last executing test programs: 18.554320015s ago: executing program 3 (id=222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) fchown(0xffffffffffffffff, 0x0, 0xee01) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20040000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x408, 0x103) r5 = socket(0x11, 0xa, 0x5) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0x2481, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) socket$packet(0x11, 0x3, 0x300) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0x110) 16.225001583s ago: executing program 3 (id=224): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x20, 0xff, 0x0, 0xffff7038}]}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000d40)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) membarrier(0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1, 0x4, 0x10001, 0x5}) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(0xffffffffffffffff, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) 16.028122608s ago: executing program 2 (id=225): syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x4, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x7ff, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0xa, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x4a1b5693, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x7, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000400)}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13.767222765s ago: executing program 0 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b0000080039503230"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r3, 0x0) 13.505204091s ago: executing program 3 (id=227): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 13.362468235s ago: executing program 2 (id=228): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)="2e49ba771097", 0x6) 13.356811855s ago: executing program 0 (id=229): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x84022, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, 0x0, 0x4) 13.338458376s ago: executing program 1 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$inet6(0xa, 0x1, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x0, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000000), 0x0, 0x0, 0x0) fgetxattr(r5, &(0x7f0000000000)=ANY=[], 0x0, 0x8) 13.319840016s ago: executing program 3 (id=231): open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000200), 0x3f, r3}, 0x38) 13.19428249s ago: executing program 2 (id=232): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}, @CTA_NAT_SRC={0x1c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010105}]}]}, 0x84}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa1000028005000100000000000600034000040000080007400000040018000680140004002001000000"], 0xb4}}, 0x0) 12.133542596s ago: executing program 0 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x0, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000000), 0x0, 0x0, 0x0) fgetxattr(r6, &(0x7f0000000000)=ANY=[], 0x0, 0x8) 10.217661064s ago: executing program 1 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) fchown(0xffffffffffffffff, 0x0, 0xee01) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20040000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x408, 0x103) r5 = socket(0x11, 0xa, 0x5) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0x2481, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) socket$packet(0x11, 0x3, 0x300) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0x110) 10.217153134s ago: executing program 3 (id=235): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x0, 0x0, 0xb, 0x1, 0x10cf, 0x5501, 0x8b, 0x1, 0x9, 'syz1\x00'}) 7.052561413s ago: executing program 0 (id=237): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x20, 0xff, 0x0, 0xffff7038}]}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000d40)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) membarrier(0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) 5.052289034s ago: executing program 1 (id=238): syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x4, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x7ff, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0xa, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x4a1b5693, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x7, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000400)}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 5.024510584s ago: executing program 4 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r3, 0x0) 4.914328177s ago: executing program 3 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000200), 0x1, 0x4d3, &(0x7f0000000600)="$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") 4.743946411s ago: executing program 0 (id=241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd"], 0x0}, 0x94) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.542922387s ago: executing program 4 (id=242): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e26, 0x100002, @mcast1, 0xf}}, {{0xa, 0x4e0c, 0x0, @loopback, 0x1ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[], 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x40004f1}}}, 0x108) 4.516518887s ago: executing program 0 (id=243): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x84022, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, 0x0, 0x4) 4.428699929s ago: executing program 1 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x0, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000000), 0x0, 0x0, 0x0) fgetxattr(r5, &(0x7f0000000000)=ANY=[], 0x0, 0x8) 4.428137339s ago: executing program 4 (id=245): open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$eJzs3ctvW1kZAPDv3jycyWQmGZgFoAHKMFBQVTtxZ6LRbBhWI4RGQsySRSckThTFiaPYGZrQRbpkj0QlVrDiHwCJBVJX7JFYwI5NWSDxqEANEgsjX19nnIcbq03sNv79pCufe47t75xa9xzrc3NPACPrWkQcRMRkRHwcEbN5fZIf8X77aD3v8aO7y4eP7i4n0Wx+9M8ka2/VRddrWl7O33MqIr7/QcQPkxNB/xhR39vfWKpWKzt5VamxuV2q7+3fXN9cWqusVbbK5cWFxfl3b71TvqCR/vqo9LvffvHhHw6++eNWt2byuu5xXKT20CeO4rSMR8R3LyPYEIzl45l8mhc/1Yu4SGlEfCYi3syu/9kYyz7N445/TN+K/NIGAF5QzeZsNGe7zwGAqy7NcmBJWsxzATORpsViO4f3ekyn1Vq9cWO1tru10s6VzcVEurpercznucK5mEhW18crC1m5c16tlE+c34qI1yLip4WXsvPicq26MswvPgAwwl4+sf7/p9Be/wGAK67r1/zCMPsBAAyO/80HAKPH+g8Ao8f6DwCjx/oPAKPH+g8Ao8f6DwAj5Xsfftg6mof5/a9XPtnb3ah9cnOlUt8obu4uF5drO9vFtVptLbtnz+Z571et1bYX3o7dO6VGpd4o1ff2b2/Wdrcat7P7et+uTAxkVADAk7z25Qd/TiLi4L2XsiO67vd/7lr9xmX3DrhM6bA7AAzN2LA7AAzN6d2+gFEhHw90bdF7r6t66lThpPt9vX2a7xsKPEeuf/4Z8v/AC03+H0bX0+X/fZeHq0D+H0ZXs5nY8x8ARowcP5Cc0979+/98s+ukv9//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EqayY4kLeZ7gc9EmhaLEa9ExFxMJKvr1cp8RLwaEX8qTBRa5wsRYd8gAHiRpX9L8v2/rs++NXOydbLw30L2GBE/+vlHP7uz1GjsLERMJv86qm/cz+vLw+g/AHCezjrdWcc7Hj+6u9w5Btmfv3+7vbloK+5hfrRbxmM8e5zKcg3T/07y87bW95WxC4h/cC8iPnfW+JMsNzKX73x6Mn4r9isDjZ8ei59mbe3H1r/FZy+gLzBqHrTmn/fPuv7SuJY9nn39T2Uz1LPrzH+Hp+a/9Gj+G+sx/13rN8bbv//OqcrmbLvtXsQXxiMOO2/eNf904ic94r/VZ/y/vPGlN3u1NX8RcT3OGn9yLFapsbldqu/t31zfXFqrrFW2yuXFhcX5d2+9Uy5lOepSJ1N92j/eu/Fqr/it8U/3iD91zvi/1uf4f/m/j3/wlSfE/8ZXz/78X39C/Naa+PU+4y9N/2aqV1sr/kqP8Z/3+d/oM/7Dv+6v9PlUAGAA6nv7G0vVamXnsgvp5YfICknEwQCG0y4UfvWTDwYV6xIL8Xx0Q+F5Kgx7ZgIu26cX/bB7AgAAAAAAAAAAAAAA9DKIPyca9hgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//2KH0wQ=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000200), 0x3f, r1}, 0x38) 3.874433233s ago: executing program 2 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)="313a38c7e8", 0x5) 3.034403064s ago: executing program 2 (id=247): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@oldalloc}, {@errors_remount}, {@resuid}, {@bh}]}, 0xfe, 0x5a1, &(0x7f0000000680)="$eJzs3U9oHNUfAPDvzGab/snvlwoKKj0UFSqUbpL+0eqpvYqFQg+CFw2bbSjZZEs20SYETO9F7EFUeqk3PXhUPHgQLx69elE8C8UGhaYHXdnsbLpNN3VTs9ma/XxgkvfmTfb73sx+X3aGGTaAvnW4/iONeCYizicRwy1tA5E1Hm5st7qyVLy7slRMola78FsSSUTcWVkqNrdPst8HImI5Ip6OiO/yEUfT9Zfc0yxUFxanxsvl0mxWH5mbvjxSXVg8dml6fLI0WZo58fIrp06fPDV2fKy1u3drrbX81sZ67efr71/74bWb1z//4tBy8cPxJM7EUNbWOo7t1Ngn+TizYf3JbgTroWS9lOtpP9iaXJbn9VR6KoYjl2V9O7XWyWFwR7oHdFFtMKK2rqUI9IFE0kOfan4OqJ//Nped/Pxx62zjBKQed3VlqfheNOMPNK5NxN61c5P9vyf3nZnUzzcP7mRH2ZWWr0bE6MDAg+//JHv/PbrR7eggXfXt2caBevD4p+vzT7SZf4aa107/peb8t5rNf6tt4uc2mf/Odxjjzzd/+WTT+FcH49m28ZP1+Emb+GlEvN1h/BtvfH16s7bapxFHojV+s+XeFcXk4deHRy5eKpdGGz/bxvjmyKFXNx9/xP5oP/7GNdu9ax1pHf+erE9ph+P/6vsvn1t+SPwXn3/48W+3//dFxAcdxn/izmevb9Z262pyu/4pYKvHP4l83Oww/ktnDv+UFV01BAAAAAAAAACAbZSu3cuWpIX1cpoWCo1neJ+M/Wm5Up07erEyPzPRuOftYOTT5p1Ww416Uq+PZffjNuvHN9RPNB8Lze1bqxeKlfJEj8cOAAAAAAAAAAAAAAAAAAAAj4sDG57//yO39vz/xq+rBnarzb/yG9jt5D/0r/vzP+lZP4Cd5/8/9K2a/If+Jf+hf8l/6F/yH/qX/If+Jf+hf8l/AAAAAAAAAAAAAAAAAAAAAAAAAADoivPnztWX2t2VpWK9PjGwMD9VeefYRKk6VZieLxaKldnLhclKZbJcKhQr0//0ekmlcnk0ZuavjMyVqnMj1YXFt6Yr8zPN7xQt5bs+IgAAAAAAAAAAAAAAAAAAAPjvGVpbkrQQkW/U07RQiPhfRBxMIrl4qVwajYj/R8SPufxgvT7W604DAAAAAAAAAAAAAAAAAADALlNdWJwaL5dLs90rDGShuhii88LAVjaOiOXt7Ub9Fbf8V/lsB/Z41+2OQu7xeB8+/oUeTkoAAAAAAAAAAAAAAAAAANCn7j302+lf/NXdDgEAAAAAAAAAAAAAAAAAAEBfSn9NIqK+HBl+YWhj655kNbf2OyLevXHhoyvjc3OzY/X1t9fXz32crT/ei/4DnWrmaRoR9TwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7qkuLE6Nl8ul2UcsDHawTa/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAo/g4AAP//2tvNdQ==") r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f00000041c0)) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0xfc, &(0x7f0000000fc0)=[@request_death={0x400c630e, 0x3}], 0xfffc, 0x0, 0x0}) 2.842159029s ago: executing program 4 (id=248): inotify_init1(0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) dup(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.238890454s ago: executing program 4 (id=249): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x247, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x110}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x801, 0x0) r3 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) 2.063787309s ago: executing program 1 (id=250): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 873.857889ms ago: executing program 4 (id=251): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x20, 0xff, 0x0, 0xffff7038}]}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000d40)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) membarrier(0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) 639.802514ms ago: executing program 1 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r3, 0x0) 0s ago: executing program 2 (id=253): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x2, 0x2, 0x0, 0x1}}, @nested_vmlaunch={0x12f, 0x18}, @uexit={0x0, 0x18, 0xface}], 0x98}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xface) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. [ 62.455306][ T4173] cgroup: Unknown subsys name 'net' [ 62.594866][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.098204][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.501231][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.646248][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.653572][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.661977][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.692593][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.701073][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.709645][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.740639][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 65.756307][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.794923][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.810626][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.842219][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.880018][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 65.923747][ T4187] team0: Port device team_slave_0 added [ 65.934858][ T4187] team0: Port device team_slave_1 added [ 65.976621][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.983927][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.992265][ T4189] device bridge_slave_0 entered promiscuous mode [ 66.026589][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.033846][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.042466][ T4189] device bridge_slave_1 entered promiscuous mode [ 66.053385][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.060590][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.068843][ T4188] device bridge_slave_0 entered promiscuous mode [ 66.076898][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.083971][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.110190][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.139617][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.146720][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.154750][ T4188] device bridge_slave_1 entered promiscuous mode [ 66.162278][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.169444][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.195713][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.207098][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.214413][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.222788][ T4186] device bridge_slave_0 entered promiscuous mode [ 66.261274][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.268679][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.276914][ T4186] device bridge_slave_1 entered promiscuous mode [ 66.286085][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.312146][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.324199][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.342099][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.351644][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.359348][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.367330][ T4198] device bridge_slave_0 entered promiscuous mode [ 66.401153][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.408563][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.416609][ T4198] device bridge_slave_1 entered promiscuous mode [ 66.433327][ T4188] team0: Port device team_slave_0 added [ 66.441065][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.475309][ T4188] team0: Port device team_slave_1 added [ 66.482844][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.494095][ T4189] team0: Port device team_slave_0 added [ 66.506149][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.512931][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.540051][ T4189] team0: Port device team_slave_1 added [ 66.556225][ T4186] team0: Port device team_slave_0 added [ 66.564858][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.583263][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.614818][ T4186] team0: Port device team_slave_1 added [ 66.621291][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.631701][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.658133][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.676169][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.683647][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.709849][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.730796][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.737773][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.763790][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.797454][ T4198] team0: Port device team_slave_0 added [ 66.804385][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.812181][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.838694][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.865721][ T4198] team0: Port device team_slave_1 added [ 66.876449][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.883678][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.909798][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.929245][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.936217][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.962278][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.995927][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.003264][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.029560][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.055660][ T4188] device hsr_slave_0 entered promiscuous mode [ 67.062730][ T4188] device hsr_slave_1 entered promiscuous mode [ 67.069785][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.077806][ T4188] Cannot create hsr debugfs directory [ 67.099046][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.106045][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.132372][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.165971][ T4186] device hsr_slave_0 entered promiscuous mode [ 67.172894][ T4186] device hsr_slave_1 entered promiscuous mode [ 67.180202][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.187772][ T4186] Cannot create hsr debugfs directory [ 67.240659][ T4189] device hsr_slave_0 entered promiscuous mode [ 67.247490][ T4189] device hsr_slave_1 entered promiscuous mode [ 67.254815][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.262458][ T4189] Cannot create hsr debugfs directory [ 67.268991][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 67.275621][ T4191] Bluetooth: hci0: command 0x0409 tx timeout [ 67.348272][ T4191] Bluetooth: hci4: command 0x0409 tx timeout [ 67.351488][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 67.366639][ T4198] device hsr_slave_0 entered promiscuous mode [ 67.373328][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 67.382673][ T4198] device hsr_slave_1 entered promiscuous mode [ 67.389664][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.397238][ T4198] Cannot create hsr debugfs directory [ 67.612835][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.626836][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.636153][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.647545][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.721078][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.744880][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.757705][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.771802][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.823942][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.834065][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.846662][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.864842][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.875900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.885446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.895651][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.922349][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.944495][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.954973][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.964125][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.971484][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.980733][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.009523][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.021254][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.030398][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.037524][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.046668][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.056435][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.065150][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.074688][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.085298][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.093694][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.110796][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.120265][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.132132][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.145307][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.159380][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.173603][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.183161][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.213595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.224351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.252611][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.280211][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.310400][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.330785][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.349087][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.361298][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.371898][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.391446][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.408760][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.417566][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.444290][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.480336][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.488929][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.496774][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.506167][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.515419][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.522559][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.531059][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.540989][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.550067][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.557149][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.565793][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.576119][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.600609][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.615580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.624907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.635294][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.642439][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.653812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.699947][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.721048][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.733533][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.742494][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.751998][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.760720][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.767843][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.775871][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.785443][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.794689][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.804657][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.814515][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.823795][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.832914][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.840872][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.849786][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.858632][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.867088][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.877563][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.886173][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.895219][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.926443][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.941373][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.953874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.973708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.982517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.996170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.004745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.013366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.042413][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.060535][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.079275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.087944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.113070][ T4187] device veth0_vlan entered promiscuous mode [ 69.146301][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.156803][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.185986][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.217902][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.226270][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.235874][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.245367][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.256865][ T4187] device veth1_vlan entered promiscuous mode [ 69.277594][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.289677][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.299007][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.307722][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.316741][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.324136][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.348505][ T4240] Bluetooth: hci0: command 0x041b tx timeout [ 69.354589][ T4240] Bluetooth: hci3: command 0x041b tx timeout [ 69.375838][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.407778][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.420924][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.429012][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 69.436964][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.438625][ T1111] Bluetooth: hci2: command 0x041b tx timeout [ 69.456281][ T1111] Bluetooth: hci1: command 0x041b tx timeout [ 69.464323][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.478395][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.485892][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.497058][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.506526][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.513679][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.522960][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.532164][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.541372][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.550613][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.566507][ T4187] device veth0_macvtap entered promiscuous mode [ 69.593933][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.603492][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.612834][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.622967][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.631918][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.641176][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.650243][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.659602][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.698967][ T4187] device veth1_macvtap entered promiscuous mode [ 69.714643][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.727271][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.739190][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.747937][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.761442][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.768673][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.777752][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.786657][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.795499][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.802635][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.811196][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.820525][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.832095][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.840076][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.847521][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.856216][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.864643][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.880886][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.893071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.903938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.916848][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.945060][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.961389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.973501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.985944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.019360][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.033941][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.045273][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.060623][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.074734][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.083884][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.101545][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.116787][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.126326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.136550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.147049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.156940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.177779][ T4186] device veth0_vlan entered promiscuous mode [ 70.189588][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.199318][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.209024][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.217744][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.235949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.251871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.264891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.276116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.286153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.297489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.335004][ T4186] device veth1_vlan entered promiscuous mode [ 70.350876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.359731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.375325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.385728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.402142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.414927][ T4188] device veth0_vlan entered promiscuous mode [ 70.465050][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.484389][ T4188] device veth1_vlan entered promiscuous mode [ 70.498114][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.513634][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.524117][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.533640][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.542741][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.552485][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.585699][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.597701][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.613256][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.625751][ T4186] device veth0_macvtap entered promiscuous mode [ 70.636492][ T4186] device veth1_macvtap entered promiscuous mode [ 70.649842][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.657434][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.666253][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.723246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.735470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.760455][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.772091][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.784324][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.786464][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.800426][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.824360][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.836340][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.845396][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.854439][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.863990][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.874046][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.883452][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.894938][ T4188] device veth0_macvtap entered promiscuous mode [ 70.908527][ T4188] device veth1_macvtap entered promiscuous mode [ 70.935732][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.946899][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.960914][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.973819][ T4189] device veth0_vlan entered promiscuous mode [ 70.988705][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.996832][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.005295][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.014198][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.023063][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.033126][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.042031][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.050525][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.059611][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.067358][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.077588][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.085732][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.100292][ T4198] device veth0_vlan entered promiscuous mode [ 71.133494][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.144179][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.157122][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.167732][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.179826][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.188845][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.192514][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.196691][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.210258][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.221745][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.230766][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.243898][ T4198] device veth1_vlan entered promiscuous mode [ 71.253846][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.266221][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.277054][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.283673][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.285047][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.294505][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.309040][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.321619][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.331552][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.342084][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.354857][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.365363][ T4189] device veth1_vlan entered promiscuous mode [ 71.393781][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.402556][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.417236][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.426577][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.439497][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 71.445618][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 71.462521][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.475884][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.485220][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.494220][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.521163][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 71.554222][ T4198] device veth0_macvtap entered promiscuous mode [ 71.566907][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 71.575169][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 71.608822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.617395][ T4265] loop0: detected capacity change from 0 to 512 [ 71.630190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.645317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.684533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.693403][ T4265] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.715998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.763673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.786202][ T4198] device veth1_macvtap entered promiscuous mode [ 71.838740][ T4189] device veth0_macvtap entered promiscuous mode [ 71.903759][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.929585][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.939632][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.950089][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.960148][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.970653][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.984744][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.005337][ T4189] device veth1_macvtap entered promiscuous mode [ 72.023123][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.033908][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.042334][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.051501][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.081017][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.092064][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.102868][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.113390][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.123272][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.133955][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.146566][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.197503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.206670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.219360][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.227207][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.235224][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.256778][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.270746][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.280137][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.296260][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.313864][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.318190][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.329368][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.347072][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.362123][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.376562][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.388440][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.521564][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.540270][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.573474][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.679534][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.705062][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.739872][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.771886][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.831069][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.887409][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.958996][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.245807][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.257096][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.267309][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.280051][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.290219][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.300970][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.311849][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.322633][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.334114][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.361265][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.370233][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.398165][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.407032][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.424265][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.434239][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.447779][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.462752][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.497422][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.505608][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.511004][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.524938][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 73.535031][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.542287][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 73.588457][ T4213] Bluetooth: hci4: command 0x0419 tx timeout [ 73.594919][ T4213] Bluetooth: hci2: command 0x0419 tx timeout [ 73.602213][ T4213] Bluetooth: hci1: command 0x0419 tx timeout [ 73.697212][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.713274][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.761560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.029939][ T392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.039347][ T392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.218635][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.858297][ T392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.866723][ T392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.959701][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.003467][ T4288] loop3: detected capacity change from 0 to 4096 [ 76.227986][ C1] sched: RT throttling activated [ 76.503966][ T4288] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.624698][ T4288] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.4: corrupted inode contents [ 76.760956][ T4288] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz.3.4: mark_inode_dirty error [ 76.794928][ T4309] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.795804][ T4288] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.4: corrupted inode contents [ 76.875497][ T4306] loop1: detected capacity change from 0 to 256 [ 77.065062][ T4288] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.4: mark_inode_dirty error [ 77.085272][ T4315] loop6: detected capacity change from 0 to 8 [ 77.141630][ T4315] Dev loop6: unable to read RDB block 8 [ 77.147403][ T4315] loop6: unable to read partition table [ 77.167187][ T4288] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.4: corrupted inode contents [ 77.203380][ T4315] loop6: partition table beyond EOD, truncated [ 77.269438][ T4288] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.4: mark_inode_dirty error [ 77.287532][ T4315] loop_reread_partitions: partition scan of loop6 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 77.317533][ T4306] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb2f9d067, utbl_chksum : 0xe619d30d) [ 77.339591][ T4288] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.4: corrupted inode contents [ 77.359351][ T4318] gadgetfs: bound to dummy_udc driver [ 77.395021][ T3558] Dev loop6: unable to read RDB block 8 [ 77.429911][ T3558] loop6: unable to read partition table [ 77.436711][ T3558] loop6: partition table beyond EOD, truncated [ 77.464143][ T4288] EXT4-fs error (device loop3): ext4_truncate:4286: inode #15: comm syz.3.4: mark_inode_dirty error [ 77.498231][ T4288] EXT4-fs error (device loop3) in ext4_setattr:5645: Corrupt filesystem [ 80.021743][ T4336] Zero length message leads to an empty skb [ 80.633059][ T4348] loop2: detected capacity change from 0 to 128 [ 81.697219][ T4353] 8021q: VLANs not supported on lo [ 81.711294][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 81.752389][ T4353] device dummy1 entered promiscuous mode [ 82.621777][ T4353] syz.3.15 (4353) used greatest stack depth: 20560 bytes left [ 83.268483][ T4348] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 83.576583][ T4180] udevd[4180]: incorrect ext4 checksum on /dev/loop2 [ 83.736724][ T4180] udevd[4180]: incorrect ext4 checksum on /dev/loop2 [ 83.817362][ T4364] loop4: detected capacity change from 0 to 128 [ 83.953741][ T4364] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 84.237735][ T4373] mtrr: base(0xe7000) is not aligned on a size(0x0000) boundary [ 85.490415][ T4179] udevd[4179]: incorrect ext4 checksum on /dev/loop4 [ 85.538159][ T4231] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.178361][ T4231] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 86.257380][ T4231] usb 2-1: config 0 has no interface number 0 [ 86.580020][ T4231] usb 2-1: config 0 interface 41 has no altsetting 0 [ 86.650102][ T1108] cfg80211: failed to load regulatory.db [ 86.728242][ T4231] usb 2-1: string descriptor 0 read error: -71 [ 86.734559][ T4231] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 86.749789][ T4384] loop2: detected capacity change from 0 to 128 [ 86.788148][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.833462][ T4231] usb 2-1: config 0 descriptor?? [ 86.849081][ T4386] binder: BINDER_SET_CONTEXT_MGR already set [ 86.855331][ T4386] binder: 4385:4386 ioctl 4018620d 200000000040 returned -16 [ 86.888393][ T4231] usb 2-1: can't set config #0, error -71 [ 86.907908][ T4231] usb 2-1: USB disconnect, device number 2 [ 86.944304][ T4384] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.958148][ T4384] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.586009][ T4403] loop0: detected capacity change from 0 to 512 [ 87.796556][ T4405] loop3: detected capacity change from 0 to 16 [ 89.230644][ T4384] fscrypt: Error allocating hmac(sha512): -2 [ 90.523174][ T4410] loop4: detected capacity change from 0 to 512 [ 90.541042][ T4231] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.043941][ T4231] usb 2-1: device descriptor read/64, error -71 [ 91.338174][ T4231] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.589581][ T4405] erofs: (device loop3): mounted with root inode @ nid 36. [ 91.712214][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 91.714504][ T4403] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 91.869723][ T4231] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 91.921312][ T4410] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.30: bad orphan inode 11862016 [ 91.963136][ T4410] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.036990][ T4410] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.114944][ T4231] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 92.144205][ T4423] loop2: detected capacity change from 0 to 256 [ 92.163421][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.261645][ T4231] usb 2-1: Product: syz [ 93.265895][ T4231] usb 2-1: Manufacturer: syz [ 94.239229][ T4423] exfat: Bad value for 'fmask' [ 94.265577][ T4231] usb 2-1: SerialNumber: syz [ 94.529818][ T4231] usb 2-1: can't set config #1, error -71 [ 94.627735][ T4423] loop2: detected capacity change from 0 to 2048 [ 94.634645][ T4231] usb 2-1: USB disconnect, device number 4 [ 94.751910][ T4423] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,errors=remount-ro,max_dir_size_kb=0x0000000000000004,quota,. Quota mode: writeback. [ 97.153394][ T4418] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 97.738229][ T4418] EXT4-fs (loop2): Remounting filesystem read-only [ 97.864185][ T4468] fuse: Unknown parameter 'user_id00000000000000000000' [ 97.964602][ T4472] udevd[4472]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 100.373375][ T1111] Bluetooth: hci3: command 0x0406 tx timeout [ 100.597833][ T4504] loop3: detected capacity change from 0 to 512 [ 100.646288][ T4501] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 100.661637][ T4501] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 100.794051][ T4504] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.59: bad orphan inode 11862016 [ 100.880705][ T4504] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.958989][ T4504] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.339827][ T4529] fuse: Bad value for 'fd' [ 103.436220][ T4535] loop2: detected capacity change from 0 to 1024 [ 103.505450][ T4535] ======================================================= [ 103.505450][ T4535] WARNING: The mand mount option has been deprecated and [ 103.505450][ T4535] and is ignored by this kernel. Remove the mand [ 103.505450][ T4535] option from the mount to silence this warning. [ 103.505450][ T4535] ======================================================= [ 103.617067][ T4535] EXT4-fs (loop2): Mount option "nodioread_nolock" incompatible with ext3 [ 104.020254][ T4543] process 'syz.2.69' launched './file2' with NULL argv: empty string added [ 104.539346][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 104.637525][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 104.894304][ T4553] ip_tables: iptables: counters copy to user failed while replacing table [ 105.644191][ T4565] loop2: detected capacity change from 0 to 512 [ 105.793338][ T4565] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.77: bad orphan inode 11862016 [ 105.894193][ T4565] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.972748][ T4565] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.917712][ T4586] fuse: Bad value for 'fd' [ 107.205192][ T4591] loop4: detected capacity change from 0 to 1024 [ 108.038494][ T4594] loop1: detected capacity change from 0 to 512 [ 109.222985][ T4591] EXT4-fs (loop4): Mount option "nodioread_nolock" incompatible with ext3 [ 110.298148][ T4603] binder: 4588:4603 ioctl c0306201 2000000001c0 returned -14 [ 110.941456][ T4594] EXT4-fs: error -4 creating inode table initialization thread [ 110.949806][ T4594] EXT4-fs (loop1): mount failed [ 111.172713][ T4612] ip_tables: iptables: counters copy to user failed while replacing table [ 111.485355][ T4616] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 111.499254][ T4616] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 111.556919][ T4626] jffs2: notice: (4626) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 111.711409][ T4203] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 111.721479][ T4203] CPU: 0 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 111.729068][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.739183][ T4203] Workqueue: hci3 hci_rx_work [ 111.743922][ T4203] Call Trace: [ 111.747226][ T4203] [ 111.750186][ T4203] dump_stack_lvl+0x188/0x250 [ 111.754903][ T4203] ? show_regs_print_info+0x20/0x20 [ 111.760150][ T4203] ? load_image+0x410/0x410 [ 111.764714][ T4203] sysfs_create_dir_ns+0x26a/0x290 [ 111.769955][ T4203] ? sysfs_warn_dup+0xa0/0xa0 [ 111.774662][ T4203] ? kthread+0x42e/0x520 [ 111.778944][ T4203] ? do_raw_spin_unlock+0x11d/0x230 [ 111.784286][ T4203] kobject_add_internal+0x5ba/0xcd0 [ 111.789542][ T4203] kobject_add+0x160/0x230 [ 111.794004][ T4203] ? kobject_init+0x1c0/0x1c0 [ 111.798726][ T4203] ? __raw_spin_lock_init+0x41/0x100 [ 111.799054][ T4636] loop4: detected capacity change from 0 to 512 [ 111.804037][ T4203] ? klist_children_get+0x50/0x50 [ 111.815367][ T4203] ? get_device_parent+0x121/0x3e0 [ 111.820517][ T4203] device_add+0x470/0x1050 [ 111.824987][ T4203] ? device_initialize+0x2a5/0x4d0 [ 111.830146][ T4203] hci_conn_add_sysfs+0xd1/0x1e0 [ 111.835123][ T4203] le_conn_complete_evt+0xc2e/0x14d0 [ 111.840453][ T4203] ? cs_le_create_conn+0x5e0/0x5e0 [ 111.845608][ T4203] ? __mutex_trylock_common+0x15c/0x260 [ 111.851198][ T4203] hci_le_meta_evt+0x285/0x3ca0 [ 111.856086][ T4203] ? hci_event_packet+0x363/0x1310 [ 111.861238][ T4203] ? __lock_acquire+0x7b50/0x7b50 [ 111.866313][ T4203] ? hci_remote_host_features_evt+0x240/0x240 [ 111.872416][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 111.878086][ T4203] ? mark_lock+0x94/0x320 [ 111.882445][ T4203] ? mutex_unlock+0x10/0x10 [ 111.886983][ T4203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 111.893008][ T4203] ? lock_chain_count+0x20/0x20 [ 111.897906][ T4203] ? __rwlock_init+0x140/0x140 [ 111.902707][ T4203] hci_event_packet+0xe0b/0x1310 [ 111.907689][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 111.912580][ T4203] ? rcu_lock_release+0x20/0x20 [ 111.917486][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 111.922727][ T4203] hci_rx_work+0x255/0xa10 [ 111.927199][ T4203] process_one_work+0x867/0xff0 [ 111.932107][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 111.937773][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 111.943102][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 111.948183][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 111.953764][ T4203] ? wq_worker_running+0x97/0x170 [ 111.958826][ T4203] worker_thread+0xad7/0x12a0 [ 111.963553][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 111.969495][ T4203] kthread+0x42e/0x520 [ 111.973609][ T4203] ? rcu_lock_release+0x20/0x20 [ 111.978518][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 111.983154][ T4203] ret_from_fork+0x1f/0x30 [ 111.987622][ T4203] [ 112.018900][ T4203] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 112.032367][ T4203] Bluetooth: hci3: failed to register connection device [ 112.089769][ T4636] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.95: bad orphan inode 11862016 [ 112.132394][ T4646] fuse: Bad value for 'fd' [ 112.142441][ T4636] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.236932][ T4636] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.447043][ T4652] loop3: detected capacity change from 0 to 1024 [ 112.501815][ T1108] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 112.556916][ T4652] EXT4-fs (loop3): Mount option "nodioread_nolock" incompatible with ext3 [ 114.383211][ T4658] loop2: detected capacity change from 0 to 512 [ 114.438034][ T4659] binder: 4650:4659 ioctl c0306201 2000000001c0 returned -14 [ 114.757038][ T4658] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.768777][ T4658] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.229262][ T1108] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 115.239037][ T1108] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 24929, setting to 64 [ 115.250181][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.213294][ T4669] loop4: detected capacity change from 0 to 512 [ 116.248228][ T1108] usb 2-1: string descriptor 0 read error: -71 [ 116.254610][ T1108] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 116.707095][ T4669] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.718779][ T4669] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.239039][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.251754][ T1108] usb 2-1: config 0 descriptor?? [ 117.268407][ T1108] usb 2-1: can't set config #0, error -71 [ 117.277527][ T1108] usb 2-1: USB disconnect, device number 5 [ 120.415897][ T4702] loop2: detected capacity change from 0 to 512 [ 120.646016][ T4709] loop4: detected capacity change from 0 to 512 [ 120.857674][ T4702] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.112: bad orphan inode 11862016 [ 120.923912][ T4709] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.936495][ T4709] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.320850][ T4702] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.403920][ T4702] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.081380][ T4728] device syzkaller0 entered promiscuous mode [ 123.476715][ T4731] ip_tables: iptables: counters copy to user failed while replacing table [ 123.821121][ T4736] loop1: detected capacity change from 0 to 512 [ 124.206603][ T4745] loop2: detected capacity change from 0 to 512 [ 126.247129][ T4748] futex_wake_op: syz.3.123 tries to shift op by 144; fix this program [ 126.526091][ T4736] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.122: bad orphan inode 11862016 [ 126.551999][ T4745] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.563500][ T4745] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.578893][ T4736] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.648834][ T4736] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.251211][ T4764] Falling back ldisc for ttyS3. [ 127.285025][ T4766] capability: warning: `syz.4.128' uses 32-bit capabilities (legacy support in use) [ 127.357056][ T4767] loop4: detected capacity change from 0 to 512 [ 127.550661][ T4767] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.120360][ T4777] loop4: detected capacity change from 0 to 512 [ 128.340858][ T4777] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.131: bad orphan inode 11862016 [ 128.400777][ T4777] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.436900][ T4777] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.487074][ T4783] device syzkaller0 entered promiscuous mode [ 129.341102][ T4793] ip_tables: iptables: counters copy to user failed while replacing table [ 130.489526][ T4797] loop3: detected capacity change from 0 to 512 [ 131.723638][ T4797] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.735567][ T4797] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.227002][ T4811] loop2: detected capacity change from 0 to 1024 [ 133.318674][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.325153][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.421467][ T4811] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 136.112479][ T4841] loop4: detected capacity change from 0 to 512 [ 136.167304][ T4844] futex_wake_op: syz.2.149 tries to shift op by 144; fix this program [ 137.422229][ T4841] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.148: bad orphan inode 11862016 [ 137.665657][ T4841] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.743099][ T4841] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.759901][ T4852] ip_tables: iptables: counters copy to user failed while replacing table [ 137.835377][ T4854] loop1: detected capacity change from 0 to 512 [ 138.520745][ T4854] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.152: bad orphan inode 11862016 [ 138.570235][ T4854] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.635368][ T4866] loop3: detected capacity change from 0 to 1024 [ 138.668617][ T4854] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.738751][ T4866] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 140.150813][ T4874] binder: 4871:4874 ioctl c0306201 2000000001c0 returned -14 [ 142.264415][ T4882] device syzkaller0 entered promiscuous mode [ 143.791670][ T4898] loop2: detected capacity change from 0 to 512 [ 145.855380][ T4907] loop3: detected capacity change from 0 to 1024 [ 146.051405][ T4913] loop4: detected capacity change from 0 to 1024 [ 146.062292][ T4907] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 146.089212][ T4922] futex_wake_op: syz.2.168 tries to shift op by 144; fix this program [ 146.398210][ T4913] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 146.478080][ T4913] EXT4-fs (loop4): Ignoring removed orlov option [ 146.599928][ T4913] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 146.989624][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 147.159021][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 152.670033][ T4954] device syzkaller0 entered promiscuous mode [ 153.518240][ T4959] loop2: detected capacity change from 0 to 512 [ 153.709359][ T4959] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.776235][ T4970] loop3: detected capacity change from 0 to 1024 [ 153.789597][ T4971] fuse: Unknown parameter '0x0000000000000003' [ 153.917642][ T4970] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 154.057509][ T4981] futex_wake_op: syz.4.185 tries to shift op by 144; fix this program [ 154.470846][ T4983] binder: 4978:4983 ioctl c0306201 2000000001c0 returned -14 [ 156.721760][ T4998] ip_tables: iptables: counters copy to user failed while replacing table [ 158.401203][ T5008] tmpfs: Unknown parameter 'usrquota' [ 158.544364][ T5013] fuse: Unknown parameter '0x0000000000000003' [ 159.550163][ T5021] loop4: detected capacity change from 0 to 512 [ 159.668968][ T5021] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.970521][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 160.029681][ T5029] loop3: detected capacity change from 0 to 512 [ 160.067375][ T5035] futex_wake_op: syz.4.200 tries to shift op by 144; fix this program [ 160.104748][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 160.316483][ T5029] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.199: bad orphan inode 11862016 [ 160.357728][ T5029] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.454605][ T5029] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.733809][ T5054] loop1: detected capacity change from 0 to 512 [ 165.105959][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 165.118873][ T5054] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.130035][ T5054] ext4 filesystem being mounted at /42/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.254866][ T5069] mtrr: base(0xe7000) is not aligned on a size(0x0000) boundary [ 165.462177][ T5071] fuse: Unknown parameter '0x0000000000000003' [ 166.893856][ T5081] loop4: detected capacity change from 0 to 512 [ 166.918988][ T5081] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.011924][ T5077] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 167.058189][ T5077] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 167.417494][ T5094] loop1: detected capacity change from 0 to 512 [ 167.779572][ T5094] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.216: bad orphan inode 11862016 [ 167.806830][ T5094] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.165377][ T5094] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.788925][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 169.241478][ T5083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 176.032906][ T5152] loop3: detected capacity change from 0 to 512 [ 176.406720][ T5152] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.231: bad orphan inode 11862016 [ 176.827577][ T5152] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.038175][ T5152] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.764504][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 178.801717][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 181.777998][ T5181] loop4: detected capacity change from 0 to 512 [ 182.247041][ T5179] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 182.636959][ T5181] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.648616][ T5181] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.887609][ T5213] loop4: detected capacity change from 0 to 512 [ 185.685510][ T5213] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.245: bad orphan inode 11862016 [ 185.889443][ T5213] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.951917][ T5213] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.528421][ T5224] loop2: detected capacity change from 0 to 1024 [ 186.634589][ T5224] EXT4-fs (loop2): Mount option "nodioread_nolock" incompatible with ext3 [ 186.811746][ T5226] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 187.085444][ T5230] loop4: detected capacity change from 0 to 128 [ 187.150801][ T5230] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 187.217309][ T4180] udevd[4180]: incorrect ext4 checksum on /dev/loop4 [ 188.336989][ T5237] binder: 5223:5237 ioctl c0306201 2000000001c0 returned -14 [ 189.243169][ T4203] ------------[ cut here ]------------ [ 189.251802][ T4203] WARNING: CPU: 1 PID: 4203 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 189.263134][ T4203] Modules linked in: [ 189.267152][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 189.277407][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.288087][ T4203] Workqueue: hci3 hci_conn_timeout [ 189.293487][ T4203] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 189.299926][ T4203] Code: 8b 8d e8 94 74 de f8 48 8b 35 35 63 ab 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 26 2a 6e f8 e8 b1 51 99 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 189.324737][ T4203] RSP: 0018:ffffc9000304fc08 EFLAGS: 00010293 [ 189.332178][ T4203] RAX: ffffffff88dfaaff RBX: ffff88807c33c138 RCX: ffff888019999dc0 [ 189.342501][ T4203] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.351753][ T4203] RBP: 00000000ffffffff R08: ffff88807c33c013 R09: 1ffff1100f867802 [ 189.360486][ T4203] R10: dffffc0000000000 R11: ffffed100f867803 R12: ffff88801b9c4808 [ 189.368732][ T4203] R13: dffffc0000000000 R14: ffff88807c33c000 R15: ffff88807c33c010 [ 189.377147][ T4203] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 189.386449][ T4203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.393491][ T4203] CR2: 00007f822cfacab1 CR3: 0000000063dfc000 CR4: 00000000003506e0 [ 189.401852][ T4203] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000079015b94 [ 189.410306][ T4203] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 189.418612][ T4203] Call Trace: [ 189.422143][ T4203] [ 189.425238][ T4203] process_one_work+0x867/0xff0 [ 189.430351][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 189.437144][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 189.443887][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.476332][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.482912][ T4203] ? wq_worker_running+0x97/0x170 [ 189.603844][ T4203] worker_thread+0xad7/0x12a0 [ 189.609568][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 189.616302][ T4203] kthread+0x42e/0x520 [ 189.620865][ T4203] ? rcu_lock_release+0x20/0x20 [ 189.626543][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 189.632012][ T4203] ret_from_fork+0x1f/0x30 [ 189.644274][ T4203] [ 189.648178][ T4203] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.655493][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 189.663065][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.673144][ T4203] Workqueue: hci3 hci_conn_timeout [ 189.678319][ T4203] Call Trace: [ 189.681638][ T4203] [ 189.684591][ T4203] dump_stack_lvl+0x188/0x250 [ 189.689305][ T4203] ? show_regs_print_info+0x20/0x20 [ 189.694539][ T4203] ? load_image+0x410/0x410 [ 189.699088][ T4203] panic+0x2f8/0x850 [ 189.703015][ T4203] ? bpf_jit_dump+0xd0/0xd0 [ 189.707573][ T4203] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 189.713237][ T4203] ? __warn+0x230/0x2b0 [ 189.717439][ T4203] ? hci_conn_timeout+0x24f/0x450 [ 189.722494][ T4203] __warn+0x248/0x2b0 [ 189.726507][ T4203] ? hci_conn_timeout+0x24f/0x450 [ 189.731558][ T4203] report_bug+0x1b9/0x2e0 [ 189.735939][ T4203] handle_bug+0x3a/0x70 [ 189.740120][ T4203] exc_invalid_op+0x16/0x40 [ 189.744644][ T4203] asm_exc_invalid_op+0x16/0x20 [ 189.749523][ T4203] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 189.755200][ T4203] Code: 8b 8d e8 94 74 de f8 48 8b 35 35 63 ab 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 26 2a 6e f8 e8 b1 51 99 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 189.775368][ T4203] RSP: 0018:ffffc9000304fc08 EFLAGS: 00010293 [ 189.781472][ T4203] RAX: ffffffff88dfaaff RBX: ffff88807c33c138 RCX: ffff888019999dc0 [ 189.789470][ T4203] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.797465][ T4203] RBP: 00000000ffffffff R08: ffff88807c33c013 R09: 1ffff1100f867802 [ 189.805457][ T4203] R10: dffffc0000000000 R11: ffffed100f867803 R12: ffff88801b9c4808 [ 189.813457][ T4203] R13: dffffc0000000000 R14: ffff88807c33c000 R15: ffff88807c33c010 [ 189.821459][ T4203] ? hci_conn_timeout+0x24f/0x450 [ 189.826518][ T4203] ? hci_conn_timeout+0x24f/0x450 [ 189.831569][ T4203] process_one_work+0x867/0xff0 [ 189.836473][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 189.842129][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 189.847450][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.852503][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.858081][ T4203] ? wq_worker_running+0x97/0x170 [ 189.863134][ T4203] worker_thread+0xad7/0x12a0 [ 189.867859][ T4203] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 189.873790][ T4203] kthread+0x42e/0x520 [ 189.877892][ T4203] ? rcu_lock_release+0x20/0x20 [ 189.882775][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 189.887391][ T4203] ret_from_fork+0x1f/0x30 [ 189.891859][ T4203] [ 189.895017][ T4203] Kernel Offset: disabled [ 189.899549][ T4203] Rebooting in 86400 seconds..