last executing test programs: 7.250843603s ago: executing program 2 (id=1349): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Ca'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 7.192681225s ago: executing program 1 (id=1350): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x14014) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x5ed, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x5df, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x3, "69f3e8b59b5259b900ec504b5e1ee5c150cbebfa40406831c788d7d76094e583483aa311f12d5458b8cc4e29b5eb6dead441404e6801fab976038fbd30ae77f9fcc6ab5334ee32a07fcb3bc0da28f8170f616a6b66158932e8188cec6c0e99360ea36fe8687b8557764470ce90591edaff50ae0b95f0ac636ad77f9297fec41d49bca237f3bce7545860cf0b3066e8e1f86bc5e095830cbf7b39b9b6b02adbeb6afeb24bae041957df3f7f5889a60dda85c21de3aee4d22b983928d814d49a827ae2addf90e4c1fba595b860ad9008e09d8fd9744e9dc8b6f2bde006f534d639209f0fd455f748d14a21531abb22648069bdb2de5b3516f9119877c299e33d08170fdc890d399914916711a9b56a757a9f0498d84d81f53f34dd27cc51f6368934cd25736724b74e1280f5babde7bb0ab82f2f86106d594c4f8661a497e9ce87ddec264d6b4c5aee4d6de14efb59aab25f132e128e7c00bd95e6f50b8f462135aea619c48b52a1c397b6b86861bdd70ea5c996f57624dc2dc3fa208abcc53def02d40342646c0abbe5495f48ea9aed7852dc0cd966d2522c54f1bb5f05dd60d69b9ed38bc1b8f03edacb8637f3e33a57521900d39dee948c51a30ec9904f536b6cb9d9c726538500f694d8fdb07cf3f31192f26127caab294d4a4f88dce05e630c62b217c89e8483460be00be85dba965f62a2c2b914dae81c2c4f77202411d3b78918d45b604fe57251013cf36665adcc993428ecf69c098dc38e15ad224bd806ba5d797bc18c3b9086f244a7ba548cad49620e8b0c55320773544e60be874b9079e3c55702a30737070097cf7bd3073be9505221260b01dc1d6d79d6eed414a548c9c964e73601aae5325329750771019aa05905f384694c6e8d18fc4641204848da8823cb7c94fa1224d5752aaf113042236c435f2580be740690f66194ea3efe3041c79872d1f88fb19588fdf47038050939a04aead85667b8f2458c1948fbc102684e23450bd1c2729e22af2a52bc1ac46fb8d2b7f0d875266ffb75993dafb4c9e51d0f1e04891c5580efc4c257cfd142489bd45effbd00c19035c448259412ae51c7d26cba279c84d91d2eff9796d46cc7b92d8ce71f9b2a15108de9e0907a79c50daef1429e46243ba5b503e967e02fac1743787ff8708de8787ef3742bbd1db806d4dea0545a8d1071c43ef10842583efa6efbb59fafc9997a0c84ea1717735e8bbb3a9c69edc622e34b6874183e20164b59276bdfd2b283495ffe3c3f270d087ebc4196e941294b00b751fa5077ceebf67c17cc1b5cb7bbbf43b28dfe578f8fb99d4d73ee9fc302eaa014f3fd6d10bebec85607b8ed9b41dba933a31652c9948c420e818e0fcf19af1d9abe1292b7798d2b510805f14c2f645f9f2c27bf5d29dbc38e9d3a38be100ae9edec1abb8d30b7703c72f5457c5b5d4f9b5ef5a25d04008b1238ca4337b573701c9a3f95e54b3f5c5fbe5e3566152971996c506f9c931b3f2e837bf798da910480fa7283dba08fb9d83f8cedcf011c0419104b1af8f84a9bc7be8ad97c7545331453d7ce80d6cde1bcfbcca4d1ae358298f57b2117b39f49536e06a0ebbd00e0ba50844b40605428c4c860f70374452f236f2f76b89cd8d894b8f1d116593e9eecac85a2359914d4ef49093e908a098802e173333d26ed99834fd31bf48636924bed774ea9b1b6c49f29905b1899f0beb4b93cc63774a6f4c900edea41c4b6e31a353eb6accf8810ac5af01c28cb60f03de307ec1bda4409c04b1b2ac7c15a1371d06f4b2ba08801444c1240c8b4729ed32ceb4afd55c929413402a6da045952bfd363ffdbfe4feb6369a083357d428db9175c41fe346f84673080d1d488c553c3558715de5466d33007f9a267944f2b4230ae3c68f9b0adbd625ce26ebec6df5ce8e28e6293cda99a84bf4c6ab13a8e58a966851f48a9399ce397517eefdc34192ec9e8e8d1e12c31730a30b6fc4be9c04bcafd114e0f466a620f8533a92a48198b4f5e22d0df50578d297eb98fd83112176aa25a3c6df37443a4974e014e48790b24cb723794e94e22ff9db56e93ba7d"}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 7.095135868s ago: executing program 1 (id=1351): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Ca'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 6.293314163s ago: executing program 3 (id=1354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 5.253298026s ago: executing program 3 (id=1356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000200)={0x1d, r3}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=r2, @ANYBLOB="3bf81bb9e9"], 0x20000600}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$sock(r4, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 5.251111516s ago: executing program 0 (id=1357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3c01000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fffdffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000f8ffffffbcfbffff2abd7000000000000200010028000000000000004b0003006465666c61746500"], 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.129318439s ago: executing program 1 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30008040}, 0x40080d1) r5 = accept(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0xa000}, 0x24000801) 5.128798679s ago: executing program 2 (id=1359): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Ca'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 5.075325971s ago: executing program 0 (id=1360): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.678725303s ago: executing program 0 (id=1361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3c01000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fffdffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000f8ffffffbcfbffff2abd7000000000000200010028000000000000004b0003006465666c61746500"], 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.665514384s ago: executing program 3 (id=1362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$sock(r5, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 4.413157192s ago: executing program 4 (id=1363): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x14014) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x5ed, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x5df, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x3, "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"}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 4.212392218s ago: executing program 2 (id=1364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) fremovexattr(0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 4.194562558s ago: executing program 4 (id=1365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$sock(r5, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 4.1640292s ago: executing program 1 (id=1366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3c01000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fffdffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000f8ffffffbcfbffff2abd7000000000000200010028000000000000004b0003006465666c61746500"], 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.766440513s ago: executing program 0 (id=1367): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Ca'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 2.666249766s ago: executing program 2 (id=1368): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) listen(0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) 2.333611076s ago: executing program 2 (id=1369): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Ca'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 2.333273696s ago: executing program 4 (id=1370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3c01000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fffdffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000f8ffffffbcfbffff2abd7000000000000200010028000000000000004b0003006465666c61746500"], 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.331068427s ago: executing program 3 (id=1371): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.861969851s ago: executing program 0 (id=1372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000200)={0x1d, r3}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=r2, @ANYBLOB="3bf81bb9e9"], 0x20000600}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$sock(r4, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 1.861477991s ago: executing program 3 (id=1373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30008040}, 0x40080d1) r5 = accept(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0xa000}, 0x24000801) 1.545974081s ago: executing program 0 (id=1374): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Ca'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 1.497851573s ago: executing program 1 (id=1375): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Ca'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 1.429277225s ago: executing program 4 (id=1376): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x14014) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x5ed, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x5df, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @echo={0x8, 0x0, 0x0, 0x6, 0x3, "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"}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 1.054165947s ago: executing program 4 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30008040}, 0x40080d1) r5 = accept(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0xa000}, 0x24000801) 704.095758ms ago: executing program 2 (id=1378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3c01000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fffdffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000f8ffffffbcfbffff2abd7000000000000200010028000000000000004b0003006465666c61746500"], 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 576.961302ms ago: executing program 1 (id=1379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./file0\x00', 0x80301, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0xb7, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) close(r3) 715.02µs ago: executing program 4 (id=1380): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r1 = open(0x0, 0x14927e, 0x68) fallocate(r1, 0x0, 0x0, 0x1001ed) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x802d0e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x0, 0x46f, &(0x7f0000000780)="$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") sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) recvmmsg$unix(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 0s ago: executing program 3 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3c01000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fffdffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000f8ffffffbcfbffff2abd7000000000000200010028000000000000004b0003006465666c61746500"], 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. [ 29.106819][ T4314] cgroup: Unknown subsys name 'net' [ 29.330801][ T4314] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.625138][ T4314] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.328859][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.330763][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.332081][ T4330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.333837][ T4330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.341867][ T4341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.343366][ T4341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.344685][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.346055][ T4341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.347292][ T4341] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.348958][ T4341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.350410][ T4341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.351607][ T4341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.352877][ T4341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.354064][ T4341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.355277][ T4341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.356482][ T4341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.357892][ T4341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.359310][ T4342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.363966][ T4342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.365597][ T4342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.367020][ T4342] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.373022][ T4343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.374577][ T4343] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.375889][ T4343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.378829][ T4328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.388581][ T4335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.390070][ T4335] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.391617][ T4335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.393083][ T4335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.394726][ T4335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.495100][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 30.521330][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 30.555683][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.566746][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.568231][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.569829][ T4327] device bridge_slave_0 entered promiscuous mode [ 30.573368][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.574553][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.576037][ T4327] device bridge_slave_1 entered promiscuous mode [ 30.585186][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.586500][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.588455][ T4332] device bridge_slave_0 entered promiscuous mode [ 30.596395][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.597568][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.599964][ T4332] device bridge_slave_1 entered promiscuous mode [ 30.604216][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 30.617344][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 30.622701][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.625148][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.642760][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.646795][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.655519][ T4327] team0: Port device team_slave_0 added [ 30.663192][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.664478][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.665891][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.667607][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.668835][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.670427][ T4333] device bridge_slave_0 entered promiscuous mode [ 30.673476][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.674617][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.676029][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.682012][ T4327] team0: Port device team_slave_1 added [ 30.687448][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.689008][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.690453][ T4333] device bridge_slave_1 entered promiscuous mode [ 30.692872][ T4332] team0: Port device team_slave_0 added [ 30.695116][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.705033][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.706307][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.708398][ T4326] device bridge_slave_0 entered promiscuous mode [ 30.713273][ T4332] team0: Port device team_slave_1 added [ 30.714393][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.715517][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.717001][ T4326] device bridge_slave_1 entered promiscuous mode [ 30.724131][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.731702][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.732829][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.736779][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.740362][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.747579][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.749121][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.753154][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.755928][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.757652][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.759184][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.763082][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.771608][ T4331] team0: Port device team_slave_0 added [ 30.773486][ T4331] team0: Port device team_slave_1 added [ 30.777477][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.782756][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.783904][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.788300][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.791033][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.797698][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.801450][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.805538][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.816565][ T4333] team0: Port device team_slave_0 added [ 30.818958][ T4326] team0: Port device team_slave_0 added [ 30.820394][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.821548][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.825477][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.828374][ T4326] team0: Port device team_slave_1 added [ 30.834012][ T4333] team0: Port device team_slave_1 added [ 30.909285][ T4327] device hsr_slave_0 entered promiscuous mode [ 30.948316][ T4327] device hsr_slave_1 entered promiscuous mode [ 30.990844][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.992105][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.996342][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.003769][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.005044][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.010135][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.012660][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.013731][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.017797][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.023113][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.024374][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.028873][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.079072][ T4332] device hsr_slave_0 entered promiscuous mode [ 31.128146][ T4332] device hsr_slave_1 entered promiscuous mode [ 31.178108][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.179392][ T4332] Cannot create hsr debugfs directory [ 31.219085][ T4331] device hsr_slave_0 entered promiscuous mode [ 31.258329][ T4331] device hsr_slave_1 entered promiscuous mode [ 31.298132][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.299520][ T4331] Cannot create hsr debugfs directory [ 31.359107][ T4333] device hsr_slave_0 entered promiscuous mode [ 31.398309][ T4333] device hsr_slave_1 entered promiscuous mode [ 31.438090][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.439411][ T4333] Cannot create hsr debugfs directory [ 31.499042][ T4326] device hsr_slave_0 entered promiscuous mode [ 31.538201][ T4326] device hsr_slave_1 entered promiscuous mode [ 31.578050][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.579426][ T4326] Cannot create hsr debugfs directory [ 31.692632][ T4331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.740652][ T4331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.779414][ T4331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.829178][ T4331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.871215][ T4327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.918946][ T4327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.979772][ T4327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.021950][ T4327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.066017][ T4333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.107775][ T4333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.153709][ T4333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.199385][ T4333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.253072][ T4326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.289594][ T4326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.338086][ T4326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.384474][ T4326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.398188][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 32.398212][ T4339] Bluetooth: hci4: command 0x0409 tx timeout [ 32.399258][ T4335] Bluetooth: hci0: command 0x0409 tx timeout [ 32.426595][ T4332] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.462868][ T4332] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.478456][ T4335] Bluetooth: hci1: command 0x0409 tx timeout [ 32.478530][ T4330] Bluetooth: hci2: command 0x0409 tx timeout [ 32.499492][ T4332] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.539182][ T4332] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.610744][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.626476][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.636043][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.641768][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.645063][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.651396][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.654458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.656104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.666275][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.667751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.669701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.671429][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.672597][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.674205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.685090][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.686797][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.689170][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.690362][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.691737][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.693272][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.694636][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.696281][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.697714][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.699055][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.703234][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.705752][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.710631][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.712293][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.714107][ T1602] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.715362][ T1602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.716720][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.721846][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.727574][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.731668][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.733434][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.735126][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.736739][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.741794][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.743329][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.744457][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.745811][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.747410][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.753731][ T4327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.755553][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.761107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.763037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.764647][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.766944][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.769589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.771161][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.778695][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.780510][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.782094][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.783721][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.784918][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.786140][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.787809][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.790045][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.792176][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.793727][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.795550][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.797145][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.799479][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.804740][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.811556][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.813210][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.814954][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.816312][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.817778][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.819598][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.821097][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.822369][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.830442][ T4333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.832125][ T4333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.836206][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.838355][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.841907][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.843541][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.845678][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.847177][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.848999][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.850636][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.852175][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.853965][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.855711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.857248][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.861322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.879537][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.881269][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.882699][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.884306][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.885833][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.887037][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.893986][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.895952][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.897701][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.904534][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.910527][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.917408][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.923496][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.924997][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.926395][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.931396][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.937091][ T4326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.939914][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.943235][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.944780][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.946402][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.947911][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.953495][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.957799][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.967154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.969597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.971177][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.972401][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.974500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.975989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.977615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.986847][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.988113][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.995830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.997087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.001097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.002987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.009517][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.017134][ T4332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.019819][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.022607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.023992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.025195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.027227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.031641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.033225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.034887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.036374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.038886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.040446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.043958][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.053535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.055187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.056871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.058540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.060757][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.066049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.067642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.075203][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.076932][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.100231][ T4327] device veth0_vlan entered promiscuous mode [ 33.103004][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.104506][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.106261][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.107891][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.110826][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.112759][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.114167][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.118868][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.123920][ T4331] device veth0_vlan entered promiscuous mode [ 33.129746][ T4327] device veth1_vlan entered promiscuous mode [ 33.135405][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.137095][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.139322][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.141294][ T4331] device veth1_vlan entered promiscuous mode [ 33.149569][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.163147][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.164823][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.166367][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.167817][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.178985][ T1602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.182464][ T4327] device veth0_macvtap entered promiscuous mode [ 33.187828][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.190024][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.192127][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.204745][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.207696][ T4331] device veth0_macvtap entered promiscuous mode [ 33.211841][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.213369][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.214667][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.216632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.218229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.223832][ T4327] device veth1_macvtap entered promiscuous mode [ 33.229821][ T4331] device veth1_macvtap entered promiscuous mode [ 33.244762][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.246302][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.247881][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.250461][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.264122][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.265791][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.267370][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.269537][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.271199][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.272691][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.275458][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.276760][ T4326] device veth0_vlan entered promiscuous mode [ 33.281795][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.283478][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.285097][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.286705][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.288895][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.290348][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.293210][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.294972][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.297459][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.305800][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.307269][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.309726][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.311248][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.312827][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.314576][ T4332] device veth0_vlan entered promiscuous mode [ 33.320691][ T4326] device veth1_vlan entered promiscuous mode [ 33.323086][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.324931][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.327281][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.330208][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.331784][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.333385][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.334954][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.336474][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.339151][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.340592][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.345594][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.347101][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.349090][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.350521][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.355516][ T4333] device veth0_vlan entered promiscuous mode [ 33.365540][ T4332] device veth1_vlan entered promiscuous mode [ 33.367337][ T4331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.369601][ T4331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.371050][ T4331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.372393][ T4331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.380742][ T4333] device veth1_vlan entered promiscuous mode [ 33.398358][ T4326] device veth0_macvtap entered promiscuous mode [ 33.400865][ T4326] device veth1_macvtap entered promiscuous mode [ 33.405421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.406922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.411138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.412672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.414326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.415905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.417553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.419851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.421304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.422940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.424638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.443806][ T4333] device veth0_macvtap entered promiscuous mode [ 33.452093][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.454240][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.455900][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.457517][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.461395][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.463084][ T4333] device veth1_macvtap entered promiscuous mode [ 33.464808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.466353][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.471502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.473315][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.475085][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.476635][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.494072][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.495812][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.497440][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.499609][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.501887][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.503464][ T4332] device veth0_macvtap entered promiscuous mode [ 33.506612][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.507948][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.522537][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.522952][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.523809][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.525417][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.527867][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.531023][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.532758][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.535114][ T4332] device veth1_macvtap entered promiscuous mode [ 33.547267][ T4326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.550009][ T4326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.551418][ T4326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.552887][ T4326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.556361][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.557675][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.563316][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.564817][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.566701][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.572046][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.573627][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.575332][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.576888][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.579327][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.581595][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.582890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.584512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.587421][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.590563][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.592188][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.593755][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.595645][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.597372][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.599947][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.601501][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.604133][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.606252][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.607937][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.610258][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.611803][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.613318][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.615051][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.617321][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.631047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.632867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.634572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.636195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.642473][ T4332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.644123][ T4332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.645488][ T4332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.646838][ T4332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.667098][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.672572][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.674185][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.675959][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.677529][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.681855][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.683907][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.685613][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.687916][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.691129][ T4333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.692555][ T4333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.694135][ T4333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.695609][ T4333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.699908][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.700423][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.701690][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.702573][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.710307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.764136][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.765658][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.766916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.793130][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.794447][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.795708][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.843648][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.844943][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.846224][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.884599][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.885961][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.887701][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.894913][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.896268][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.897644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.785678][ T4339] Bluetooth: hci4: command 0x041b tx timeout [ 34.786782][ T4339] Bluetooth: hci3: command 0x041b tx timeout [ 34.787741][ T4339] Bluetooth: hci2: command 0x041b tx timeout [ 34.801656][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 34.802764][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 34.804209][ T1602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.805437][ T1602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.818317][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.030438][ T4434] tipc: Started in network mode [ 35.031414][ T4434] tipc: Node identity 4, cluster identity 4711 [ 35.032457][ T4434] tipc: Node number set to 4 [ 36.805955][ T4339] Bluetooth: hci2: command 0x040f tx timeout [ 36.807503][ T4330] Bluetooth: hci3: command 0x040f tx timeout [ 36.808662][ T4330] Bluetooth: hci4: command 0x040f tx timeout [ 36.878526][ T4335] Bluetooth: hci1: command 0x040f tx timeout [ 36.880210][ T4335] Bluetooth: hci0: command 0x040f tx timeout [ 36.985071][ T4447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 37.868432][ T4464] binder: 4463:4464 tried to acquire reference to desc 0, got 1 instead [ 37.946428][ T4474] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 37.950569][ T4474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.952239][ T4474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.955102][ T4473] binder: 4463:4473 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 37.957294][ T4473] binder: 4473 RLIMIT_NICE not set [ 37.975375][ T4473] binder: 4473 RLIMIT_NICE not set [ 37.976751][ T4471] loop1: detected capacity change from 0 to 2048 [ 38.297018][ T4477] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 38.853466][ T1516] binder: release 4463:4473 transaction 12 out, still active [ 38.854901][ T1516] binder: release 4463:4473 transaction 5 in, still active [ 38.856127][ T1516] binder: undelivered TRANSACTION_COMPLETE [ 38.863097][ T1516] binder: release 4463:4464 transaction 5 out, still active [ 38.875657][ T4487] device syzkaller0 entered promiscuous mode [ 38.879246][ T4339] Bluetooth: hci4: command 0x0419 tx timeout [ 38.879270][ T4335] Bluetooth: hci2: command 0x0419 tx timeout [ 38.880309][ T4339] Bluetooth: hci3: command 0x0419 tx timeout [ 38.898169][ T1516] binder: undelivered TRANSACTION_COMPLETE [ 38.899226][ T1516] binder: send failed reply for transaction 12, target dead [ 38.900421][ T1516] binder: send failed reply for transaction 5, target dead [ 38.966536][ T4330] Bluetooth: hci0: command 0x0419 tx timeout [ 38.966770][ T4335] Bluetooth: hci1: command 0x0419 tx timeout [ 38.973156][ T4491] Bluetooth: MGMT ver 1.22 [ 39.845774][ T4509] loop4: detected capacity change from 0 to 4096 [ 39.872166][ T4509] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 39.931522][ T4515] loop1: detected capacity change from 0 to 256 [ 39.933159][ T4515] ======================================================= [ 39.933159][ T4515] WARNING: The mand mount option has been deprecated and [ 39.933159][ T4515] and is ignored by this kernel. Remove the mand [ 39.933159][ T4515] option from the mount to silence this warning. [ 39.933159][ T4515] ======================================================= [ 39.952596][ T4515] FAT-fs (loop1): Directory bread(block 64) failed [ 39.954004][ T4515] FAT-fs (loop1): Directory bread(block 65) failed [ 39.960648][ T4515] FAT-fs (loop1): Directory bread(block 66) failed [ 39.963828][ T4515] FAT-fs (loop1): Directory bread(block 67) failed [ 39.966274][ T4515] FAT-fs (loop1): Directory bread(block 68) failed [ 39.971248][ T4515] FAT-fs (loop1): Directory bread(block 69) failed [ 40.298244][ T4515] FAT-fs (loop1): Directory bread(block 70) failed [ 40.300414][ T4515] FAT-fs (loop1): Directory bread(block 71) failed [ 40.301512][ T4515] FAT-fs (loop1): Directory bread(block 72) failed [ 40.302571][ T4515] FAT-fs (loop1): Directory bread(block 73) failed [ 40.379335][ T4519] device syzkaller0 entered promiscuous mode [ 40.385379][ T4519] Zero length message leads to an empty skb [ 40.771409][ T4333] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 40.860146][ T4333] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 40.861327][ T4333] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 44.086131][ T4567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.46'. [ 44.488686][ T4574] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 44.553864][ T4580] device syzkaller0 entered promiscuous mode [ 44.999822][ T4586] binder: 4585:4586 tried to acquire reference to desc 0, got 1 instead [ 45.003972][ T4586] binder: 4585:4586 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 45.006208][ T4586] binder: 4586 RLIMIT_NICE not set [ 45.007038][ T4586] binder: 4586 RLIMIT_NICE not set [ 45.011017][ T4586] binder: 4586 RLIMIT_NICE not set [ 45.012200][ T4586] binder: 4585:4586 got transaction with unaligned buffers size, 252 [ 45.013870][ T4586] binder: 4585:4586 transaction reply to 4585:4586 failed 18/29201/-22, size 0-0 line 3286 [ 45.015604][ T4586] binder: send failed reply for transaction 17 to 4585:4586 [ 45.040370][ T4588] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 45.084341][ T4588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.53'. [ 45.086052][ T4588] device veth1_to_bond entered promiscuous mode [ 45.157071][ T4586] syz.1.52 (4586): drop_caches: 2 [ 45.157752][ T4590] overlayfs: './file0' not a directory [ 45.198569][ T4334] binder: undelivered TRANSACTION_COMPLETE [ 45.199566][ T4334] binder: undelivered TRANSACTION_ERROR: 29201 [ 45.200607][ T4334] binder: undelivered TRANSACTION_ERROR: 29190 [ 45.218372][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.407450][ T4598] loop1: detected capacity change from 0 to 256 [ 45.414715][ T4598] exfat: Unknown parameter 'zero_size_dir' [ 45.721974][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 45.726248][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.727903][ T24] usb 1-1: config 0 has no interfaces? [ 45.729183][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 45.730592][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.736536][ T24] usb 1-1: config 0 descriptor?? [ 45.763305][ T4318] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 46.425325][ T4610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.59'. [ 46.444910][ T27] audit: type=1326 audit(46.430:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4583 comm="syz.0.51" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f377aa8 code=0x0 [ 46.544548][ T14] usb 1-1: USB disconnect, device number 2 [ 47.707989][ C1] sched: RT throttling activated [ 49.366061][ T4639] loop1: detected capacity change from 0 to 1024 [ 49.412891][ T4641] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 49.490503][ T4641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.68'. [ 49.492066][ T4641] device veth0_to_batadv entered promiscuous mode [ 49.933074][ T4655] loop3: detected capacity change from 0 to 32768 [ 50.276887][ T4666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.73'. [ 50.284744][ T4655] XFS (loop3): Mounting V5 Filesystem [ 50.384155][ T4655] XFS (loop3): Ending clean mount [ 50.387320][ T4655] XFS (loop3): Quotacheck needed: Please wait. [ 51.347358][ T4655] XFS (loop3): Quotacheck: Done. [ 51.460332][ T4683] loop4: detected capacity change from 0 to 512 [ 51.770446][ T4683] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.775379][ T4682] device syzkaller0 entered promiscuous mode [ 51.784781][ T4683] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.787058][ T4683] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.852671][ T4683] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.77: Invalid block bitmap block 0 in block_group 0 [ 51.872662][ T4683] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 51.878370][ T4683] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.77: attempt to clear invalid blocks 983261 len 1 [ 51.881735][ T4683] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.77: Invalid inode table block 0 in block_group 0 [ 51.904308][ T4327] XFS (loop3): Unmounting Filesystem [ 51.915874][ T4683] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 52.127216][ T4683] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 52.129237][ T4683] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.77: Invalid inode table block 0 in block_group 0 [ 52.132345][ T4683] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 52.134173][ T4683] EXT4-fs error (device loop4): ext4_truncate:4325: inode #11: comm syz.4.77: mark_inode_dirty error [ 52.145696][ T4683] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 52.157551][ T4683] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.77: Invalid inode table block 0 in block_group 0 [ 52.169056][ T4683] EXT4-fs (loop4): 1 truncate cleaned up [ 52.174581][ T4683] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.991559][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 53.059221][ T4702] loop0: detected capacity change from 0 to 1024 [ 53.230136][ T4705] loop4: detected capacity change from 0 to 512 [ 53.375570][ T4705] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.82: inode has both inline data and extents flags [ 53.382288][ T4705] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.82: couldn't read orphan inode 15 (err -117) [ 53.385594][ T4705] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 53.670244][ T4704] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 53.671570][ T4704] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.673669][ T4704] vhci_hcd vhci_hcd.0: Device attached [ 53.976084][ T4706] vhci_hcd: connection closed [ 53.979629][ T11] vhci_hcd: stop threads [ 53.981604][ T11] vhci_hcd: release socket [ 53.983137][ T11] vhci_hcd: disconnect device [ 54.048127][ T24] usb 10-1: new low-speed USB device number 2 using vhci_hcd [ 54.049989][ T24] usb 10-1: enqueue for inactive port 0 [ 54.130777][ T24] vhci_hcd: vhci_device speed not set [ 54.754456][ T4333] EXT4-fs (loop4): unmounting filesystem. [ 56.320556][ T4735] loop2: detected capacity change from 0 to 1024 [ 56.373827][ T4735] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 56.375855][ T4735] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 56.458335][ T4735] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.89: Failed to acquire dquot type 0 [ 56.465964][ T4745] binder: 4739:4745 tried to acquire reference to desc 0, got 1 instead [ 56.474887][ T4735] EXT4-fs (loop2): 1 truncate cleaned up [ 56.475970][ T4735] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 56.481931][ T4745] binder: 4739:4745 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 56.483954][ T4745] binder: 4745 RLIMIT_NICE not set [ 56.484794][ T4745] binder: 4745 RLIMIT_NICE not set [ 56.728881][ T4745] binder: 4745 RLIMIT_NICE not set [ 56.741297][ T14] binder: undelivered TRANSACTION_COMPLETE [ 56.742528][ T14] binder: undelivered transaction 24, process died. [ 56.743894][ T14] binder: undelivered TRANSACTION_COMPLETE [ 57.599680][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 57.642808][ T4765] loop2: detected capacity change from 0 to 1024 [ 58.337376][ T4775] loop0: detected capacity change from 0 to 512 [ 58.339318][ T4775] EXT4-fs: Ignoring removed bh option [ 58.346431][ T4775] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.100: corrupted in-inode xattr [ 58.348620][ T4761] loop1: detected capacity change from 0 to 512 [ 58.360822][ T4775] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.100: couldn't read orphan inode 15 (err -117) [ 58.375379][ T4761] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 58.379645][ T4775] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 58.474938][ T4761] process 'syz.1.96' launched './file2' with NULL argv: empty string added [ 58.485889][ T4761] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/ci2-linux-6-1-kasan-arm64/syz-executor /root/ci2-linux-6-1-kasan-arm64/syz-executor /newroot/syzcgroup/unified/syz1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 59.433162][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 59.877762][ T4807] tipc: Started in network mode [ 59.878886][ T4807] tipc: Node identity 6a1be876698d, cluster identity 4711 [ 59.880117][ T4807] tipc: Enabled bearer , priority 0 [ 59.885477][ T4807] device syzkaller0 entered promiscuous mode [ 59.965511][ T4807] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 64.981967][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.983287][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.989272][ T4811] tipc: Resetting bearer [ 64.991230][ T4819] tipc: Node number set to 60221558 [ 65.038865][ T4806] tipc: Resetting bearer [ 65.065522][ T4860] loop2: detected capacity change from 0 to 512 [ 65.068729][ T4860] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.070839][ T4860] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.076116][ T4860] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.119: Invalid block bitmap block 0 in block_group 0 [ 65.081657][ T4860] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 65.086171][ T4860] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.119: attempt to clear invalid blocks 983261 len 1 [ 65.092545][ T4860] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.119: Invalid inode table block 0 in block_group 0 [ 65.095108][ T4860] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 65.096970][ T4860] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 65.102534][ T4860] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.119: Invalid inode table block 0 in block_group 0 [ 65.108240][ T4860] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 65.114328][ T4860] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.119: mark_inode_dirty error [ 65.116211][ T4860] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 65.124484][ T4860] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.119: Invalid inode table block 0 in block_group 0 [ 65.126718][ T4860] EXT4-fs (loop2): 1 truncate cleaned up [ 65.127697][ T4860] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 65.178628][ T4806] tipc: Disabling bearer [ 65.182736][ T4846] device syzkaller0 entered promiscuous mode [ 66.179176][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 67.776760][ T4909] loop2: detected capacity change from 0 to 512 [ 69.583077][ T4909] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 69.603697][ T7] cfg80211: failed to load regulatory.db [ 69.612505][ T4909] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c800e018, mo2=0002] [ 69.614197][ T4909] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.616039][ T4909] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.129: bg 0: block 361: padding at end of block bitmap is not set [ 69.619218][ T4909] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 69.620752][ T4909] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.129: attempt to clear invalid blocks 33619980 len 1 [ 69.623171][ T4909] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.129: invalid indirect mapped block 1811939328 (level 0) [ 69.625371][ T4909] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.129: invalid indirect mapped block 2185560079 (level 1) [ 69.628461][ T4909] EXT4-fs (loop2): 1 truncate cleaned up [ 69.629499][ T4909] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 70.268921][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 71.195835][ T4950] loop3: detected capacity change from 0 to 8 [ 74.220282][ T4996] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 74.279445][ T4995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.151'. [ 74.307834][ T4998] bridge1: port 1(veth3) entered blocking state [ 74.313619][ T4998] bridge1: port 1(veth3) entered disabled state [ 74.321089][ T4998] device veth3 entered promiscuous mode [ 74.386799][ T4995] bridge1: port 2(veth0_to_bond) entered blocking state [ 74.388217][ T4995] bridge1: port 2(veth0_to_bond) entered disabled state [ 74.390022][ T4995] device veth0_to_bond entered promiscuous mode [ 74.409882][ T4995] bridge1: port 3(veth5) entered blocking state [ 74.411361][ T4995] bridge1: port 3(veth5) entered disabled state [ 74.413026][ T4995] device veth5 entered promiscuous mode [ 76.974939][ T5042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.978795][ T5042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.255290][ T5038] loop2: detected capacity change from 0 to 32768 [ 77.262046][ T5038] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.172 (5038) [ 77.278107][ T5038] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 77.281246][ T5038] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 77.282846][ T5038] BTRFS info (device loop2): setting nodatacow, compression disabled [ 77.284175][ T5038] BTRFS info (device loop2): force clearing of disk cache [ 77.285567][ T5038] BTRFS info (device loop2): turning on sync discard [ 77.286763][ T5038] BTRFS info (device loop2): turning off barriers [ 77.287935][ T5038] BTRFS info (device loop2): use no compression [ 77.290141][ T5038] BTRFS info (device loop2): disabling free space tree [ 77.291628][ T5038] BTRFS info (device loop2): enabling ssd optimizations [ 77.292997][ T5038] BTRFS info (device loop2): using spread ssd allocation scheme [ 77.294345][ T5038] BTRFS info (device loop2): not using ssd optimizations [ 77.295419][ T5038] BTRFS info (device loop2): not using spread ssd allocation scheme [ 77.494042][ T5038] BTRFS info (device loop2): rebuilding free space tree [ 77.595891][ T5069] PKCS7: Unknown OID: [4] 0.0 [ 77.597088][ T5069] PKCS7: Only support pkcs7_signedData type [ 78.118840][ T5038] BTRFS info (device loop2): disabling free space tree [ 78.126277][ T5038] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 78.137815][ T5038] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 79.927310][ T4331] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 80.243985][ T5100] binder: 5099:5100 tried to acquire reference to desc 0, got 1 instead [ 81.110904][ T5119] loop3: detected capacity change from 0 to 512 [ 81.533162][ T5119] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.177: inode has both inline data and extents flags [ 81.535935][ T5119] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.177: couldn't read orphan inode 15 (err -117) [ 81.539159][ T5119] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 82.044877][ T14] binder: release 5099:5100 transaction 30 out, still active [ 82.584635][ T14] binder: send failed reply for transaction 37 to 5099:5103 [ 82.586319][ T14] binder: undelivered TRANSACTION_COMPLETE [ 82.588586][ T14] binder: undelivered TRANSACTION_ERROR: 29189 [ 82.590261][ T14] binder: send failed reply for transaction 30, target dead [ 82.603056][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 83.363845][ T5142] device syzkaller0 entered promiscuous mode [ 83.719013][ T5157] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 85.429591][ T5173] device syzkaller0 entered promiscuous mode [ 88.293844][ T5205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 88.295604][ T5205] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 88.629746][ T5232] loop0: detected capacity change from 0 to 64 [ 90.235334][ T5254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.212'. [ 91.063581][ T5267] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 93.319578][ T5289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 93.344822][ T5274] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.346612][ T5274] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.018424][ T5274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.035670][ T5274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.314961][ T5274] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.316565][ T5274] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.318324][ T5274] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.320279][ T5274] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.544804][ T5301] loop3: detected capacity change from 0 to 64 [ 94.648098][ T5295] tipc: Enabling of bearer rejected, failed to enable media [ 95.039774][ T5312] netlink: 'syz.0.227': attribute type 13 has an invalid length. [ 95.059603][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.063639][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.065429][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.462140][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 95.538364][ T5325] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 95.742698][ T5334] tipc: Enabled bearer , priority 0 [ 95.744933][ T5334] device syzkaller0 entered promiscuous mode [ 95.845400][ T5334] tipc: Resetting bearer [ 95.928419][ T5333] tipc: Resetting bearer [ 96.595789][ T5333] tipc: Disabling bearer [ 97.911845][ T5361] tipc: Enabled bearer , priority 0 [ 97.947800][ T5361] device syzkaller0 entered promiscuous mode [ 97.950632][ T5361] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 98.000391][ T5367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.002522][ T5367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.015940][ T5367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.022849][ T5360] tipc: Resetting bearer [ 98.028894][ T5367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.309369][ T5360] tipc: Disabling bearer [ 100.473427][ T5397] loop0: detected capacity change from 0 to 256 [ 100.871129][ T5397] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 101.805559][ T5412] tipc: Enabling of bearer rejected, failed to enable media [ 102.123723][ T5401] loop3: detected capacity change from 0 to 32768 [ 102.165236][ T5401] XFS (loop3): Mounting V5 Filesystem [ 102.200254][ T5401] XFS (loop3): Ending clean mount [ 102.286716][ T5429] tipc: Enabling of bearer rejected, failed to enable media [ 103.160855][ T5446] loop2: detected capacity change from 0 to 24 [ 103.616632][ T4327] XFS (loop3): Unmounting Filesystem [ 108.308069][ T4457] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.437079][ T5502] loop3: detected capacity change from 0 to 8192 [ 108.441556][ T5502] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 108.443972][ T5502] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 108.445561][ T5502] REISERFS (device loop3): using ordered data mode [ 108.446576][ T5502] reiserfs: using flush barriers [ 108.448916][ T5502] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 108.452178][ T5502] REISERFS (device loop3): checking transaction log (loop3) [ 108.456605][ T5502] REISERFS (device loop3): Using r5 hash to sort names [ 108.458315][ T4457] usb 1-1: device descriptor read/64, error -71 [ 108.459324][ T5502] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 108.622186][ T4339] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 108.623942][ T4339] CPU: 0 PID: 4339 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 108.625023][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 108.626478][ T4339] Workqueue: hci2 hci_rx_work [ 108.627202][ T4339] Call trace: [ 108.627710][ T4339] dump_backtrace+0x1c0/0x1ec [ 108.628441][ T4339] show_stack+0x2c/0x3c [ 108.629142][ T4339] __dump_stack+0x30/0x40 [ 108.629891][ T4339] dump_stack_lvl+0xf4/0x15c [ 108.630641][ T4339] dump_stack+0x1c/0x5c [ 108.631338][ T4339] sysfs_create_dir_ns+0x244/0x264 [ 108.632188][ T4339] kobject_add_internal+0x598/0xb08 [ 108.633067][ T4339] kobject_add+0x140/0x20c [ 108.633798][ T4339] device_add+0x3f8/0xefc [ 108.634526][ T4339] hci_conn_add_sysfs+0xbc/0x1c8 [ 108.635342][ T4339] le_conn_complete_evt+0xcc8/0x1244 [ 108.636266][ T4339] hci_le_conn_complete_evt+0x114/0x3f4 [ 108.637314][ T4339] hci_le_meta_evt+0x2c0/0x4a0 [ 108.638163][ T4339] hci_event_packet+0x6b8/0xf18 [ 108.639010][ T4339] hci_rx_work+0x328/0xa84 [ 108.639833][ T4339] process_one_work+0x7f8/0x13a4 [ 108.640663][ T4339] worker_thread+0x8c4/0xfec [ 108.641540][ T4339] kthread+0x250/0x2d8 [ 108.642298][ T4339] ret_from_fork+0x10/0x20 [ 108.646193][ T4339] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 108.649817][ T4339] Bluetooth: hci2: failed to register connection device [ 108.908152][ T4457] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.068049][ T4457] usb 1-1: device descriptor read/64, error -71 [ 109.249737][ T5519] loop3: detected capacity change from 0 to 32768 [ 109.262000][ T4457] usb usb1-port1: attempt power cycle [ 109.275472][ T5519] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 109.277003][ T5519] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 109.299972][ T5519] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 109.718172][ T4457] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.752795][ T4457] usb 1-1: device descriptor read/8, error -71 [ 110.018195][ T4457] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.059824][ T4457] usb 1-1: device descriptor read/8, error -71 [ 110.179434][ T4457] usb usb1-port1: unable to enumerate USB device [ 110.372891][ T5519] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 110.456327][ T5521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 110.462811][ T5521] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.464487][ T5521] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.465759][ T5521] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.467110][ T5521] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.472382][ T5521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 111.229576][ T5533] loop0: detected capacity change from 0 to 64 [ 111.650783][ T5535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.652237][ T5535] IPv6: NLM_F_CREATE should be set when creating new route [ 112.189315][ T5535] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.191610][ T5535] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.624491][ T5535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.639032][ T5535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.184792][ T5535] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.186501][ T5535] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.187952][ T5535] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.189454][ T5535] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.518854][ T5567] tipc: Started in network mode [ 113.519794][ T5567] tipc: Node identity b66a2342b2c7, cluster identity 4711 [ 113.524102][ T5567] tipc: Enabled bearer , priority 0 [ 113.525689][ T5567] device syzkaller0 entered promiscuous mode [ 113.528886][ T5567] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 113.872664][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.874486][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.880341][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.883745][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.903125][ T5567] tipc: Resetting bearer [ 113.905739][ T5565] tipc: Resetting bearer [ 113.994747][ T5565] tipc: Disabling bearer [ 114.958153][ T4339] Bluetooth: hci2: command 0x0406 tx timeout [ 116.493785][ T5603] loop2: detected capacity change from 0 to 512 [ 116.503662][ T5603] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.974844][ T5603] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.306: invalid indirect mapped block 9 (level 0) [ 116.985913][ T5603] EXT4-fs (loop2): 1 truncate cleaned up [ 116.992748][ T5603] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 117.624328][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 119.124224][ T5633] loop3: detected capacity change from 0 to 32768 [ 119.172518][ T5633] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.317 (5633) [ 119.182650][ T5633] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 119.184331][ T5633] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 119.277465][ T5633] BTRFS info (device loop3): setting nodatasum [ 119.283243][ T5633] BTRFS info (device loop3): using free space tree [ 120.179761][ T5633] BTRFS info (device loop3): enabling ssd optimizations [ 121.723425][ T4327] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 122.340678][ T5695] loop2: detected capacity change from 0 to 128 [ 122.344660][ T5695] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 123.476218][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 123.549423][ T5709] loop0: detected capacity change from 0 to 8192 [ 123.877475][ T5709] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 123.880149][ T5709] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 123.882715][ T5709] REISERFS (device loop0): using ordered data mode [ 123.884941][ T5709] reiserfs: using flush barriers [ 123.888415][ T5709] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.891482][ T5709] REISERFS (device loop0): checking transaction log (loop0) [ 123.895602][ T5709] REISERFS (device loop0): Using r5 hash to sort names [ 123.901588][ T5709] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 124.055965][ T4339] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 124.057655][ T4339] CPU: 1 PID: 4339 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 124.058947][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 124.060710][ T4339] Workqueue: hci3 hci_rx_work [ 124.061473][ T4339] Call trace: [ 124.062037][ T4339] dump_backtrace+0x1c0/0x1ec [ 124.062825][ T4339] show_stack+0x2c/0x3c [ 124.063502][ T4339] __dump_stack+0x30/0x40 [ 124.064235][ T4339] dump_stack_lvl+0xf4/0x15c [ 124.065067][ T4339] dump_stack+0x1c/0x5c [ 124.065743][ T4339] sysfs_create_dir_ns+0x244/0x264 [ 124.066646][ T4339] kobject_add_internal+0x598/0xb08 [ 124.067505][ T4339] kobject_add+0x140/0x20c [ 124.068255][ T4339] device_add+0x3f8/0xefc [ 124.069101][ T4339] hci_conn_add_sysfs+0xbc/0x1c8 [ 124.070006][ T4339] le_conn_complete_evt+0xcc8/0x1244 [ 124.070923][ T4339] hci_le_conn_complete_evt+0x114/0x3f4 [ 124.071836][ T4339] hci_le_meta_evt+0x2c0/0x4a0 [ 124.072645][ T4339] hci_event_packet+0x6b8/0xf18 [ 124.073475][ T4339] hci_rx_work+0x328/0xa84 [ 124.074227][ T4339] process_one_work+0x7f8/0x13a4 [ 124.075053][ T4339] worker_thread+0x8c4/0xfec [ 124.075789][ T4339] kthread+0x250/0x2d8 [ 124.076459][ T4339] ret_from_fork+0x10/0x20 [ 124.077911][ T4339] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 124.080264][ T4339] Bluetooth: hci3: failed to register connection device [ 124.550742][ T5733] binder: 5732:5733 ioctl c0306201 20000080 returned -14 [ 124.553695][ T5733] binder: 5732:5733 tried to acquire reference to desc 0, got 1 instead [ 124.558687][ T5733] binder: 5732:5733 got transaction with invalid parent offset or type [ 124.560092][ T5733] binder: 5733:5732 failed to fixup parent [ 124.561095][ T5733] binder: 5732:5733 transaction call to 5732:0 failed 42/29201/-22, size 104-24 line 3540 [ 124.570584][ T4819] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.877156][ T5745] virt_wifi0 speed is unknown, defaulting to 1000 [ 124.878852][ T5745] virt_wifi0 speed is unknown, defaulting to 1000 [ 124.886649][ T5745] virt_wifi0 speed is unknown, defaulting to 1000 [ 124.899357][ T5745] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 124.919190][ T5745] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 125.189022][ T5745] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.193136][ T5745] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.198408][ T5745] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.202067][ T5745] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.205395][ T5745] virt_wifi0 speed is unknown, defaulting to 1000 [ 126.758557][ T5749] Injecting memory failure for pfn 0x21102a at process virtual address 0x20ffe000 [ 126.855387][ T5750] loop3: detected capacity change from 0 to 512 [ 127.042275][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.042908][ T5749] Memory failure: 0x21102a: recovery action for reserved kernel page: Ignored [ 127.043402][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.178624][ T5750] EXT4-fs (loop3): Test dummy encryption mode enabled [ 127.179703][ T5750] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.184162][ T5750] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.340: bad orphan inode 131083 [ 127.928011][ T5750] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 128.117120][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 128.868275][ T5778] overlayfs: failed to clone upperpath [ 129.670622][ T5794] Cannot find add_set index 0 as target [ 129.849688][ T4335] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 129.852829][ T4335] CPU: 1 PID: 4335 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 129.854104][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 129.855751][ T4335] Workqueue: hci4 hci_rx_work [ 129.856560][ T4335] Call trace: [ 129.857086][ T4335] dump_backtrace+0x1c0/0x1ec [ 129.857881][ T4335] show_stack+0x2c/0x3c [ 129.858537][ T4335] __dump_stack+0x30/0x40 [ 129.859258][ T4335] dump_stack_lvl+0xf4/0x15c [ 129.860056][ T4335] dump_stack+0x1c/0x5c [ 129.860791][ T4335] sysfs_create_dir_ns+0x244/0x264 [ 129.861649][ T4335] kobject_add_internal+0x598/0xb08 [ 129.862513][ T4335] kobject_add+0x140/0x20c [ 129.863263][ T4335] device_add+0x3f8/0xefc [ 129.864023][ T4335] hci_conn_add_sysfs+0xbc/0x1c8 [ 129.864822][ T4335] le_conn_complete_evt+0xcc8/0x1244 [ 129.865721][ T4335] hci_le_conn_complete_evt+0x114/0x3f4 [ 129.866674][ T4335] hci_le_meta_evt+0x2c0/0x4a0 [ 129.867458][ T4335] hci_event_packet+0x6b8/0xf18 [ 129.868186][ T4335] hci_rx_work+0x328/0xa84 [ 129.868916][ T4335] process_one_work+0x7f8/0x13a4 [ 129.869731][ T4335] worker_thread+0x8c4/0xfec [ 129.870512][ T4335] kthread+0x250/0x2d8 [ 129.871173][ T4335] ret_from_fork+0x10/0x20 [ 129.874544][ T4335] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 129.874584][ T4335] Bluetooth: hci4: failed to register connection device [ 130.157085][ T5799] loop3: detected capacity change from 0 to 131072 [ 130.166163][ T5799] F2FS-fs (loop3): Test dummy encryption mode enabled [ 130.171616][ T5799] F2FS-fs (loop3): invalid crc value [ 130.192846][ T5799] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.225340][ T5799] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 130.657063][ T5818] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 131.404668][ T4339] Bluetooth: hci3: command 0x0406 tx timeout [ 131.610523][ T5833] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 132.424312][ T5839] loop0: detected capacity change from 0 to 512 [ 132.438109][ T5839] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.766289][ T5839] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.362: invalid indirect mapped block 9 (level 0) [ 132.788680][ T5839] EXT4-fs (loop0): 1 truncate cleaned up [ 132.797283][ T5839] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 132.875993][ T5854] Soft offlining pfn 0x13ac70 at process virtual address 0x20000000 [ 132.881961][ T5854] Soft offlining pfn 0x13fd1d at process virtual address 0x20001000 [ 132.883906][ T5854] Soft offlining pfn 0x13e8d1 at process virtual address 0x20002000 [ 132.885433][ T5854] Soft offlining pfn 0x13b854 at process virtual address 0x20003000 [ 132.900417][ T5854] Injecting memory failure for pfn 0x13f702 at process virtual address 0x20000000 [ 132.904296][ T5854] Memory failure: 0x13f702: keeping poisoned page in swap cache [ 132.906295][ T5854] Memory failure: 0x13f702: recovery action for clean swapcache page: Recovered [ 132.907842][ T5854] Injecting memory failure for pfn 0x13fc03 at process virtual address 0x20001000 [ 132.911778][ T5854] Memory failure: 0x13fc03: recovery action for dirty LRU page: Recovered [ 132.913202][ T5854] Injecting memory failure for pfn 0x139a91 at process virtual address 0x20002000 [ 132.916931][ T5854] Memory failure: 0x139a91: recovery action for dirty LRU page: Recovered [ 133.663932][ T4335] Bluetooth: hci2: command 0x0406 tx timeout [ 134.279817][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 134.282012][ T5863] netlink: 'syz.3.367': attribute type 1 has an invalid length. [ 134.320413][ T5863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.385856][ T5863] device macvlan2 entered promiscuous mode [ 134.388781][ T5863] device bond1 entered promiscuous mode [ 134.390469][ T5863] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.624540][ T5863] device bond1 left promiscuous mode [ 136.876687][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 136.883228][ T5882] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 136.886822][ T5892] device macvlan2 entered promiscuous mode [ 136.889581][ T5892] device bond1 entered promiscuous mode [ 136.890747][ T5892] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.929216][ T5892] device bond1 left promiscuous mode [ 137.858445][ T5914] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.860069][ T5914] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.861488][ T5914] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.862929][ T5914] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.902872][ T5914] team0: Port device vxlan0 added [ 138.000050][ T5926] loop3: detected capacity change from 0 to 512 [ 138.013419][ T5926] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.425526][ T5926] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.381: invalid indirect mapped block 9 (level 0) [ 138.432227][ T5926] EXT4-fs (loop3): 1 truncate cleaned up [ 138.433243][ T5926] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.198231][ T5948] loop0: detected capacity change from 0 to 131072 [ 139.203899][ T5948] F2FS-fs (loop0): Test dummy encryption mode enabled [ 139.205700][ T5948] F2FS-fs (loop0): invalid crc value [ 139.212296][ T5948] F2FS-fs (loop0): Found nat_bits in checkpoint [ 139.248111][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 139.304367][ T5948] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 140.038779][ T5961] loop3: detected capacity change from 0 to 128 [ 140.329385][ T5961] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 141.047755][ T5958] virt_wifi0 speed is unknown, defaulting to 1000 [ 141.148990][ T5968] loop2: detected capacity change from 0 to 64 [ 142.463372][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 146.128820][ T6005] lo: Caught tx_queue_len zero misconfig [ 146.361945][ T6021] loop3: detected capacity change from 0 to 2048 [ 146.387258][ T6021] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.290739][ T6038] Soft offlining pfn 0x13d677 at process virtual address 0x20000000 [ 148.293827][ T6038] Soft offlining pfn 0x1427c0 at process virtual address 0x20001000 [ 148.295741][ T6038] Soft offlining pfn 0x1387a5 at process virtual address 0x20002000 [ 148.297228][ T6038] Soft offlining pfn 0x13f7e3 at process virtual address 0x20003000 [ 148.300227][ T6038] Injecting memory failure for pfn 0x14281c at process virtual address 0x20000000 [ 148.345666][ T6038] Memory failure: 0x14281c: keeping poisoned page in swap cache [ 148.347271][ T6038] Memory failure: 0x14281c: recovery action for clean swapcache page: Recovered [ 148.348958][ T6038] Injecting memory failure for pfn 0x13cd13 at process virtual address 0x20001000 [ 148.360502][ T6038] Memory failure: 0x13cd13: recovery action for dirty LRU page: Recovered [ 148.361993][ T6038] Injecting memory failure for pfn 0x13b846 at process virtual address 0x20002000 [ 148.366970][ T6038] Memory failure: 0x13b846: recovery action for dirty LRU page: Recovered [ 148.678056][ T3992] device veth1_vlan left promiscuous mode [ 148.683125][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.769660][ T6086] loop2: detected capacity change from 0 to 32768 [ 151.243940][ T6086] XFS (loop2): Mounting V5 Filesystem [ 151.304076][ T6086] XFS (loop2): Ending clean mount [ 151.306872][ T6086] XFS (loop2): Quotacheck needed: Please wait. [ 151.353733][ T6086] XFS (loop2): Quotacheck: Done. [ 151.867660][ T6121] capability: warning: `syz.3.421' uses deprecated v2 capabilities in a way that may be insecure [ 151.897915][ T4331] XFS (loop2): Unmounting Filesystem [ 152.229276][ T6125] virt_wifi0 speed is unknown, defaulting to 1000 [ 152.253986][ T6125] loop0: detected capacity change from 0 to 8 [ 152.315704][ T6125] SQUASHFS error: zlib decompression failed, data probably corrupt [ 152.315803][ T6125] SQUASHFS error: Failed to read block 0x9b: -5 [ 152.315830][ T6125] SQUASHFS error: Unable to read metadata cache entry [99] [ 152.315839][ T6125] SQUASHFS error: Unable to read inode 0x127 [ 153.878868][ T4330] Bluetooth: hci3: command 0x0406 tx timeout [ 153.879960][ T4339] Bluetooth: hci0: command 0x0406 tx timeout [ 154.162524][ T4335] Bluetooth: hci4: command 0x0406 tx timeout [ 154.163657][ T4335] Bluetooth: hci1: command 0x0406 tx timeout [ 155.968575][ T6177] loop2: detected capacity change from 0 to 2048 [ 156.843103][ T6177] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 157.688066][ T6206] virt_wifi0 speed is unknown, defaulting to 1000 [ 157.909407][ T4331] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 158.085171][ T6215] PKCS7: Unknown OID: [4] 0.0 [ 158.086085][ T6215] PKCS7: Only support pkcs7_signedData type [ 158.342541][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 161.306967][ T6237] loop2: detected capacity change from 0 to 8 [ 162.792994][ T6265] loop0: detected capacity change from 0 to 2048 [ 162.799396][ T6265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.952043][ T6291] bridge_slave_0: mtu greater than device maximum [ 166.493284][ T6291] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.495708][ T6291] isofs_fill_super: bread failed, dev=loop7, iso_blknum=16, block=32 [ 167.891597][ T6313] loop3: detected capacity change from 0 to 8 [ 169.697846][ T6343] tipc: Enabled bearer , priority 0 [ 169.701127][ T6343] device syzkaller0 entered promiscuous mode [ 170.002822][ T6349] atomic_op 00000000f5986be2 conn xmit_atomic 0000000000000000 [ 170.118842][ T6343] tipc: Resetting bearer [ 170.136183][ T6342] tipc: Resetting bearer [ 170.838860][ T6342] tipc: Disabling bearer [ 170.847762][ T6365] bridge_slave_0: mtu greater than device maximum [ 170.867066][ T6365] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.871764][ T6365] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 170.899607][ T6370] netlink: 'syz.2.476': attribute type 10 has an invalid length. [ 170.901227][ T6370] device syz_tun entered promiscuous mode [ 170.903681][ T6370] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 175.164173][ T6405] PKCS7: Unknown OID: [4] 0.0 [ 175.165094][ T6405] PKCS7: Only support pkcs7_signedData type [ 180.328413][ T6470] PKCS7: Unknown OID: [4] 0.0 [ 180.329375][ T6470] PKCS7: Only support pkcs7_signedData type [ 181.198882][ T6473] loop0: detected capacity change from 0 to 8 [ 182.910415][ T6497] netlink: 'syz.3.505': attribute type 4 has an invalid length. [ 184.534001][ T6513] tipc: Started in network mode [ 184.534878][ T6513] tipc: Node identity c27926b2dbff, cluster identity 4711 [ 184.535998][ T6513] tipc: Enabled bearer , priority 0 [ 184.537908][ T6513] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 185.117177][ T6518] tipc: Enabling of bearer rejected, failed to enable media [ 185.257172][ T6522] tipc: Resetting bearer [ 185.298372][ T6526] loop0: detected capacity change from 0 to 136 [ 185.383720][ T4318] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 185.390494][ T6526] loop0: detected capacity change from 0 to 128 [ 185.393272][ T6526] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿ" or missing value [ 185.778039][ T4339] Bluetooth: unknown link type 41 [ 185.818578][ T6511] tipc: Disabling bearer [ 185.822669][ T4380] tipc: Node number set to 428222130 [ 186.360387][ T6550] netlink: 'syz.0.523': attribute type 10 has an invalid length. [ 186.362017][ T6550] device syz_tun entered promiscuous mode [ 186.371082][ T6550] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 187.362896][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.363990][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.300000][ T4339] Bluetooth: hci3: command 0x0409 tx timeout [ 190.518541][ T6604] device bond0 entered promiscuous mode [ 190.519597][ T6604] device bond_slave_0 entered promiscuous mode [ 190.520641][ T6604] device bond_slave_1 entered promiscuous mode [ 191.632743][ T6619] Soft offlining pfn 0x14529d at process virtual address 0x2009d000 [ 192.951460][ T6635] netlink: 'syz.4.544': attribute type 1 has an invalid length. [ 192.984808][ T6635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.000250][ T6611] Set syz1 is full, maxelem 65536 reached [ 193.084596][ T6635] bond1: (slave gretap1): making interface the new active one [ 193.089100][ T6635] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 193.090583][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 193.874908][ T6640] tipc: Enabled bearer , priority 0 [ 193.881145][ T6640] device syzkaller0 entered promiscuous mode [ 193.935020][ T6640] tipc: Resetting bearer [ 194.005070][ T6639] tipc: Resetting bearer [ 194.388897][ T6639] tipc: Disabling bearer [ 196.687631][ T6676] device bond0 entered promiscuous mode [ 196.688876][ T6676] device bond_slave_0 entered promiscuous mode [ 196.703860][ T6676] device bond_slave_1 entered promiscuous mode [ 196.891496][ T6685] device syzkaller0 entered promiscuous mode [ 196.988966][ T6685] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 197.443352][ T6699] loop3: detected capacity change from 0 to 1024 [ 197.458523][ T6699] hfsplus: failed to load root directory [ 198.877893][ T6723] loop2: detected capacity change from 0 to 1024 [ 198.889942][ T6723] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.952766][ T6723] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 199.099241][ T6727] loop3: detected capacity change from 0 to 8192 [ 199.117080][ T6727] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.777330][ T4335] Bluetooth: hci1: command 0x0405 tx timeout [ 200.252771][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'. [ 200.694790][ T6746] tipc: Enabled bearer , priority 0 [ 200.702808][ T6746] device syzkaller0 entered promiscuous mode [ 200.714645][ T6746] tipc: Resetting bearer [ 200.730036][ T6745] tipc: Resetting bearer [ 201.208147][ T6745] tipc: Disabling bearer [ 202.699949][ T6780] loop3: detected capacity change from 0 to 128 [ 202.712588][ T6780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 203.064559][ T6794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.587'. [ 203.069493][ T6797] 9pnet_fd: Insufficient options for proto=fd [ 203.828247][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 204.579936][ T4339] Bluetooth: hci0: ACL packet for unknown connection handle 1211 [ 206.585601][ T6845] siw: device registration error -23 [ 207.150306][ T6856] loop3: detected capacity change from 0 to 2048 [ 207.194540][ T6856] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 207.673540][ T6870] loop0: detected capacity change from 0 to 8192 [ 209.187164][ T6870] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.718590][ T4339] Bluetooth: hci2: ACL packet for unknown connection handle 1211 [ 211.069287][ T6892] loop2: detected capacity change from 0 to 256 [ 211.097236][ T6892] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 211.628697][ T4327] EXT4-fs (loop3): unmounting filesystem. [ 214.945196][ T6940] loop0: detected capacity change from 0 to 128 [ 215.326994][ T4721] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.733360][ T6951] loop2: detected capacity change from 0 to 512 [ 215.737263][ T6951] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.742079][ T6951] EXT4-fs (loop2): Test dummy encryption mode enabled [ 215.743377][ T6951] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 215.744984][ T6951] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 215.816981][ T4339] Bluetooth: hci4: ACL packet for unknown connection handle 1211 [ 216.174132][ T6958] loop0: detected capacity change from 0 to 256 [ 216.207864][ T6958] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.247006][ T6958] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264) [ 216.248573][ T6958] FAT-fs (loop0): Filesystem has been set read-only [ 217.520303][ T6956] Set syz1 is full, maxelem 65536 reached [ 217.716598][ T6988] loop0: detected capacity change from 0 to 256 [ 217.719953][ T6988] exfat: Deprecated parameter 'namecase' [ 217.720971][ T6988] exfat: Deprecated parameter 'namecase' [ 217.841200][ T6989] siw: device registration error -23 [ 218.230060][ T6988] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 218.249355][ T6988] syz.0.638: attempt to access beyond end of device [ 218.249355][ T6988] loop0: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 218.252792][ T6988] syz.0.638: attempt to access beyond end of device [ 218.252792][ T6988] loop0: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 222.518309][ T7043] loop0: detected capacity change from 0 to 256 [ 222.908305][ T7030] Set syz1 is full, maxelem 65536 reached [ 223.379415][ T7057] loop0: detected capacity change from 0 to 4096 [ 223.400620][ T7057] EXT4-fs (loop0): Test dummy encryption mode enabled [ 223.417949][ T7057] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 223.905263][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 224.730873][ T7091] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.732570][ T7091] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.734025][ T7091] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.735490][ T7091] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.739892][ T7112] loop0: detected capacity change from 0 to 1024 [ 226.741605][ T7112] EXT4-fs: Ignoring removed nobh option [ 226.742618][ T7112] EXT4-fs: Ignoring removed orlov option [ 227.992049][ T7117] loop3: detected capacity change from 0 to 16 [ 228.005337][ T7117] erofs: (device loop3): mounted with root inode @ nid 36. [ 228.010116][ T7116] Injecting memory failure for pfn 0x1479fe at process virtual address 0x20ffe000 [ 228.047768][ T7115] device syzkaller0 entered promiscuous mode [ 228.053452][ T7112] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 228.237023][ T7122] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4332] was attempted by ""[7122] [ 228.328327][ T7116] Memory failure: 0x1479fe: recovery action for dirty LRU page: Recovered [ 228.537449][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 228.634884][ T7115] tipc: Enabled bearer , priority 0 [ 228.640631][ T7113] tipc: Resetting bearer [ 229.729157][ T7113] tipc: Disabling bearer [ 233.100060][ T7207] netlink: 'syz.1.696': attribute type 4 has an invalid length. [ 235.292303][ T7246] netlink: 'syz.2.706': attribute type 27 has an invalid length. [ 235.293667][ T7246] netlink: 'syz.2.706': attribute type 3 has an invalid length. [ 235.294832][ T7246] netlink: 132 bytes leftover after parsing attributes in process `syz.2.706'. [ 238.770760][ T7295] netlink: 'syz.4.721': attribute type 1 has an invalid length. [ 238.782388][ T7295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.788067][ T7298] device macvlan2 entered promiscuous mode [ 238.794700][ T7298] device bond2 entered promiscuous mode [ 238.797046][ T7298] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 238.801869][ T7298] team0: Port device macvlan2 added [ 238.818046][ T7300] bond2: (slave ip6gretap1): making interface the new active one [ 238.820054][ T7300] device ip6gretap1 entered promiscuous mode [ 238.822825][ T7300] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 238.838299][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 238.842431][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 239.737015][ T7332] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 240.576974][ T7329] loop0: detected capacity change from 0 to 32768 [ 240.579055][ T7329] gfs2: Bad value for 'quota' [ 240.691366][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.751950][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.774902][ T7351] device bridge_slave_1 left promiscuous mode [ 240.783778][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.839820][ T7351] device bridge_slave_0 left promiscuous mode [ 240.841144][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.258490][ T4339] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 246.020306][ T7410] loop3: detected capacity change from 0 to 512 [ 247.068379][ T4318] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.137081][ T7422] loop2: detected capacity change from 0 to 256 [ 247.814731][ T4320] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.818438][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.819685][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.097653][ T7422] loop2: detected capacity change from 0 to 128 [ 249.099559][ T7422] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 249.116828][ T7422] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 250.948925][ T7456] loop0: detected capacity change from 0 to 512 [ 252.590006][ T7456] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.760: iget: bad extended attribute block 2 [ 252.606938][ T7456] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.760: error while reading EA inode 12 err=-117 [ 252.611642][ T7456] EXT4-fs (loop0): 1 orphan inode deleted [ 252.612838][ T7456] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 252.692541][ T7463] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 252.835931][ T4332] EXT4-fs (loop0): unmounting filesystem. [ 253.051534][ T7480] loop0: detected capacity change from 0 to 1024 [ 253.070112][ T7480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 254.345448][ T7480] EXT4-fs (loop0): unmounting filesystem. [ 258.486771][ T7564] tipc: Enabling of bearer rejected, failed to enable media [ 258.504522][ T7566] netlink: 56 bytes leftover after parsing attributes in process `syz.1.791'. [ 261.149786][ T7624] tipc: Enabling of bearer rejected, failed to enable media [ 261.393056][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 264.019636][ T7681] loop3: detected capacity change from 0 to 128 [ 264.034104][ T7681] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 264.049051][ T7681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.406088][ T7688] tipc: Enabling of bearer rejected, failed to enable media [ 268.760820][ T7755] tipc: Enabling of bearer rejected, failed to enable media [ 270.733904][ T7798] tipc: Enabling of bearer rejected, failed to enable media [ 271.798693][ T7790] loop3: detected capacity change from 0 to 32768 [ 271.829943][ T7790] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.850 (7790) [ 272.015363][ T7790] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 272.017490][ T7790] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 272.022760][ T7790] BTRFS info (device loop3): using free space tree [ 272.193597][ T27] audit: type=1326 audit(272.180:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.4.860" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9f77aa8 code=0x0 [ 272.266279][ T7790] BTRFS info (device loop3): enabling ssd optimizations [ 272.351808][ T4327] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 272.997574][ T7865] tipc: Enabled bearer , priority 0 [ 272.999930][ T7865] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 273.043514][ T7829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.224212][ T7869] cgroup: Unknown subsys name 'uid' [ 276.004087][ T7926] netlink: 9 bytes leftover after parsing attributes in process `syz.2.884'. [ 276.012768][ T7926] device gretap0 entered promiscuous mode [ 276.021744][ T7926] netlink: 5 bytes leftover after parsing attributes in process `syz.2.884'. [ 276.027908][ T7926] 0ªî{X¹¦: renamed from gretap0 [ 276.209071][ T7926] device 30ªî{X¹¦ left promiscuous mode [ 276.211138][ T7926] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 276.667996][ C1] hrtimer: interrupt took 33350 ns [ 278.773658][ T7980] netlink: 'syz.2.903': attribute type 4 has an invalid length. [ 278.775187][ T7980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.903'. [ 281.394528][ T8013] ubi0: attaching mtd0 [ 281.400311][ T8013] ubi0: scanning is finished [ 281.401214][ T8013] ubi0: empty MTD device detected [ 281.561780][ T8013] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 283.296258][ T4339] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 283.918936][ T8062] tipc: Enabling of bearer rejected, failed to enable media [ 284.292510][ T8085] trusted_key: encrypted_key: keylen parameter is missing [ 285.211287][ T6287] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 289.941342][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.952'. [ 290.032417][ T8174] x_tables: duplicate underflow at hook 2 [ 290.924842][ T8189] hub 8-0:1.0: USB hub found [ 290.928548][ T8189] hub 8-0:1.0: 8 ports detected [ 291.431110][ T8195] device syzkaller0 entered promiscuous mode [ 291.443566][ T8195] tipc: Enabled bearer , priority 0 [ 291.462435][ T8195] tipc: Resetting bearer [ 291.470039][ T8194] tipc: Resetting bearer [ 291.599074][ T8194] tipc: Disabling bearer [ 292.770611][ T8247] mmap: syz.0.971 (8247) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 292.778576][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 292.783460][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 292.790051][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 292.791938][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 292.797536][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'. [ 293.133216][ T8257] loop3: detected capacity change from 0 to 40427 [ 293.138661][ T8257] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 293.140467][ T8257] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 293.145705][ T8257] F2FS-fs (loop3): invalid crc value [ 293.380145][ T8257] F2FS-fs (loop3): Found nat_bits in checkpoint [ 293.713067][ T8257] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 293.714564][ T8257] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 294.550337][ T8291] overlayfs: failed to clone lowerpath [ 299.523362][ T8399] netlink: 'syz.0.1010': attribute type 4 has an invalid length. [ 301.588958][ T8414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1013'. [ 301.992173][ T8436] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 305.592531][ T8509] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 307.386870][ T8525] device syzkaller0 entered promiscuous mode [ 308.672449][ T8525] tipc: Enabled bearer , priority 0 [ 308.732158][ T8542] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 308.772653][ T8524] tipc: Resetting bearer [ 308.873356][ T8524] tipc: Disabling bearer [ 310.298627][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.299850][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.356416][ T8595] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 314.094633][ T8621] device syzkaller0 entered promiscuous mode [ 314.119202][ T8621] tipc: Enabled bearer , priority 0 [ 314.154695][ T8621] tipc: Resetting bearer [ 314.182613][ T8620] tipc: Resetting bearer [ 314.280111][ T8620] tipc: Disabling bearer [ 314.665954][ T8644] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 315.565770][ T8658] capability: warning: `syz.1.1072' uses 32-bit capabilities (legacy support in use) [ 317.933424][ T8758] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 329.095549][ T8938] loop3: detected capacity change from 0 to 8192 [ 329.125390][ T8938] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 329.128364][ T8938] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 329.161107][ T8938] REISERFS (device loop3): using ordered data mode [ 329.162466][ T8938] reiserfs: using flush barriers [ 329.180603][ T8938] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 329.184304][ T8938] REISERFS (device loop3): checking transaction log (loop3) [ 329.233151][ T8938] REISERFS (device loop3): Using r5 hash to sort names [ 329.234895][ T8938] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 329.775908][ T8943] netlink: 'syz.4.1127': attribute type 10 has an invalid length. [ 329.805383][ T8943] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 335.024426][ T9029] tipc: Enabling of bearer rejected, failed to enable media [ 335.731849][ T9042] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 352.229979][ T9318] loop3: detected capacity change from 0 to 256 [ 352.231770][ T9318] exfat: Deprecated parameter 'namecase' [ 352.232902][ T9318] exfat: Deprecated parameter 'namecase' [ 352.874995][ T9318] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 352.953897][ T9318] syz.3.1216: attempt to access beyond end of device [ 352.953897][ T9318] loop3: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 352.956247][ T9318] syz.3.1216: attempt to access beyond end of device [ 352.956247][ T9318] loop3: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 365.290095][ T9562] device syzkaller0 entered promiscuous mode [ 365.457635][ T9565] netlink: 'syz.0.1279': attribute type 27 has an invalid length. [ 365.459239][ T9565] netlink: 'syz.0.1279': attribute type 3 has an invalid length. [ 365.460488][ T9565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1279'. [ 366.187715][ T9567] tipc: Enabling of bearer rejected, failed to enable media [ 366.209317][ T9562] tipc: Enabled bearer , priority 0 [ 366.214519][ T9561] tipc: Resetting bearer [ 366.825063][ T9581] ipt_REJECT: ECHOREPLY no longer supported. [ 367.112610][ T9561] tipc: Disabling bearer [ 369.676572][ T9627] tipc: Enabling of bearer rejected, failed to enable media [ 369.683307][ T9627] device syzkaller0 entered promiscuous mode [ 369.697391][ T9627] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 371.680836][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.682134][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.895749][ T9681] tipc: Enabling of bearer rejected, failed to enable media [ 373.062137][ T9688] netlink: 'syz.3.1309': attribute type 4 has an invalid length. [ 375.375479][ T9720] loop3: detected capacity change from 0 to 32768 [ 376.185852][ T9725] Injecting memory failure for pfn 0x14bffe at process virtual address 0x20ffe000 [ 376.305826][ T9725] Memory failure: 0x14bffe: recovery action for dirty LRU page: Recovered [ 376.801164][ T9733] tipc: Enabling of bearer rejected, failed to enable media [ 376.807913][ T9733] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 378.870114][ T9775] tipc: Enabling of bearer rejected, failed to enable media [ 380.081841][ T9815] tipc: Enabling of bearer rejected, failed to enable media [ 380.084151][ T9815] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 380.611924][ T9829] netlink: 'syz.3.1352': attribute type 1 has an invalid length. [ 380.642393][ T9829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.737204][ T9829] device macvlan2 entered promiscuous mode [ 380.745896][ T9829] device bond2 entered promiscuous mode [ 380.759142][ T9829] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 380.777692][ T9829] team0: Port device macvlan2 added [ 380.837093][ T9829] bond2: (slave ip6gretap1): making interface the new active one [ 380.841056][ T9829] device ip6gretap1 entered promiscuous mode [ 380.847056][ T9829] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 380.851749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 380.854445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 382.249946][ T9852] tipc: Enabling of bearer rejected, failed to enable media [ 382.298675][ T9852] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 385.002039][ T9886] tipc: Enabling of bearer rejected, failed to enable media [ 387.797994][ C0] ------------[ cut here ]------------ [ 387.799233][ C0] WARNING: CPU: 0 PID: 9941 at net/mac80211/tx.c:4946 __ieee80211_beacon_get+0xf60/0x12bc [ 387.800902][ C0] Modules linked in: [ 387.801602][ C0] CPU: 0 PID: 9941 Comm: syz.4.1380 Not tainted syzkaller #0 [ 387.802838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 387.804693][ C0] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 387.806021][ C0] pc : __ieee80211_beacon_get+0xf60/0x12bc [ 387.807103][ C0] lr : __ieee80211_beacon_get+0xf60/0x12bc [ 387.808162][ C0] sp : ffff800008007a90 [ 387.808968][ C0] x29: ffff800008007ad0 x28: ffffffffffffe520 x27: 0000000000000001 [ 387.810264][ C0] x26: 0000000000000041 x25: ffff0000f4498000 x24: 0000000000000000 [ 387.811655][ C0] x23: ffff0000c36e0e80 x22: ffff800008007b3c x21: ffff0000d3f2e228 [ 387.813097][ C0] x20: dfff800000000000 x19: ffff0000d3f2e760 x18: ffff800011babf60 [ 387.814469][ C0] x17: ffff80018a366000 x16: ffff8000082d8944 x15: 0000000000000000 [ 387.815886][ C0] x14: 0000000000000007 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 387.817313][ C0] x11: ff00800011330a58 x10: 0000000000000000 x9 : ffff800011330a58 [ 387.818799][ C0] x8 : ffff0000d04bd400 x7 : 0000000000000000 x6 : 0000000000000000 [ 387.820273][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80001132fd50 [ 387.821660][ C0] x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 [ 387.822966][ C0] Call trace: [ 387.823516][ C0] __ieee80211_beacon_get+0xf60/0x12bc [ 387.824430][ C0] ieee80211_beacon_get_tim+0x70/0x44c [ 387.825363][ C0] mac80211_hwsim_beacon_tx+0x1e8/0x914 [ 387.826278][ C0] __iterate_interfaces+0x204/0x484 [ 387.827157][ C0] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 387.828358][ C0] mac80211_hwsim_beacon+0xc8/0x1b8 [ 387.829277][ C0] __hrtimer_run_queues+0x438/0xc40 [ 387.830178][ C0] hrtimer_run_softirq+0x160/0x400 [ 387.831064][ C0] handle_softirqs+0x318/0xc60 [ 387.831882][ C0] __do_softirq+0x14/0x20 [ 387.832631][ C0] ____do_softirq+0x14/0x20 [ 387.833405][ C0] call_on_irq_stack+0x30/0x48 [ 387.834242][ C0] do_softirq_own_stack+0x20/0x2c [ 387.835073][ C0] __irq_exit_rcu+0x23c/0x438 [ 387.835872][ C0] irq_exit_rcu+0x14/0x84 [ 387.836635][ C0] el1_interrupt+0x38/0x54 [ 387.837368][ C0] el1h_64_irq_handler+0x18/0x24 [ 387.838173][ C0] el1h_64_irq+0x64/0x68 [ 387.838888][ C0] __unix_dgram_recvmsg+0x6dc/0xb04 [ 387.839764][ C0] unix_dgram_recvmsg+0xd0/0xe8 [ 387.840582][ C0] ____sys_recvmsg+0x678/0x768 [ 387.841392][ C0] do_recvmmsg+0x388/0xa0c [ 387.842111][ C0] __arm64_sys_recvmmsg+0x17c/0x23c [ 387.842977][ C0] invoke_syscall+0x98/0x290 [ 387.843772][ C0] el0_svc_common+0x138/0x258 [ 387.844562][ C0] do_el0_svc+0x58/0x130 [ 387.845242][ C0] el0_svc+0x58/0x128 [ 387.845911][ C0] el0t_64_sync_handler+0x84/0xf0 [ 387.846709][ C0] el0t_64_sync+0x18c/0x190 [ 387.847474][ C0] irq event stamp: 127073 [ 387.848171][ C0] hardirqs last enabled at (127072): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 387.849883][ C0] hardirqs last disabled at (127073): [] el1_dbg+0x24/0x80 [ 387.851325][ C0] softirqs last enabled at (121132): [] handle_softirqs+0xaec/0xc60 [ 387.853056][ C0] softirqs last disabled at (127069): [] __do_softirq+0x14/0x20 [ 387.854653][ C0] ---[ end trace 0000000000000000 ]---