57.995721][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.009845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.022246][ T4300] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 58.031023][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.039063][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.067777][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.087880][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.255549][ T4307] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.503854][ T4318] loop1: detected capacity change from 0 to 16 [ 58.628033][ T4318] erofs: (device loop1): mounted with root inode @ nid 36. [ 58.834620][ T4318] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 58.856554][ T4318] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 59.045608][ T4334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 59.261063][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 59.268091][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 59.290915][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 59.301078][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 59.355451][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 60.561108][ T4442] netlink: 52 bytes leftover after parsing attributes in process `syz.2.34'. [ 60.613683][ T4449] Zero length message leads to an empty skb [ 61.235753][ T4461] fuse: Bad value for 'fd' [ 61.418191][ T4471] overlayfs: failed to clone upperpath [ 61.446680][ T4472] loop0: detected capacity change from 0 to 512 [ 61.497153][ T4472] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 61.707258][ T4472] EXT4-fs (loop0): failed to open journal device unknown-block(0,8) -6 [ 61.949040][ T4484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 62.708130][ T4501] xt_hashlimit: size too large, truncated to 1048576 [ 62.848038][ T4509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.56'. [ 62.921355][ T4509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 63.091328][ T4521] fuse: Bad value for 'fd' [ 64.241457][ T4569] ODEBUG: Out of memory. ODEBUG disabled [ 64.403011][ T4566] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 64.431418][ T4566] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 64.651572][ T4583] loop1: detected capacity change from 0 to 736 [ 64.810951][ T4583] rock: directory entry would overflow storage [ 64.838990][ T4583] rock: sig=0x3b10, size=4, remaining=3 [ 65.147381][ T4597] ipt_CLUSTERIP: Please specify destination IP [ 65.447366][ T4615] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 66.866893][ T4654] fuse: Bad value for 'fd' [ 68.023783][ T4693] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 68.040916][ T4693] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 68.056640][ T4699] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.127614][ T4700] 9pnet: Insufficient options for proto=fd [ 68.283574][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 68.349472][ T4711] capability: warning: `syz.4.124' uses 32-bit capabilities (legacy support in use) [ 68.676833][ T4730] netlink: 'syz.2.132': attribute type 5 has an invalid length. [ 68.691090][ T4730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 68.700052][ T4730] HTB: quantum of class 8001000C is small. Consider r2q change. [ 69.129522][ T4761] netlink: 6 bytes leftover after parsing attributes in process `syz.0.143'. [ 69.668883][ T4805] process 'syz.4.159' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 69.893048][ T4825] overlayfs: failed to clone upperpath [ 69.961024][ T4253] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.039634][ T4835] loop0: detected capacity change from 0 to 128 [ 70.187921][ T4845] fuse: Unknown parameter 'rootode' [ 70.199785][ T4845] cgroup: Unknown subsys name 'nofavordynmods' [ 70.393640][ T4253] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 70.397394][ T4850] loop0: detected capacity change from 0 to 8192 [ 70.411745][ T4253] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.577054][ T4861] overlayfs: failed to clone lowerpath [ 70.616248][ T4253] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 70.632925][ T4253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.671285][ T4253] usb 2-1: Product: syz [ 70.677206][ T4253] usb 2-1: Manufacturer: syz [ 70.687844][ T4253] usb 2-1: SerialNumber: syz [ 70.731776][ T4806] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 70.772554][ T4253] usblp0: Disabling reads from problematic bidirectional printer [ 70.837277][ T4877] loop0: detected capacity change from 0 to 128 [ 71.027377][ T4253] usblp 2-1:4.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 71.202252][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.206498][ T4253] usb 2-1: USB disconnect, device number 2 [ 71.208764][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.279945][ T4253] usblp0: removed [ 71.578186][ T4917] netlink: 52 bytes leftover after parsing attributes in process `syz.3.196'. [ 72.263715][ T4923] loop2: detected capacity change from 0 to 128 [ 72.774656][ T4955] loop2: detected capacity change from 0 to 128 [ 72.970831][ T4957] netlink: 52 bytes leftover after parsing attributes in process `syz.0.213'. [ 73.822684][ T4975] fuse: Bad value for 'fd' [ 74.288604][ T5000] fuse: Bad value for 'fd' [ 74.457677][ T5005] netlink: 52 bytes leftover after parsing attributes in process `syz.2.228'. [ 75.052569][ T5015] loop0: detected capacity change from 0 to 256 [ 75.082273][ T5009] device bond1 entered promiscuous mode [ 75.127251][ T5012] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 75.175982][ T5012] FAT-fs (loop0): Filesystem has been set read-only [ 75.186829][ T5012] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 75.197443][ T5012] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 75.241419][ T26] audit: type=1800 audit(1763960703.139:2): pid=5012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.234" name="file1" dev="loop0" ino=1048594 res=0 errno=0 [ 75.402893][ T5012] syz.0.234 (5012) used greatest stack depth: 20240 bytes left [ 76.314352][ T1111] cfg80211: failed to load regulatory.db [ 76.597627][ T5104] capability: warning: `syz.2.265' uses deprecated v2 capabilities in a way that may be insecure [ 76.784489][ T26] audit: type=1326 audit(1763960704.689:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5120 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 76.822307][ T26] audit: type=1326 audit(1763960704.689:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5120 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 76.858439][ T5124] loop2: detected capacity change from 0 to 512 [ 76.864761][ T5125] overlayfs: failed to clone lowerpath [ 76.878383][ T26] audit: type=1326 audit(1763960704.689:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5120 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 76.907462][ T26] audit: type=1326 audit(1763960704.689:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5120 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 76.937462][ T26] audit: type=1326 audit(1763960704.689:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5120 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 77.012501][ T5124] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 77.077805][ T26] audit: type=1326 audit(1763960704.689:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5120 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 77.128643][ T26] audit: type=1326 audit(1763960704.689:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5120 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 77.211326][ T5124] EXT4-fs (loop2): failed to open journal device unknown-block(0,8) -6 [ 77.792159][ T5151] overlayfs: failed to clone upperpath [ 78.530964][ T1111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.931312][ T1111] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 78.951112][ T1111] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.134389][ T5201] netlink: 52 bytes leftover after parsing attributes in process `syz.4.297'. [ 79.460940][ T1111] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 79.490901][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.498933][ T1111] usb 1-1: Product: syz [ 79.520832][ T1111] usb 1-1: Manufacturer: syz [ 79.525497][ T1111] usb 1-1: SerialNumber: syz [ 79.562251][ T5166] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.604984][ T1111] usblp0: Disabling reads from problematic bidirectional printer [ 79.654001][ T5210] loop2: detected capacity change from 0 to 512 [ 79.823735][ T1111] usblp 1-1:4.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 79.877855][ T5220] loop2: detected capacity change from 0 to 128 [ 80.040884][ C1] usblp0: nonzero write bulk status received: -71 [ 80.156408][ T5230] loop2: detected capacity change from 0 to 128 [ 80.254886][ T5230] attempt to access beyond end of device [ 80.254886][ T5230] loop2: rw=2051, want=1041, limit=128 [ 80.345293][ T5235] overlayfs: failed to clone upperpath [ 80.370079][ T5235] overlayfs: failed to clone upperpath [ 81.251131][ T4575] usb 1-1: USB disconnect, device number 2 [ 81.285977][ T4575] usblp0: removed [ 81.429681][ T5270] loop2: detected capacity change from 0 to 1764 [ 82.334300][ T5292] netlink: 'syz.2.336': attribute type 3 has an invalid length. [ 82.359344][ T5294] fuse: Bad value for 'fd' [ 82.840854][ T4191] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.221950][ T4191] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 83.244707][ T4191] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.461287][ T4191] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 83.482482][ T4191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.519714][ T4191] usb 3-1: Product: syz [ 83.541928][ T4191] usb 3-1: Manufacturer: syz [ 83.558840][ T4191] usb 3-1: SerialNumber: syz [ 83.601179][ T5302] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.640148][ T5336] fuse: Bad value for 'fd' [ 83.649339][ T4191] usblp0: Disabling reads from problematic bidirectional printer [ 83.863900][ T4191] usblp 3-1:4.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 84.080829][ C1] usblp0: nonzero write bulk status received: -71 [ 84.662783][ T5382] overlayfs: failed to clone upperpath [ 85.446889][ T5410] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.476587][ T4191] usb 3-1: USB disconnect, device number 2 [ 85.494606][ T5298] usblp0: removed [ 85.786059][ T5412] kvm: pic: non byte write [ 85.984363][ T4192] Bluetooth: hci1: Received unexpected HCI Event 00000000 [ 86.390948][ T4191] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.837953][ T4191] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 86.860403][ T4191] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.981010][ T4191] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 88.000315][ T4191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.031476][ T4191] usb 3-1: Product: syz [ 88.035674][ T4191] usb 3-1: Manufacturer: syz [ 88.045143][ T4191] usb 3-1: SerialNumber: syz [ 88.091572][ T5436] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.111936][ T4191] usblp0: Disabling reads from problematic bidirectional printer [ 88.200477][ T5493] loop1: detected capacity change from 0 to 8 [ 88.325210][ T4191] usblp 3-1:4.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 88.390363][ T5503] loop1: detected capacity change from 0 to 512 [ 88.535479][ T5503] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 89.353279][ T5503] EXT4-fs (loop1): failed to open journal device unknown-block(0,8) -6 [ 89.534857][ T26] audit: type=1326 audit(1763960717.419:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.4.430" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f462dac2749 code=0x0 [ 89.945487][ T4191] Bluetooth: hci3: command 0x0406 tx timeout [ 90.345397][ T4288] usb 3-1: USB disconnect, device number 3 [ 90.357654][ T4288] usblp0: removed [ 90.506023][ T5536] loop1: detected capacity change from 0 to 1024 [ 90.561091][ T5536] EXT4-fs (loop1): inline encryption not supported [ 90.567697][ T5536] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.637675][ T5541] team0: Port device team_slave_0 removed [ 90.667149][ T5536] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,journal_ioprio=0x0000000000000005,inlinecrypt,delalloc,data_err=ignore,nojournal_checksum,nodiscard,grpquota,noblock_validity,user_xattr,nombcache,errors=remount-ro,. Quota mode: writeback. [ 91.890962][ T4288] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 93.024764][ T4288] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 93.034984][ T4288] usb 3-1: config 0 has no interface number 0 [ 93.042208][ T4288] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 93.056588][ T4288] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 93.067840][ T4288] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 93.080454][ T4288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.101743][ T4288] usb 3-1: config 0 descriptor?? [ 93.131304][ T5625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.158931][ T5683] fuse: Bad value for 'fd' [ 93.166920][ T4288] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input5 [ 93.375703][ T4288] usb 3-1: USB disconnect, device number 4 [ 94.451370][ T5700] loop2: detected capacity change from 0 to 512 [ 94.556744][ T5700] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.573998][ T5700] Quota error (device loop2): v2_read_file_info: Number of blocks too big for quota file size (2048 > 1024). [ 94.600560][ T5700] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 94.655514][ T5700] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 94.688971][ T5700] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.499: bg 0: block 67: padding at end of block bitmap is not set [ 94.809441][ T5700] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 95.172444][ T5700] EXT4-fs (loop2): 1 truncate cleaned up [ 97.050783][ C1] sched: RT throttling activated [ 97.057987][ T5700] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.995999][ T5752] loop2: detected capacity change from 0 to 4096 [ 98.073651][ T5752] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 98.358976][ T5752] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 99.998858][ T26] audit: type=1800 audit(1763960727.899:11): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.509" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 101.237035][ T5818] loop2: detected capacity change from 0 to 512 [ 101.339485][ T5818] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 101.397767][ T5818] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.535: iget: bogus i_mode (5) [ 101.417362][ T5818] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.535: couldn't read orphan inode 15 (err -117) [ 101.465409][ T5818] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 101.480712][ T5818] ext2 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.697950][ T5869] loop2: detected capacity change from 0 to 128 [ 103.974327][ T5869] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.997604][ T5869] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.603758][ T5894] netlink: 52 bytes leftover after parsing attributes in process `syz.3.559'. [ 105.388017][ T5905] fuse: Bad value for 'fd' [ 105.489021][ T5912] loop2: detected capacity change from 0 to 8 [ 105.565024][ T5912] Major/Minor mismatch, trying to mount newer 5.0 filesystem [ 105.590919][ T5912] Please update your kernel [ 106.146700][ T5942] loop2: detected capacity change from 0 to 2048 [ 106.455922][ T5942] EXT4-fs (loop2): mb_optimize_scan should be set to 0 or 1. [ 106.879171][ T5946] fuse: Bad value for 'fd' [ 108.542449][ T4253] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 108.565919][ T4253] Bluetooth: hci0: Injecting HCI hardware error event [ 108.578079][ T4182] Bluetooth: hci0: hardware error 0x00 [ 108.582164][ T6004] netlink: 52 bytes leftover after parsing attributes in process `syz.1.603'. [ 108.584573][ T1111] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.841161][ T1111] usb 3-1: Using ep0 maxpacket: 8 [ 109.520758][ T1111] usb 3-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.533753][ T1111] usb 3-1: config 1 interface 0 has no altsetting 0 [ 109.646074][ T6014] netlink: 'syz.3.611': attribute type 11 has an invalid length. [ 109.654288][ T6014] netlink: 16 bytes leftover after parsing attributes in process `syz.3.611'. [ 109.691579][ T1111] usb 3-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.40 [ 109.716960][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.747481][ T1111] usb 3-1: Product: syz [ 109.770825][ T1111] usb 3-1: Manufacturer: syz [ 109.775447][ T1111] usb 3-1: SerialNumber: syz [ 110.341143][ T1111] usbhid 3-1:1.0: can't add hid device: -71 [ 110.347668][ T1111] usbhid: probe of 3-1:1.0 failed with error -71 [ 110.516416][ T1111] usb 3-1: USB disconnect, device number 5 [ 112.800931][ T6068] netlink: 52 bytes leftover after parsing attributes in process `syz.0.632'. [ 114.512914][ T6078] loop2: detected capacity change from 0 to 128 [ 114.514720][ T6076] netlink: 64 bytes leftover after parsing attributes in process `syz.3.635'. [ 114.558515][ T6078] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.567503][ T6081] netlink: 'syz.4.639': attribute type 7 has an invalid length. [ 114.569865][ T6078] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.609189][ T6081] netlink: 'syz.4.639': attribute type 23 has an invalid length. [ 116.431782][ T6106] netlink: 52 bytes leftover after parsing attributes in process `syz.1.647'. [ 120.102605][ T6123] netlink: 'syz.4.652': attribute type 9 has an invalid length. [ 120.761614][ T6144] netlink: 52 bytes leftover after parsing attributes in process `syz.4.659'. [ 122.933468][ T6193] netlink: 52 bytes leftover after parsing attributes in process `syz.3.673'. [ 123.504174][ T26] audit: type=1326 audit(1763960751.409:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 123.564834][ T26] audit: type=1326 audit(1763960751.449:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 123.600908][ T26] audit: type=1326 audit(1763960751.449:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f462dac2783 code=0x7ffc0000 [ 123.644465][ T26] audit: type=1326 audit(1763960751.449:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f462dac11ff code=0x7ffc0000 [ 123.680973][ T26] audit: type=1326 audit(1763960751.449:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f462dac27d7 code=0x7ffc0000 [ 123.716730][ T26] audit: type=1326 audit(1763960751.449:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f462dac0f90 code=0x7ffc0000 [ 123.740028][ T26] audit: type=1326 audit(1763960751.449:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f462dac234b code=0x7ffc0000 [ 123.762393][ T26] audit: type=1326 audit(1763960751.449:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f462dac13aa code=0x7ffc0000 [ 123.794468][ T26] audit: type=1326 audit(1763960751.449:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f462dac13aa code=0x7ffc0000 [ 123.822723][ T26] audit: type=1326 audit(1763960751.449:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 124.249290][ T6243] netlink: 52 bytes leftover after parsing attributes in process `syz.1.693'. [ 126.314330][ T6277] fuse: Bad value for 'fd' [ 126.692074][ T6292] netlink: 52 bytes leftover after parsing attributes in process `syz.2.710'. [ 127.497462][ T6313] fuse: Bad value for 'fd' [ 127.936904][ T6325] loop2: detected capacity change from 0 to 2048 [ 128.032280][ T6325] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.545043][ T6329] "syz.1.726" (6329) uses obsolete ecb(arc4) skcipher [ 128.872985][ T6341] netlink: 52 bytes leftover after parsing attributes in process `syz.2.727'. [ 129.597612][ T6355] fuse: Bad value for 'fd' [ 129.837534][ T6373] netlink: 32 bytes leftover after parsing attributes in process `syz.1.744'. [ 129.894257][ T6373] netlink: 32 bytes leftover after parsing attributes in process `syz.1.744'. [ 129.960748][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 130.260749][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 130.270074][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 130.280805][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 130.290807][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 130.300800][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 130.309749][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 130.318661][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 130.327564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 130.336464][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 130.345359][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 130.404545][ T6389] netlink: 52 bytes leftover after parsing attributes in process `syz.2.747'. [ 131.572709][ T6388] fuse: Bad value for 'fd' [ 131.691033][ T6396] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 133.624187][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.630504][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.056198][ T6426] netlink: 52 bytes leftover after parsing attributes in process `syz.4.762'. [ 134.744227][ T6430] fuse: Bad value for 'fd' [ 135.227860][ T6453] xt_TCPMSS: Only works on TCP SYN packets [ 135.775514][ T6459] xt_addrtype: ipv6 does not support BROADCAST matching [ 136.580604][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 136.580619][ T26] audit: type=1326 audit(1763960764.479:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 136.844838][ T26] audit: type=1326 audit(1763960764.539:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 136.971274][ T26] audit: type=1326 audit(1763960764.539:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 137.055751][ T26] audit: type=1326 audit(1763960764.549:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 137.084978][ T26] audit: type=1326 audit(1763960764.549:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 137.136242][ T26] audit: type=1326 audit(1763960764.559:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 137.167912][ T26] audit: type=1326 audit(1763960764.599:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 137.264802][ T6506] xt_TCPMSS: Only works on TCP SYN packets [ 137.351284][ T26] audit: type=1326 audit(1763960764.599:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 137.776909][ T6510] fuse: Bad value for 'fd' [ 137.851532][ T26] audit: type=1326 audit(1763960764.599:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f462dac2749 code=0x7ffc0000 [ 139.058051][ T6550] fuse: Bad value for 'fd' [ 140.172867][ T6573] xt_TCPMSS: Only works on TCP SYN packets [ 140.982165][ T6585] netlink: 32 bytes leftover after parsing attributes in process `syz.0.814'. [ 141.678639][ T6593] 9p: Unknown access argument ÿÿÿÿ [ 143.810860][ T6635] netlink: 52 bytes leftover after parsing attributes in process `syz.0.816'. [ 144.797728][ T6673] xt_CONNSECMARK: invalid mode: 66 [ 148.000232][ T6699] fuse: Bad value for 'fd' [ 149.227766][ T6744] fuse: Bad value for 'fd' [ 149.471650][ T6766] xt_policy: neither incoming nor outgoing policy selected [ 150.315633][ T6784] fuse: Bad value for 'fd' [ 152.654205][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.902'. [ 152.710558][ T6848] mmap: syz.4.905 (6848): VmData 49209344 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 154.084928][ T6933] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 154.127160][ T6936] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 155.309075][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.951'. [ 156.348202][ T4182] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 156.616112][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'. [ 156.649355][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'. [ 158.506598][ T7013] netlink: 52 bytes leftover after parsing attributes in process `syz.1.962'. [ 163.530468][ T7137] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1006'. [ 163.745772][ T7141] netlink: 'syz.1.1013': attribute type 6 has an invalid length. [ 165.682473][ T26] audit: type=1326 audit(1763960793.589:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d42dcb749 code=0x7ffc0000 [ 166.118661][ T7191] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1031'. [ 166.135009][ T26] audit: type=1326 audit(1763960793.609:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d42dcb749 code=0x7ffc0000 [ 166.188946][ T26] audit: type=1326 audit(1763960793.939:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d42dcb749 code=0x7ffc0000 [ 166.224885][ T26] audit: type=1326 audit(1763960793.939:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d42dcb749 code=0x7ffc0000 [ 166.257297][ T26] audit: type=1326 audit(1763960793.939:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7179 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d42dcb749 code=0x7ffc0000 [ 166.274006][ T7195] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1032'. [ 166.431536][ T7199] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1034'. [ 170.988632][ T7312] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1073'. [ 171.725953][ T7339] x_tables: duplicate underflow at hook 1 [ 172.342506][ T26] audit: type=1326 audit(1763960800.249:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739556f749 code=0x7ffc0000 [ 172.384121][ T26] audit: type=1326 audit(1763960800.279:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f739556f749 code=0x7ffc0000 [ 172.410635][ T26] audit: type=1326 audit(1763960800.279:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739556f749 code=0x7ffc0000 [ 172.467899][ T26] audit: type=1326 audit(1763960800.279:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739556f749 code=0x7ffc0000 [ 172.490549][ T26] audit: type=1326 audit(1763960800.279:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f739556f749 code=0x7ffc0000 [ 172.678627][ T26] audit: type=1326 audit(1763960800.279:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739556f749 code=0x7ffc0000 [ 172.702002][ T26] audit: type=1326 audit(1763960800.279:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739556f749 code=0x7ffc0000 [ 173.464722][ T7372] device veth0 entered promiscuous mode [ 173.490287][ T7372] device veth0 left promiscuous mode [ 173.592955][ T4182] ------------[ cut here ]------------ [ 173.598694][ T4182] WARNING: CPU: 0 PID: 4182 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 173.609740][ T4182] Modules linked in: [ 173.613692][ T4182] CPU: 0 PID: 4182 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 173.622715][ T4182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.632825][ T4182] Workqueue: hci3 hci_conn_timeout [ 173.637965][ T4182] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 173.644800][ T4182] Code: 69 8d e8 34 4e f0 f8 48 8b 35 55 b7 9d 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f6 20 81 f8 e8 f1 e5 ab f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 173.664616][ T4182] RSP: 0018:ffffc90002f3fc08 EFLAGS: 00010293 [ 173.670687][ T4182] RAX: ffffffff88cbe61f RBX: ffff888076798138 RCX: ffff888079133b80 [ 173.679437][ T4182] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 173.687486][ T4182] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100ecf3003 [ 173.695786][ T4182] R10: ffffed100ecf3003 R11: 1ffff1100ecf3002 R12: dffffc0000000000 [ 173.703832][ T4182] R13: dffffc0000000000 R14: ffff888076798000 R15: ffff888076798010 [ 173.712084][ T4182] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 173.721082][ T4182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.727671][ T4182] CR2: 00007f3d42e8d760 CR3: 000000007e003000 CR4: 00000000003506f0 [ 173.735745][ T4182] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.750811][ T4182] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.758805][ T4182] Call Trace: [ 173.762130][ T4182] [ 173.765067][ T4182] process_one_work+0x863/0x1000 [ 173.770028][ T4182] ? worker_detach_from_pool+0x240/0x240 [ 173.775728][ T4182] ? lockdep_hardirqs_off+0x70/0x100 [ 173.781310][ T4182] ? _raw_spin_lock_irq+0xab/0xe0 [ 173.786344][ T4182] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 173.791791][ T4182] ? wq_worker_running+0x97/0x170 [ 173.796819][ T4182] worker_thread+0xaa8/0x12a0 [ 173.801587][ T4182] kthread+0x436/0x520 [ 173.805659][ T4182] ? rcu_lock_release+0x20/0x20 [ 173.810512][ T4182] ? kthread_blkcg+0xd0/0xd0 [ 173.815179][ T4182] ret_from_fork+0x1f/0x30 [ 173.819607][ T4182] [ 173.822695][ T4182] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.829962][ T4182] CPU: 0 PID: 4182 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 173.837502][ T4182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.847550][ T4182] Workqueue: hci3 hci_conn_timeout [ 173.852669][ T4182] Call Trace: [ 173.855948][ T4182] [ 173.858876][ T4182] dump_stack_lvl+0x168/0x230 [ 173.863561][ T4182] ? show_regs_print_info+0x20/0x20 [ 173.868759][ T4182] ? load_image+0x3b0/0x3b0 [ 173.873275][ T4182] panic+0x2c9/0x7f0 [ 173.877180][ T4182] ? bpf_jit_dump+0xd0/0xd0 [ 173.881692][ T4182] ? ret_from_fork+0x1f/0x30 [ 173.886284][ T4182] ? hci_conn_timeout+0x24f/0x450 [ 173.891317][ T4182] __warn+0x248/0x2b0 [ 173.895300][ T4182] ? hci_conn_timeout+0x24f/0x450 [ 173.900326][ T4182] report_bug+0x1b7/0x2e0 [ 173.904655][ T4182] handle_bug+0x3a/0x70 [ 173.908807][ T4182] exc_invalid_op+0x16/0x40 [ 173.913308][ T4182] asm_exc_invalid_op+0x16/0x20 [ 173.918157][ T4182] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 173.923795][ T4182] Code: 69 8d e8 34 4e f0 f8 48 8b 35 55 b7 9d 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f6 20 81 f8 e8 f1 e5 ab f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 173.943397][ T4182] RSP: 0018:ffffc90002f3fc08 EFLAGS: 00010293 [ 173.949463][ T4182] RAX: ffffffff88cbe61f RBX: ffff888076798138 RCX: ffff888079133b80 [ 173.957431][ T4182] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 173.965397][ T4182] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100ecf3003 [ 173.973363][ T4182] R10: ffffed100ecf3003 R11: 1ffff1100ecf3002 R12: dffffc0000000000 [ 173.981330][ T4182] R13: dffffc0000000000 R14: ffff888076798000 R15: ffff888076798010 [ 173.989317][ T4182] ? hci_conn_timeout+0x24f/0x450 [ 173.994339][ T4182] ? hci_conn_timeout+0x24f/0x450 [ 173.999344][ T4182] process_one_work+0x863/0x1000 [ 174.004266][ T4182] ? worker_detach_from_pool+0x240/0x240 [ 174.009877][ T4182] ? lockdep_hardirqs_off+0x70/0x100 [ 174.015140][ T4182] ? _raw_spin_lock_irq+0xab/0xe0 [ 174.020141][ T4182] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 174.025499][ T4182] ? wq_worker_running+0x97/0x170 [ 174.030504][ T4182] worker_thread+0xaa8/0x12a0 [ 174.035171][ T4182] kthread+0x436/0x520 [ 174.039215][ T4182] ? rcu_lock_release+0x20/0x20 [ 174.044040][ T4182] ? kthread_blkcg+0xd0/0xd0 [ 174.048609][ T4182] ret_from_fork+0x1f/0x30 [ 174.053008][ T4182] [ 174.056220][ T4182] Kernel Offset: disabled [ 174.060698][ T4182] Rebooting in 86400 seconds..