last executing test programs: 19.225980149s ago: executing program 1 (id=486): socket$inet6(0xa, 0x5, 0x80000) set_mempolicy(0x8006, &(0x7f0000000040)=0x1, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2) fcntl$setsig(r0, 0xa, 0x2b) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, r2}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) 14.807648522s ago: executing program 0 (id=494): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c1040, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x0, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0x8000005, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 14.783893373s ago: executing program 1 (id=495): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_emit_ethernet(0x3b6, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r3, 0x0, 0x0) 13.539735982s ago: executing program 1 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000000101010100000000000000000a001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r1, 0x9, 0x41d9fda4) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 11.844472412s ago: executing program 1 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa}}, 0x26) sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 11.665075046s ago: executing program 0 (id=505): syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 11.060116121s ago: executing program 3 (id=508): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x58, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) mkdir(0x0, 0x9b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18410, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES32=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") 10.982435323s ago: executing program 0 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usbip_server_init(0x3) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r2, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x48}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.840777426s ago: executing program 3 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x80007) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 10.111821493s ago: executing program 0 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r3, 0x1) 9.087355957s ago: executing program 3 (id=513): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000000)=0x1, 0x4) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) 7.6784806s ago: executing program 4 (id=515): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.616627212s ago: executing program 2 (id=516): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x920, 0x12) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.555399457s ago: executing program 4 (id=517): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x8040480) syz_io_uring_setup(0x11dc, &(0x7f0000000180)={0x0, 0x4686, 0x2, 0x3, 0x37d}, &(0x7f0000000200), &(0x7f0000000240), 0x0) 5.897640512s ago: executing program 4 (id=518): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) unshare(0x24020400) r3 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x3) fallocate(r3, 0x0, 0x0, 0x200401) fallocate(r3, 0x0, 0x0, 0x200401) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 5.836146404s ago: executing program 2 (id=519): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x900}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1']) 5.798238545s ago: executing program 1 (id=520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20000040) timer_settime(r1, 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000000c0)={0x20, 0x1, 0x7, 0xfe, 0x0, 0xbeff, 0x0}) 4.25957473s ago: executing program 2 (id=521): r0 = socket$key(0xf, 0x3, 0x2) accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 4.195425682s ago: executing program 1 (id=522): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, 0x0, &(0x7f0000000040)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r5, 0x0, 0x7ffff000, 0x0) sendto$inet(r0, &(0x7f0000000200)="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", 0xee5, 0x8000, &(0x7f0000001200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000010003c3bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff00000000650a0200000000ff2d400500000000004400000001ede4ff6b03000000000000cc440000000000007a0a00fe00ffffffdb03000001000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f504e7c87fae1d56aa9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8cde6aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75cafd2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeeaaed7b35e3460bd571e09196ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb0613684e128cb06ded90b9a341304c2890cda1f96b95add69279063eaa76c336adad0b80b4be2511e3a69d040000000000000090205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999a556b3df4dd146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa83a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d0f9dd53478dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23886ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d78d6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ba0d48fceb72b30bbee0ab3e6b12ce379b4cda2500108052aeb9bd03a9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e1942992048df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be97791"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.908146479s ago: executing program 3 (id=523): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f00000193c0)=""/102392, 0x18ff8) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_genetlink_get_family_id$l2tp(0x0, r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 3.521879258s ago: executing program 2 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f00000000c0)={0x0, 0x0, 0x28, 0x2, 0x8}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x3e, 0x107, 0x0, 0x5, {0x4, 0x7c}, [@nested={0x4, 0x149}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str=';\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffe}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x40000) 2.917930762s ago: executing program 0 (id=525): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x13, r4, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2.916548062s ago: executing program 4 (id=526): r0 = socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000280)=""/189, 0xbd) ioctl$sock_SIOCETHTOOL(r0, 0x8993, 0x0) 1.903306906s ago: executing program 2 (id=527): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1.860886477s ago: executing program 3 (id=528): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x8040480) syz_io_uring_setup(0x11dc, &(0x7f0000000180)={0x0, 0x4686, 0x2, 0x3, 0x37d}, &(0x7f0000000200), &(0x7f0000000240), 0x0) 1.827583418s ago: executing program 4 (id=529): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 769.688843ms ago: executing program 0 (id=530): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x920, 0x12) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 769.360953ms ago: executing program 2 (id=531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r3, &(0x7f0000000340)='0', 0xffe0, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) syz_open_dev$vim2m(&(0x7f0000000100), 0x10000, 0x2) sendmsg$NFT_BATCH(r1, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) 547.342958ms ago: executing program 3 (id=532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000200)='./dev\x00', 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 4 (id=533): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 50.772000][ T3933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.791673][ T3933] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. syzkaller login: [ 76.138500][ T4258] cgroup: Unknown subsys name 'net' [ 76.239047][ T4258] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.659890][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 79.117648][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.125626][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.125636][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.127351][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.133983][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.146309][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.149211][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.154696][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.168446][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.176195][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.183733][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.189759][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.196349][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.208563][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.211046][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.224493][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.225574][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.233056][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.241088][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.247848][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.254292][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.261529][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.267190][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.281806][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.282582][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.290366][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.296530][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.310086][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.317301][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.349493][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.785583][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 79.861471][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 79.921637][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 79.948615][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 79.958730][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 79.973932][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.981841][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.990015][ T4273] device bridge_slave_0 entered promiscuous mode [ 80.030752][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.037921][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.046190][ T4273] device bridge_slave_1 entered promiscuous mode [ 80.069564][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.076891][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.085311][ T4281] device bridge_slave_0 entered promiscuous mode [ 80.115534][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.123397][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.131973][ T4281] device bridge_slave_1 entered promiscuous mode [ 80.155655][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.168140][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.201486][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.232276][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.273643][ T4273] team0: Port device team_slave_0 added [ 80.279847][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.287331][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.295622][ T4271] device bridge_slave_0 entered promiscuous mode [ 80.325054][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.334405][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.342739][ T4271] device bridge_slave_1 entered promiscuous mode [ 80.351753][ T4273] team0: Port device team_slave_1 added [ 80.366081][ T4281] team0: Port device team_slave_0 added [ 80.383112][ T4281] team0: Port device team_slave_1 added [ 80.389055][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.396830][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.405303][ T4272] device bridge_slave_0 entered promiscuous mode [ 80.429407][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.436583][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.445206][ T4270] device bridge_slave_0 entered promiscuous mode [ 80.459779][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.467314][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.475901][ T4270] device bridge_slave_1 entered promiscuous mode [ 80.483465][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.490966][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.498896][ T4272] device bridge_slave_1 entered promiscuous mode [ 80.507888][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.519588][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.549634][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.556810][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.583016][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.621014][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.628023][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.655056][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.666689][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.674775][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.700822][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.720151][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.731306][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.748859][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.755934][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.782533][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.799539][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.815439][ T4271] team0: Port device team_slave_0 added [ 80.823121][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.866193][ T4271] team0: Port device team_slave_1 added [ 80.879878][ T4272] team0: Port device team_slave_0 added [ 80.896695][ T4281] device hsr_slave_0 entered promiscuous mode [ 80.903995][ T4281] device hsr_slave_1 entered promiscuous mode [ 80.931030][ T4272] team0: Port device team_slave_1 added [ 80.938713][ T4270] team0: Port device team_slave_0 added [ 80.950646][ T4270] team0: Port device team_slave_1 added [ 80.988580][ T4273] device hsr_slave_0 entered promiscuous mode [ 80.995406][ T4273] device hsr_slave_1 entered promiscuous mode [ 81.002308][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.010338][ T4273] Cannot create hsr debugfs directory [ 81.029394][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.036590][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.063273][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.089410][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.096577][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.126427][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.138633][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.145784][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.171775][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.192125][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.199115][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.225272][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.245408][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.252951][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.279641][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.291566][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.298536][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.324830][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.375882][ T4272] device hsr_slave_0 entered promiscuous mode [ 81.383150][ T4272] device hsr_slave_1 entered promiscuous mode [ 81.389665][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.400601][ T4272] Cannot create hsr debugfs directory [ 81.441339][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 81.441425][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 81.447755][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 81.460481][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 81.460546][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 81.524976][ T4270] device hsr_slave_0 entered promiscuous mode [ 81.535352][ T4270] device hsr_slave_1 entered promiscuous mode [ 81.542792][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.550364][ T4270] Cannot create hsr debugfs directory [ 81.588403][ T4271] device hsr_slave_0 entered promiscuous mode [ 81.595513][ T4271] device hsr_slave_1 entered promiscuous mode [ 81.605723][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.613443][ T4271] Cannot create hsr debugfs directory [ 81.888356][ T4281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.911946][ T4281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.925985][ T4281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.946387][ T4281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.977785][ T4273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.998496][ T4273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.024335][ T4273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.042186][ T4273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.088304][ T4272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.099696][ T4272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.110415][ T4272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.121272][ T4272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.275101][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.298822][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.326289][ T4270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.337597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.347926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.361852][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.376267][ T4270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.394350][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.412834][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.432532][ T4270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.446194][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.455837][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.466181][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.475612][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.482913][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.494983][ T4270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.524719][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.534867][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.543673][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.555619][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.564824][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.572035][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.580046][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.590051][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.600189][ T4271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.633229][ T4271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.643138][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.655324][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.664115][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.671294][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.679853][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.690821][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.699272][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.706440][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.715469][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.725035][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.735263][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.744500][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.753718][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.763436][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.772446][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.780617][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.805713][ T4271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.821854][ T4271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.835293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.849852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.862465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.873661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.884083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.894077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.902632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.912596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.921748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.930287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.939005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.952501][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.965239][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.988273][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.999865][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.022174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.035152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.053813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.071316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.128906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.140983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.149864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.167506][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.174742][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.232466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.267842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.292886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.320130][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.327453][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.342067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.351924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.376759][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.389382][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.399157][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.439244][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.461691][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.472269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.491020][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.511775][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.520872][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 83.526947][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 83.532043][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.534236][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 83.544290][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 83.547045][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 83.593581][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.614952][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.633658][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.682272][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.702583][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.736678][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.777910][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.793959][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.804600][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.848232][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.857737][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.867256][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.874442][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.886395][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.896341][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.905025][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.912271][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.921984][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.930846][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.939317][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.946548][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.956802][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.965758][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.974492][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.981633][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.034223][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.051014][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.059685][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.068155][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.077313][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.089175][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.105416][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.116785][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.127390][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.137271][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.146198][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.155213][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.165153][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.175055][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.182908][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.190373][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.229136][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.249365][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.259376][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.293000][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.332886][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.343081][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.351642][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.360294][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.371673][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.380207][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.389171][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.398376][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.407895][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.416758][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.442075][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.450860][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.508071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.532141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.568625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.579175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.597156][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.653560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.675921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.710864][ T4281] device veth0_vlan entered promiscuous mode [ 84.719176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.748576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.775289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.811983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.835967][ T4281] device veth1_vlan entered promiscuous mode [ 84.873678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.901831][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.914583][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.943907][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.971409][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.008914][ T4272] device veth0_vlan entered promiscuous mode [ 85.045085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.061321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.087602][ T4272] device veth1_vlan entered promiscuous mode [ 85.123328][ T4281] device veth0_macvtap entered promiscuous mode [ 85.155657][ T4281] device veth1_macvtap entered promiscuous mode [ 85.229448][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.246760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.258925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.269177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.279684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.289035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.299702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.308826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.318378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.334129][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.344597][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.353663][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.379272][ T4272] device veth0_macvtap entered promiscuous mode [ 85.390002][ T4281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.402432][ T4281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.411378][ T4281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.420096][ T4281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.438073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.448586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.456277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.465391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.473562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.488189][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.504439][ T4272] device veth1_macvtap entered promiscuous mode [ 85.516815][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.551960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.560395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.569756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.591370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.600040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.609140][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 85.609149][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 85.613663][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 85.616425][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 85.625306][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 85.648765][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.660242][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.674640][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.701906][ T4273] device veth0_vlan entered promiscuous mode [ 85.709389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.720199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.728442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.739042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.764051][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.777859][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.794364][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.806558][ T4273] device veth1_vlan entered promiscuous mode [ 85.836633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.845917][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.855119][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.865324][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.874694][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.885990][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.895748][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.905330][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.914340][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.939848][ T4270] device veth0_vlan entered promiscuous mode [ 85.961548][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.977400][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.988146][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.998355][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.032855][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.045233][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.055498][ T4270] device veth1_vlan entered promiscuous mode [ 86.087126][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.095904][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.104783][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.141046][ T4273] device veth0_macvtap entered promiscuous mode [ 86.170856][ T4271] device veth0_vlan entered promiscuous mode [ 86.183616][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.200008][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.208781][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.217620][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.227170][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.235494][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.249090][ T4273] device veth1_macvtap entered promiscuous mode [ 86.257190][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.272695][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.297252][ T4271] device veth1_vlan entered promiscuous mode [ 86.312736][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.323356][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.331885][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.339968][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.374289][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.384861][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.395653][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.407460][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.422338][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.447783][ T4271] device veth0_macvtap entered promiscuous mode [ 86.457034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.466315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.475618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.485225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.494960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.503874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.513168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.534851][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.545886][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.556726][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.560097][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.578702][ T14] cfg80211: failed to load regulatory.db [ 86.589105][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.600001][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.605289][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.617088][ T4271] device veth1_macvtap entered promiscuous mode [ 86.629113][ T4270] device veth0_macvtap entered promiscuous mode [ 86.648457][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.660026][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.668998][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.677403][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.687548][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.699235][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.708560][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.718089][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.728642][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.766186][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.776885][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.794710][ T4270] device veth1_macvtap entered promiscuous mode [ 86.813947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.831370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.891565][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.907147][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.918329][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.930628][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.932321][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.953203][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.965129][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.975946][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.001743][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.014743][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.044227][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.061663][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.126580][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.147963][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.158299][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.175834][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.186072][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.216452][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.226515][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.243841][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.257889][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.268012][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.284638][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.294767][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.305356][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.319828][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.336280][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.347994][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.391779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.407150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.416180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.425718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.438128][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.451319][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.462021][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.472573][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.510978][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.530838][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.556753][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.580768][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.612090][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.636715][ T4271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.651348][ T4271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.676401][ T4271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.686164][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 87.691130][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 87.698731][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 87.701125][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 87.711748][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 87.737248][ T4271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.764495][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.777160][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.796145][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.819324][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.846008][ T4270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.866060][ T4270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.892784][ T4270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.912997][ T4270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.939625][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.981752][ T4365] loop3: detected capacity change from 0 to 8192 [ 88.035640][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.049871][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.089502][ T4365] loop3: p1 p3 p4 [ 88.124529][ T4365] loop3: partition table partially beyond EOD, truncated [ 88.143650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.161530][ T4365] loop3: p1 start 393217 is beyond EOD, truncated [ 88.195834][ T4365] loop3: p3 size 395700 extends beyond EOD, truncated [ 88.244471][ T4365] loop3: p4 start 117571584 is beyond EOD, truncated [ 88.269081][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.309775][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.364478][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.441042][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.448931][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.622067][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.644057][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.675870][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.697730][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.172722][ T4378] "syz.3.7" (4378) uses obsolete ecb(arc4) skcipher [ 89.582568][ T4367] udevd[4367]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 89.720498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.740500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.750484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.760482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.770478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.780480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.790474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.800485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.810487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.820480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 91.422109][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.445263][ T4386] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.480034][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.562633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.761024][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.983964][ T22] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 91.992472][ T22] usb 2-1: config 0 has no interface number 0 [ 91.998594][ T22] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11 [ 92.010556][ T22] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 92.021809][ T22] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 92.031884][ T22] usb 2-1: config 0 interface 11 has no altsetting 0 [ 92.038617][ T22] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 92.094823][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.155973][ T22] usb 2-1: config 0 descriptor?? [ 92.181019][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.191206][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.198699][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.240197][ T22] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 92.280990][ T22] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 92.304334][ T22] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 92.362847][ T22] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 92.415533][ T22] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 92.477367][ T22] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 92.517569][ T22] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 92.613243][ T22] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 92.709879][ T22] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 92.742674][ T22] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 92.764134][ T22] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 92.784485][ T22] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 92.800955][ T22] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 92.819040][ T22] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 92.870618][ T4401] device lo entered promiscuous mode [ 92.877367][ T4406] loop4: detected capacity change from 0 to 512 [ 92.882198][ T22] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 92.937655][ T22] usb 2-1: USB disconnect, device number 2 [ 93.015679][ T22] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 93.041201][ T22] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 93.051633][ T22] keyspan 2-1:0.11: device disconnected [ 93.082147][ T4406] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 93.160654][ T4406] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.271030][ T4401] device tunl0 entered promiscuous mode [ 93.344027][ T4401] device gre0 entered promiscuous mode [ 93.606287][ T4401] device gretap0 entered promiscuous mode [ 93.720726][ T4401] device erspan0 entered promiscuous mode [ 93.733409][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 93.828181][ T4401] device ip_vti0 entered promiscuous mode [ 93.896872][ T4401] device ip6_vti0 entered promiscuous mode [ 93.917064][ T4401] device sit0 entered promiscuous mode [ 93.956453][ T4401] device ip6tnl0 entered promiscuous mode [ 94.198867][ T4401] device ip6gre0 entered promiscuous mode [ 95.449453][ T4401] device syz_tun entered promiscuous mode [ 95.686963][ T4401] device ip6gretap0 entered promiscuous mode [ 95.741444][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.749874][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.904163][ T4401] device bridge0 entered promiscuous mode [ 96.498874][ T4401] device vcan0 entered promiscuous mode [ 96.537508][ T4401] device bond0 entered promiscuous mode [ 96.543330][ T4401] device bond_slave_0 entered promiscuous mode [ 96.556849][ T4401] device bond_slave_1 entered promiscuous mode [ 96.685201][ T4401] device team0 entered promiscuous mode [ 96.699244][ T4401] device team_slave_0 entered promiscuous mode [ 96.729222][ T4401] device team_slave_1 entered promiscuous mode [ 96.883021][ T4401] device dummy0 entered promiscuous mode [ 97.528674][ T4401] device nlmon0 entered promiscuous mode [ 97.536751][ T4401] device caif0 entered promiscuous mode [ 97.618114][ T4401] device batadv0 entered promiscuous mode [ 97.707586][ T4401] device vxcan0 entered promiscuous mode [ 97.723830][ T4401] device vxcan1 entered promiscuous mode [ 97.756784][ T4401] device veth0 entered promiscuous mode [ 97.799778][ T4401] device veth1 entered promiscuous mode [ 97.845822][ T4401] device wg0 entered promiscuous mode [ 97.890876][ T4401] device wg1 entered promiscuous mode [ 97.920941][ T4401] device wg2 entered promiscuous mode [ 97.944248][ T4401] device veth0_to_bridge entered promiscuous mode [ 98.086133][ T4401] device veth1_to_bridge entered promiscuous mode [ 98.568762][ T4401] device veth0_to_bond entered promiscuous mode [ 98.820658][ T4401] device veth1_to_bond entered promiscuous mode [ 98.908322][ T4401] device veth0_to_team entered promiscuous mode [ 98.989194][ T4401] device veth1_to_team entered promiscuous mode [ 99.016515][ T4461] mmap: syz.1.28 (4461) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.101428][ T4401] device veth0_to_batadv entered promiscuous mode [ 99.122812][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.431235][ T4401] device batadv_slave_0 entered promiscuous mode [ 100.906392][ T4401] device veth1_to_batadv entered promiscuous mode [ 100.961308][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.282991][ T4401] device batadv_slave_1 entered promiscuous mode [ 101.353192][ T4464] loop1: detected capacity change from 0 to 32768 [ 101.401225][ T4401] device xfrm0 entered promiscuous mode [ 101.903673][ T4401] device veth0_to_hsr entered promiscuous mode [ 101.990582][ T4464] (syz.1.28,4464,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.020202][ T4464] (syz.1.28,4464,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.070056][ T4464] (syz.1.28,4464,0):ocfs2_initialize_super:2284 ERROR: status = -12 [ 102.085829][ T4464] (syz.1.28,4464,0):ocfs2_fill_super:1176 ERROR: status = -12 [ 102.119369][ T4401] device veth1_to_hsr entered promiscuous mode [ 102.239271][ T4401] device hsr0 entered promiscuous mode [ 102.269972][ T4401] device veth1_virt_wifi entered promiscuous mode [ 102.355691][ T4477] capability: warning: `syz.1.30' uses deprecated v2 capabilities in a way that may be insecure [ 103.284230][ T4401] device veth0_virt_wifi entered promiscuous mode [ 103.293760][ T4401] device virt_wifi0 entered promiscuous mode [ 103.370683][ T4423] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.475093][ T4401] device vlan0 entered promiscuous mode [ 103.483228][ T4401] device vlan1 entered promiscuous mode [ 103.580565][ T4423] usb 4-1: Using ep0 maxpacket: 16 [ 103.589387][ T4423] usb 4-1: device descriptor read/all, error -71 [ 103.691526][ T4401] device macvlan0 entered promiscuous mode [ 103.711230][ T4401] device macvlan1 entered promiscuous mode [ 103.723748][ T4401] device ipvlan0 entered promiscuous mode [ 103.729714][ T4401] device ipvlan1 entered promiscuous mode [ 103.812936][ T4485] netlink: 276 bytes leftover after parsing attributes in process `syz.3.32'. [ 104.312284][ T4401] device macvtap0 entered promiscuous mode [ 104.381475][ T4401] device macsec0 entered promiscuous mode [ 104.395342][ T4401] device geneve0 entered promiscuous mode [ 104.421161][ T4401] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.450417][ T4401] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.462064][ T4401] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.471067][ T4401] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.480194][ T4401] device geneve1 entered promiscuous mode [ 104.511503][ T4401] device netdevsim0 entered promiscuous mode [ 104.533760][ T4401] device netdevsim1 entered promiscuous mode [ 104.564627][ T4401] device netdevsim2 entered promiscuous mode [ 104.593909][ T4401] device netdevsim3 entered promiscuous mode [ 104.628489][ T4401] device wlan0 entered promiscuous mode [ 104.653621][ T4401] device wlan1 entered promiscuous mode [ 104.677419][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.716961][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.729097][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.751263][ T4433] device bridge_slave_0 left promiscuous mode [ 104.758083][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.784369][ T4433] device bridge_slave_1 left promiscuous mode [ 104.795238][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.806775][ T4433] bond0: (slave bond_slave_0): Releasing backup interface [ 104.828685][ T4433] bond0: (slave bond_slave_1): Releasing backup interface [ 104.908677][ T4433] team0: Port device team_slave_0 removed [ 104.938550][ T4433] team0: Port device team_slave_1 removed [ 104.957435][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.971550][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.985850][ T4433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.995434][ T4433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.089566][ T4489] tipc: Enabling of bearer rejected, failed to enable media [ 106.068211][ T4509] loop4: detected capacity change from 0 to 512 [ 106.086656][ T4509] EXT4-fs: Ignoring removed nobh option [ 106.342455][ T4509] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 106.361093][ T4509] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 106.405802][ T4509] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #13: comm syz.4.38: inode has both inline data and extents flags [ 106.446422][ T4509] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.38: couldn't read orphan inode 13 (err -117) [ 106.489169][ T4520] loop1: detected capacity change from 0 to 256 [ 106.504579][ T4509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.572169][ T4520] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 106.689806][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 106.861519][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.871803][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.879278][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.256717][ T4531] ======================================================= [ 107.256717][ T4531] WARNING: The mand mount option has been deprecated and [ 107.256717][ T4531] and is ignored by this kernel. Remove the mand [ 107.256717][ T4531] option from the mount to silence this warning. [ 107.256717][ T4531] ======================================================= [ 107.421617][ T4531] 9pnet_virtio: no channels available for device 127.0.0.1 [ 107.560230][ T4539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.223799][ T4576] FAULT_INJECTION: forcing a failure. [ 110.223799][ T4576] name failslab, interval 1, probability 0, space 0, times 1 [ 110.225147][ T4576] CPU: 1 PID: 4576 Comm: syz.2.59 Not tainted syzkaller #0 [ 110.225173][ T4576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.225195][ T4576] Call Trace: [ 110.225204][ T4576] [ 110.225214][ T4576] dump_stack_lvl+0x188/0x24e [ 110.225260][ T4576] ? show_regs_print_info+0x12/0x12 [ 110.225289][ T4576] ? load_image+0x410/0x410 [ 110.225315][ T4576] ? __lock_acquire+0x7ea0/0x7ea0 [ 110.225355][ T4576] should_fail_ex+0x390/0x4c0 [ 110.225394][ T4576] should_failslab+0x5/0x20 [ 110.225415][ T4576] slab_pre_alloc_hook+0x59/0x300 [ 110.225448][ T4576] kmem_cache_alloc+0x56/0x2f0 [ 110.225471][ T4576] ? sk_prot_alloc+0x57/0x210 [ 110.225508][ T4576] sk_prot_alloc+0x57/0x210 [ 110.225543][ T4576] ? sk_alloc+0x20/0x330 [ 110.225576][ T4576] sk_alloc+0x36/0x330 [ 110.225610][ T4576] inet_create+0x759/0xf60 [ 110.225640][ T4576] ? inet_create+0x9e/0xf60 [ 110.225675][ T4576] __sock_create+0x49a/0x940 [ 110.225707][ T4576] start_sync_thread+0xdc8/0x2890 [ 110.225746][ T4576] ? sync_thread_master+0x10d0/0x10d0 [ 110.225784][ T4576] ? sb_queue_tail+0x3e0/0x3e0 [ 110.225817][ T4576] ? __lock_acquire+0x7ea0/0x7ea0 [ 110.225846][ T4576] ? mark_lock+0x94/0x320 [ 110.225883][ T4576] ? __might_fault+0xa6/0x120 [ 110.225907][ T4576] ? __might_fault+0xc2/0x120 [ 110.225928][ T4576] ? __might_fault+0xa6/0x120 [ 110.225960][ T4576] do_ip_vs_set_ctl+0x499/0xb40 [ 110.225998][ T4576] ? update_defense_level+0xe20/0xe20 [ 110.226036][ T4576] ? trace_contention_end+0x5f/0x170 [ 110.226087][ T4576] ? mutex_unlock+0x10/0x10 [ 110.226124][ T4576] ? mutex_lock_nested+0x10/0x10 [ 110.226185][ T4576] nf_setsockopt+0x25f/0x280 [ 110.226216][ T4576] ? sock_common_recvmsg+0x190/0x190 [ 110.226239][ T4576] smc_setsockopt+0x219/0xb80 [ 110.226268][ T4576] ? smc_shutdown+0x9a0/0x9a0 [ 110.226290][ T4576] ? aa_sock_opt_perm+0x74/0x100 [ 110.226324][ T4576] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 110.226345][ T4576] ? security_socket_setsockopt+0x7a/0xa0 [ 110.226373][ T4576] ? smc_shutdown+0x9a0/0x9a0 [ 110.226397][ T4576] __sys_setsockopt+0x2bf/0x3d0 [ 110.226423][ T4576] __x64_sys_setsockopt+0xb1/0xc0 [ 110.226448][ T4576] do_syscall_64+0x4c/0xa0 [ 110.226471][ T4576] ? clear_bhb_loop+0x60/0xb0 [ 110.226494][ T4576] ? clear_bhb_loop+0x60/0xb0 [ 110.226520][ T4576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.226548][ T4576] RIP: 0033:0x7f4b21d9e199 [ 110.226567][ T4576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.226584][ T4576] RSP: 002b:00007f4b22bc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.226608][ T4576] RAX: ffffffffffffffda RBX: 00007f4b22025fa0 RCX: 00007f4b21d9e199 [ 110.226623][ T4576] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 110.226637][ T4576] RBP: 00007f4b21e35888 R08: 0000000000000018 R09: 0000000000000000 [ 110.226651][ T4576] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000000 [ 110.226664][ T4576] R13: 00007f4b22026038 R14: 00007f4b22025fa0 R15: 00007fff989a29d8 [ 110.226696][ T4576] [ 110.230294][ T4576] IPVS: Error during creation of socket; terminating [ 110.619372][ T4579] loop1: detected capacity change from 0 to 512 [ 110.675711][ T4579] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.60: bg 0: block 5: invalid block bitmap [ 110.695255][ T4579] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 110.695487][ T4579] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.60: invalid indirect mapped block 3 (level 2) [ 110.695921][ T4579] EXT4-fs (loop1): 1 orphan inode deleted [ 110.695958][ T4579] EXT4-fs (loop1): 1 truncate cleaned up [ 110.695986][ T4579] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.073343][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 111.444949][ T4587] loop2: detected capacity change from 0 to 1024 [ 111.940877][ T4587] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.974718][ T4587] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 112.077891][ T4587] Unsupported ieee802154 address type: 0 [ 112.970691][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 113.158673][ T4610] loop1: detected capacity change from 0 to 128 [ 114.193646][ T4615] syz.1.68: attempt to access beyond end of device [ 114.193646][ T4615] loop1: rw=2049, sector=145, nr_sectors = 408 limit=128 [ 114.314389][ T4610] syz.1.68: attempt to access beyond end of device [ 114.314389][ T4610] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 114.340799][ T4610] syz.1.68: attempt to access beyond end of device [ 114.340799][ T4610] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 114.340941][ T4610] syz.1.68: attempt to access beyond end of device [ 114.340941][ T4610] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 114.341031][ T4610] syz.1.68: attempt to access beyond end of device [ 114.341031][ T4610] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 114.341120][ T4610] syz.1.68: attempt to access beyond end of device [ 114.341120][ T4610] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 114.360763][ T4610] syz.1.68: attempt to access beyond end of device [ 114.360763][ T4610] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 114.360877][ T4610] syz.1.68: attempt to access beyond end of device [ 114.360877][ T4610] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 114.360964][ T4610] syz.1.68: attempt to access beyond end of device [ 114.360964][ T4610] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 114.361051][ T4610] syz.1.68: attempt to access beyond end of device [ 114.361051][ T4610] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 114.443594][ T4624] netlink: 'syz.0.71': attribute type 10 has an invalid length. [ 114.448760][ T4624] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.449393][ T4624] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.482939][ T4624] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.483028][ T4624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.483250][ T4624] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.483338][ T4624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.486193][ T4624] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 114.588750][ T4624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 114.588904][ T4624] device bridge_slave_1 left promiscuous mode [ 114.589085][ T4624] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.614362][ T4624] device bridge_slave_0 left promiscuous mode [ 114.614533][ T4624] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.665124][ T4624] bond0: (slave bridge0): Releasing backup interface [ 115.871662][ T4619] tty tty25: ldisc open failed (-12), clearing slot 24 [ 117.352836][ T4650] loop0: detected capacity change from 0 to 4096 [ 117.439905][ T4650] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 117.617507][ T4661] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 117.686715][ T4661] CIFS: Attempting to mount \\127.0.0.1\share [ 118.350710][ T4317] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.626010][ T4317] usb 1-1: Using ep0 maxpacket: 32 [ 118.663007][ T4317] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 118.678921][ T4661] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 118.698065][ T4317] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 118.713241][ T4668] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.722376][ T4668] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.731170][ T4668] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.739916][ T4668] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.754907][ T4668] team0: Port device vxlan0 added [ 118.780245][ T4317] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 118.792912][ T4661] CIFS: VFS: cifs_mount failed w/return code = -112 [ 118.859079][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.927854][ T4317] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.984284][ T4679] Bluetooth: MGMT ver 1.22 [ 118.993894][ T4317] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.054647][ T4317] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 119.097713][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.138830][ T4317] usb 1-1: config 0 descriptor?? [ 119.149414][ T4282] Bluetooth: hci3: unexpected subevent 0x01 length: 19 > 18 [ 119.156999][ T4282] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 119.262626][ T4317] usb 1-1: can't set config #0, error -71 [ 119.285217][ T4317] usb 1-1: USB disconnect, device number 2 [ 119.326202][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 119.925497][ T4698] loop4: detected capacity change from 0 to 256 [ 119.959114][ T4698] exfat: Bad value for 'fmask' [ 120.326474][ T4704] loop0: detected capacity change from 0 to 1024 [ 120.346667][ T4469] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.120853][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.136734][ T4288] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 121.386735][ T4713] Zero length message leads to an empty skb [ 121.512822][ T4711] loop1: detected capacity change from 0 to 4096 [ 121.873748][ T4711] ntfs3: loop1: Failed to load $Extend. [ 121.980716][ T4317] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.200766][ T4317] usb 4-1: Using ep0 maxpacket: 8 [ 122.281669][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 122.553306][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.626156][ T4317] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.676014][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 122.815333][ T4735] ntfs3: loop1: ino=23, "memory.events.local" mmap(write) compressed not supported [ 122.901522][ T4317] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 122.912277][ T4317] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 122.921453][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.931814][ T4317] usb 4-1: config 0 descriptor?? [ 122.939519][ T4723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.609312][ T4272] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 123.679230][ T4272] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 124.479487][ T4282] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 124.504814][ T4423] usb 4-1: USB disconnect, device number 4 [ 124.783057][ T4751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.104'. [ 127.437013][ T4774] fuse: Unknown parameter 'group_i' [ 128.351217][ T4781] netlink: 'syz.3.112': attribute type 1 has an invalid length. [ 128.430608][ T4786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.112'. [ 128.440358][ T4786] device bond1 entered promiscuous mode [ 128.446637][ T4786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.531791][ T4781] device bridge1 entered promiscuous mode [ 128.544142][ T4781] bond1: (slave bridge1): making interface the new active one [ 128.555265][ T4781] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 128.584557][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 128.726947][ T4794] loop3: detected capacity change from 0 to 128 [ 131.566277][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 131.624719][ T4824] device bridge0 entered promiscuous mode [ 131.658600][ T4816] sctp: failed to load transform for md5: -2 [ 131.662225][ T4824] device macvtap1 entered promiscuous mode [ 132.334340][ T4836] xt_nat: multiple ranges no longer supported [ 132.428677][ T4827] device bridge0 left promiscuous mode [ 132.912711][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.919520][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.980930][ T4827] device macvtap1 left promiscuous mode [ 135.607516][ T4854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'. [ 140.386520][ T7] libceph: connect (1)[c::]:6789 error -101 [ 140.399042][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 141.320694][ T4884] ceph: No mds server is up or the cluster is laggy [ 141.584715][ T4423] libceph: connect (1)[c::]:6789 error -101 [ 141.720638][ T4423] libceph: mon0 (1)[c::]:6789 connect error [ 141.851401][ T4909] futex_wake_op: syz.2.146 tries to shift op by 144; fix this program [ 142.998637][ T4920] futex_wake_op: syz.2.149 tries to shift op by 144; fix this program [ 143.065597][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 143.077728][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 143.087637][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 143.098983][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 143.108578][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 144.924226][ T4932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 149.792195][ T4974] loop0: detected capacity change from 0 to 1024 [ 151.422657][ T4982] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 151.504324][ T4986] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 151.692436][ T4988] loop1: detected capacity change from 0 to 512 [ 151.923860][ T4988] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.166: missing EA_INODE flag [ 152.084775][ T4988] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.166: error while reading EA inode 12 err=-117 [ 152.174368][ T4988] EXT4-fs (loop1): 1 orphan inode deleted [ 152.305605][ T4988] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 152.747986][ T4998] netlink: 'syz.3.169': attribute type 11 has an invalid length. [ 153.056403][ T26] audit: type=1800 audit(1791446576.836:2): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.165" name="bus" dev="ramfs" ino=37236 res=0 errno=0 [ 153.187596][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 153.511861][ T5005] device geneve2 entered promiscuous mode [ 154.810390][ T5025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 158.680951][ T5055] loop1: detected capacity change from 0 to 256 [ 158.722905][ T5057] netlink: 'syz.0.184': attribute type 11 has an invalid length. [ 158.744091][ T4975] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.827574][ T5071] nftables ruleset with unbound set [ 161.770825][ T5073] loop4: detected capacity change from 0 to 1024 [ 161.801979][ T5073] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 161.822271][ T5073] EXT4-fs (loop4): invalid journal inode [ 161.894994][ T5073] EXT4-fs (loop4): can't get journal size [ 162.369750][ T5073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 163.068344][ T5073] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 64: comm syz.4.191: path (unknown): bad entry in directory: rec_len is too small for name_len - offset=0, inode=11, rec_len=12, size=1024 fake=0 [ 164.406378][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 167.800434][ C1] sched: RT throttling activated [ 168.977519][ T5123] loop2: detected capacity change from 0 to 1024 [ 169.494153][ T26] audit: type=1326 audit(1791446593.866:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.3.207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0bf9e199 code=0x7ffc0000 [ 169.553567][ T5128] loop3: detected capacity change from 0 to 512 [ 169.572352][ T26] audit: type=1326 audit(1791446593.896:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.3.207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0bf9e199 code=0x7ffc0000 [ 169.599530][ T5130] tipc: Started in network mode [ 169.620818][ T5130] tipc: Node identity fe634a2b1c58, cluster identity 4711 [ 169.667207][ T5130] tipc: Enabled bearer , priority 0 [ 169.698557][ T26] audit: type=1326 audit(1791446593.906:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.3.207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8b0bf9e199 code=0x7ffc0000 [ 169.706958][ T5128] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 169.743840][ T5135] device syzkaller0 entered promiscuous mode [ 169.814393][ T5128] overlayfs: overlapping lowerdir path [ 169.847166][ T26] audit: type=1326 audit(1791446593.906:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.3.207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b0bf9df02 code=0x7ffc0000 [ 169.886752][ T26] audit: type=1326 audit(1791446593.906:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.3.207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b0bf5e9ce code=0x7ffc0000 [ 169.920997][ T5130] tipc: Resetting bearer [ 169.930081][ T26] audit: type=1326 audit(1791446593.926:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.3.207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8b0bf9dfc7 code=0x7ffc0000 [ 169.972690][ T5128] EXT4-fs (loop3): unmounting filesystem. [ 169.978795][ T5129] tipc: Resetting bearer [ 170.008998][ T26] audit: type=1326 audit(1791446593.926:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.3.207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8b0bf5e9ce code=0x7ffc0000 [ 170.086280][ T5129] tipc: Disabling bearer [ 170.137824][ T26] audit: type=1326 audit(1791446593.926:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.3.207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b0bf9de2b code=0x7ffc0000 [ 170.656385][ T26] audit: type=1326 audit(1791446593.986:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.3.207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8b0bf5e9ce code=0x7ffc0000 [ 170.680465][ T26] audit: type=1326 audit(1791446593.986:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5127 comm="syz.3.207" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8b0bf5e9ce code=0x7ffc0000 [ 171.383486][ T5152] device syzkaller0 entered promiscuous mode [ 175.485113][ T5176] tipc: Started in network mode [ 175.554298][ T5176] tipc: Node identity ac1414aa, cluster identity 4711 [ 175.578719][ T5176] tipc: New replicast peer: 172.20.20.187 [ 175.610631][ T5176] tipc: Enabled bearer , priority 10 [ 176.633027][ T4275] tipc: Node number set to 2886997162 [ 176.921701][ T5194] netlink: 76 bytes leftover after parsing attributes in process `syz.1.225'. [ 177.052772][ T5197] loop2: detected capacity change from 0 to 2048 [ 177.200886][ T5197] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 178.581497][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 180.262509][ T5211] Set syz1 is full, maxelem 6117 reached [ 180.323514][ T5241] process 'syz.2.232' launched './file1' with NULL argv: empty string added [ 185.612538][ T5263] device syzkaller0 entered promiscuous mode [ 187.045705][ T5271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.056038][ T5271] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.130666][ T5271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.399437][ T5289] UBIFS error (pid: 5289): cannot open "(null)", error -22 [ 189.658830][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.246'. [ 190.351064][ T5295] tc action pedit 'at' offset 5 out of bounds [ 190.357683][ T5295] tc action pedit 'at' offset 5 out of bounds [ 190.363858][ T5295] tc action pedit 'at' offset 5 out of bounds [ 190.369982][ T5295] tc action pedit 'at' offset 5 out of bounds [ 190.376160][ T5295] tc action pedit 'at' offset 5 out of bounds [ 190.382306][ T5295] tc action pedit 'at' offset 5 out of bounds [ 190.388480][ T5295] tc action pedit 'at' offset 5 out of bounds [ 190.394587][ T5295] tc action pedit 'at' offset 5 out of bounds [ 190.400695][ T5295] tc action pedit 'at' offset 5 out of bounds [ 190.406772][ T5295] tc action pedit 'at' offset 5 out of bounds [ 190.412988][ T5295] 0: reclassify loop, rule prio 0, protocol 800 [ 191.656927][ T5304] tipc: Enabled bearer , priority 0 [ 191.696289][ T5301] device syzkaller0 entered promiscuous mode [ 191.816116][ T5301] tipc: Resetting bearer [ 191.894506][ T5300] tipc: Resetting bearer [ 193.279622][ T5300] tipc: Disabling bearer [ 194.362630][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.369019][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.486392][ T5331] cfg80211: Invalid regulatory domain detected: BB [ 194.624110][ T5331] 9pnet_fd: Insufficient options for proto=fd [ 195.693557][ T5344] loop4: detected capacity change from 0 to 256 [ 195.954702][ T5333] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.297982][ T5359] autofs4:pid:5359:autofs_fill_super: called with bogus options [ 201.881342][ T5378] netlink: 'syz.4.269': attribute type 1 has an invalid length. [ 202.792114][ T5378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.564746][ T5380] device bridge1 entered promiscuous mode [ 203.646172][ T5380] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 203.677099][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 203.710163][ T5391] netlink: 2 bytes leftover after parsing attributes in process `syz.0.273'. [ 204.403950][ T5399] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 9 (only 8 groups) [ 205.163678][ T5414] loop4: detected capacity change from 0 to 1024 [ 205.200976][ T5416] loop2: detected capacity change from 0 to 256 [ 205.208458][ T5414] ext4: Bad value for 'inode_readahead_blks' [ 206.539403][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 206.546961][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 206.551118][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 206.554144][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 206.559040][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 208.002813][ T5445] tipc: Started in network mode [ 208.032997][ T5445] tipc: Node identity ac1414aa, cluster identity 4711 [ 208.040024][ T5445] tipc: New replicast peer: 172.20.20.187 [ 208.051344][ T5445] tipc: Enabled bearer , priority 10 [ 208.984255][ T5453] loop4: detected capacity change from 0 to 1024 [ 209.207597][ T5459] netlink: 'syz.0.293': attribute type 1 has an invalid length. [ 209.272962][ T4320] tipc: Node number set to 2886997162 [ 209.388095][ T5453] hfsplus: xattr searching failed [ 209.781296][ T5466] loop1: detected capacity change from 0 to 128 [ 210.047225][ T5459] bond1: (slave bridge0): making interface the new active one [ 210.056985][ T5459] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 210.763495][ T5470] loop2: detected capacity change from 0 to 32768 [ 211.214541][ T5486] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 211.875296][ T5470] XFS (loop2): Mounting V5 Filesystem [ 212.648263][ T5470] XFS (loop2): Ending clean mount [ 212.700298][ T5470] XFS (loop2): Quotacheck needed: Please wait. [ 213.434584][ T5470] XFS (loop2): Quotacheck: Done. [ 213.652748][ T4271] XFS (loop2): Unmounting Filesystem [ 214.587487][ T5520] event trace: Could not enable event p [ 215.003732][ T5529] jffs2: notice: (5529) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 215.395908][ T5529] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 215.892187][ T5538] tipc: Enabling of bearer rejected, failed to enable media [ 215.981546][ T4289] Bluetooth: hci3: hcon ffff8880242c4000 sent 1 < count 1025 [ 217.027326][ T5558] device bridge1 entered promiscuous mode [ 217.936044][ T4289] Bluetooth: Wrong link type (-22) [ 217.942313][ T4289] Bluetooth: hci2: link tx timeout [ 217.947990][ T4289] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 217.956869][ T4289] Bluetooth: hci2: link tx timeout [ 217.962038][ T4289] Bluetooth: hci2: killing stalled connection ff:00:00:e2:ae:00 [ 217.973873][ T4289] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 218.010568][ T5558] team0: Port device bridge1 added [ 218.053590][ T5568] bridge0: port 1(team0) entered blocking state [ 218.073441][ T5568] bridge0: port 1(team0) entered disabled state [ 218.099744][ T5568] device team0 entered promiscuous mode [ 218.118427][ T5568] device team_slave_0 entered promiscuous mode [ 218.141814][ T5568] device team_slave_1 entered promiscuous mode [ 220.941198][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 221.736611][ T5603] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 222.829560][ T5603] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.955111][ T5610] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 222.970915][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 223.000575][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 223.132772][ T5603] device bridge2 entered promiscuous mode [ 223.218799][ T5603] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 223.679158][ T5630] ip_tables: iptables: counters copy to user failed while replacing table [ 224.044134][ T5632] overlayfs: failed to clone lowerpath [ 224.901718][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 224.945009][ T5640] bond0: option resend_igmp: invalid value (18446744072707910257) [ 224.978870][ T5640] bond0: option resend_igmp: allowed values 0 - 255 [ 225.439216][ T5653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 226.229136][ T5658] loop0: detected capacity change from 0 to 512 [ 226.283864][ T5658] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.342: missing EA_INODE flag [ 226.368067][ T5658] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.342: error while reading EA inode 2 err=-117 [ 226.501368][ T5658] EXT4-fs (loop0): 1 orphan inode deleted [ 226.507181][ T5658] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 226.519834][ T5665] device bridge1 entered promiscuous mode [ 228.313713][ T5665] team0: Port device bridge1 added [ 228.486140][ T5665] bridge0: port 3(team0) entered blocking state [ 228.510984][ T5665] bridge0: port 3(team0) entered disabled state [ 228.962220][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 229.012433][ T5665] device team0 entered promiscuous mode [ 229.040691][ T5665] device team_slave_0 entered promiscuous mode [ 229.080655][ T5665] device team_slave_1 entered promiscuous mode [ 229.142040][ T5665] bridge0: port 3(team0) entered blocking state [ 229.149605][ T5665] bridge0: port 3(team0) entered forwarding state [ 229.634398][ T5688] loop0: detected capacity change from 0 to 128 [ 229.830051][ T5690] bio_check_eod: 138 callbacks suppressed [ 229.830070][ T5690] syz.0.351: attempt to access beyond end of device [ 229.830070][ T5690] loop0: rw=2049, sector=145, nr_sectors = 400 limit=128 [ 230.045208][ T5688] syz.0.351: attempt to access beyond end of device [ 230.045208][ T5688] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 230.093138][ T5690] syz.0.351: attempt to access beyond end of device [ 230.093138][ T5690] loop0: rw=0, sector=150, nr_sectors = 1 limit=128 [ 231.590556][ T5688] syz.0.351: attempt to access beyond end of device [ 231.590556][ T5688] loop0: rw=0, sector=145, nr_sectors = 1 limit=128 [ 231.625659][ T5688] Buffer I/O error on dev loop0, logical block 145, async page read [ 231.650620][ T5687] syz.0.351: attempt to access beyond end of device [ 231.650620][ T5687] loop0: rw=0, sector=169, nr_sectors = 8 limit=128 [ 231.678147][ T5688] syz.0.351: attempt to access beyond end of device [ 231.678147][ T5688] loop0: rw=0, sector=146, nr_sectors = 1 limit=128 [ 231.725094][ T5687] syz.0.351: attempt to access beyond end of device [ 231.725094][ T5687] loop0: rw=0, sector=169, nr_sectors = 8 limit=128 [ 231.816913][ T5687] syz.0.351: attempt to access beyond end of device [ 231.816913][ T5687] loop0: rw=0, sector=169, nr_sectors = 8 limit=128 [ 231.830829][ T5688] Buffer I/O error on dev loop0, logical block 146, async page read [ 231.838921][ T5688] syz.0.351: attempt to access beyond end of device [ 231.838921][ T5688] loop0: rw=0, sector=147, nr_sectors = 1 limit=128 [ 231.889822][ T5687] syz.0.351: attempt to access beyond end of device [ 231.889822][ T5687] loop0: rw=0, sector=169, nr_sectors = 8 limit=128 [ 231.974510][ T5688] Buffer I/O error on dev loop0, logical block 147, async page read [ 231.993022][ T5688] Buffer I/O error on dev loop0, logical block 148, async page read [ 232.030729][ T5688] Buffer I/O error on dev loop0, logical block 149, async page read [ 232.070963][ T5688] Buffer I/O error on dev loop0, logical block 150, async page read [ 232.126002][ T5688] Buffer I/O error on dev loop0, logical block 151, async page read [ 232.152782][ T5688] Buffer I/O error on dev loop0, logical block 152, async page read [ 234.693167][ T5722] device bridge2 entered promiscuous mode [ 234.726666][ T5722] team0: Port device bridge2 added [ 235.176608][ T5731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.360'. [ 235.277955][ T5732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.354'. [ 239.288956][ T5747] netlink: 14 bytes leftover after parsing attributes in process `syz.3.367'. [ 239.515922][ T5760] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 240.998689][ T5775] loop2: detected capacity change from 0 to 128 [ 243.613502][ T5802] IPVS: set_ctl: invalid protocol: 137 172.30.0.2:20001 [ 243.787043][ T5806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 245.448636][ T5825] device syzkaller0 entered promiscuous mode [ 245.821004][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 245.821020][ T26] audit: type=1800 audit(1791446670.196:46): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.382" name="bus" dev="ramfs" ino=39786 res=0 errno=0 [ 245.927469][ T5827] loop4: detected capacity change from 0 to 128 [ 247.203045][ T5840] loop2: detected capacity change from 0 to 128 [ 247.384400][ T5840] bio_check_eod: 15 callbacks suppressed [ 247.384417][ T5840] syz.2.387: attempt to access beyond end of device [ 247.384417][ T5840] loop2: rw=2049, sector=145, nr_sectors = 352 limit=128 [ 247.622437][ T5849] loop4: detected capacity change from 0 to 8 [ 248.062728][ T5843] syz.2.387: attempt to access beyond end of device [ 248.062728][ T5843] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 248.441022][ T5843] syz.2.387: attempt to access beyond end of device [ 248.441022][ T5843] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 249.050689][ T5843] syz.2.387: attempt to access beyond end of device [ 249.050689][ T5843] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 249.057938][ T5839] syz.2.387: attempt to access beyond end of device [ 249.057938][ T5839] loop2: rw=0, sector=169, nr_sectors = 8 limit=128 [ 249.307226][ T5860] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 249.316211][ T5843] syz.2.387: attempt to access beyond end of device [ 249.316211][ T5843] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 249.320999][ T5839] syz.2.387: attempt to access beyond end of device [ 249.320999][ T5839] loop2: rw=0, sector=169, nr_sectors = 8 limit=128 [ 249.358811][ T5843] syz.2.387: attempt to access beyond end of device [ 249.358811][ T5843] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 249.372374][ T5843] syz.2.387: attempt to access beyond end of device [ 249.372374][ T5843] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 249.385584][ T5843] syz.2.387: attempt to access beyond end of device [ 249.385584][ T5843] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 249.415694][ T5843] Buffer I/O error on dev loop2, logical block 145, async page read [ 249.427440][ T5860] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 249.451641][ T5843] Buffer I/O error on dev loop2, logical block 146, async page read [ 249.467144][ T5843] Buffer I/O error on dev loop2, logical block 147, async page read [ 249.500357][ T5860] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 249.537255][ T5843] Buffer I/O error on dev loop2, logical block 148, async page read [ 249.561597][ T5843] Buffer I/O error on dev loop2, logical block 149, async page read [ 249.570661][ T5843] Buffer I/O error on dev loop2, logical block 150, async page read [ 249.578897][ T5843] Buffer I/O error on dev loop2, logical block 151, async page read [ 249.587154][ T5843] Buffer I/O error on dev loop2, logical block 152, async page read [ 249.595366][ T5843] Buffer I/O error on dev loop2, logical block 145, async page read [ 249.604004][ T5843] Buffer I/O error on dev loop2, logical block 146, async page read [ 249.631620][ T5860] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 249.826577][ T5860] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 249.917614][ T5871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.395'. [ 250.642257][ T5860] bond3: (slave geneve3): making interface the new active one [ 250.696756][ T5860] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 250.736351][ T5860] syz.3.393 (5860) used greatest stack depth: 19728 bytes left [ 250.812508][ T5864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.393'. [ 253.004125][ T5889] netlink: 'syz.3.402': attribute type 4 has an invalid length. [ 255.680924][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.687298][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.154331][ T5906] loop2: detected capacity change from 0 to 4096 [ 256.203372][ T5906] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 256.677410][ T5919] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.407: corrupted inode contents [ 256.692795][ T5919] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #15: comm syz.2.407: mark_inode_dirty error [ 256.705429][ T5919] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.407: corrupted inode contents [ 256.718159][ T5919] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.407: mark_inode_dirty error [ 256.731159][ T5919] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.407: corrupted inode contents [ 256.745508][ T5919] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.407: mark_inode_dirty error [ 256.758901][ T5919] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.407: corrupted inode contents [ 256.773866][ T5919] EXT4-fs error (device loop2): ext4_truncate:4325: inode #15: comm syz.2.407: mark_inode_dirty error [ 256.785605][ T5919] EXT4-fs error (device loop2) in ext4_setattr:5695: Corrupt filesystem [ 256.870559][ T26] audit: type=1800 audit(1791446681.046:47): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.407" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 256.997531][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 257.452065][ T5936] loop2: detected capacity change from 0 to 512 [ 257.466621][ T5936] EXT4-fs: Ignoring removed orlov option [ 257.476771][ T5936] ext4: Bad value for 'data' [ 259.637766][ T5974] loop4: detected capacity change from 0 to 128 [ 260.031644][ T5984] bio_check_eod: 1712 callbacks suppressed [ 260.031664][ T5984] syz.4.420: attempt to access beyond end of device [ 260.031664][ T5984] loop4: rw=2049, sector=145, nr_sectors = 160 limit=128 [ 260.158018][ T5974] syz.4.420: attempt to access beyond end of device [ 260.158018][ T5974] loop4: rw=524288, sector=145, nr_sectors = 160 limit=128 [ 260.183406][ T5986] fuse: Bad value for 'fd' [ 261.272171][ T5974] syz.4.420: attempt to access beyond end of device [ 261.272171][ T5974] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 261.287232][ T5974] syz.4.420: attempt to access beyond end of device [ 261.287232][ T5974] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 261.302712][ T5974] syz.4.420: attempt to access beyond end of device [ 261.302712][ T5974] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 261.337579][ T5972] syz.4.420: attempt to access beyond end of device [ 261.337579][ T5972] loop4: rw=0, sector=169, nr_sectors = 8 limit=128 [ 261.390770][ T5972] syz.4.420: attempt to access beyond end of device [ 261.390770][ T5972] loop4: rw=0, sector=169, nr_sectors = 8 limit=128 [ 261.420612][ T5974] syz.4.420: attempt to access beyond end of device [ 261.420612][ T5974] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 261.439202][ T5972] syz.4.420: attempt to access beyond end of device [ 261.439202][ T5972] loop4: rw=0, sector=169, nr_sectors = 8 limit=128 [ 261.546160][ T5974] syz.4.420: attempt to access beyond end of device [ 261.546160][ T5974] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 261.612800][ T5974] buffer_io_error: 1510 callbacks suppressed [ 261.612819][ T5974] Buffer I/O error on dev loop4, logical block 145, async page read [ 261.671907][ T5974] Buffer I/O error on dev loop4, logical block 146, async page read [ 261.792188][ T5974] Buffer I/O error on dev loop4, logical block 147, async page read [ 261.840751][ T5974] Buffer I/O error on dev loop4, logical block 148, async page read [ 261.884584][ T5974] Buffer I/O error on dev loop4, logical block 149, async page read [ 261.910780][ T5974] Buffer I/O error on dev loop4, logical block 150, async page read [ 262.121323][ T5974] Buffer I/O error on dev loop4, logical block 151, async page read [ 262.191385][ T5974] Buffer I/O error on dev loop4, logical block 152, async page read [ 265.212320][ T6015] loop2: detected capacity change from 0 to 256 [ 265.238840][ T6017] loop0: detected capacity change from 0 to 512 [ 265.381159][ T6015] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 266.259293][ T6029] vivid-000: disconnect [ 266.267168][ T6029] vivid-000: reconnect [ 267.173135][ T6046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.426'. [ 267.956219][ T6050] loop0: detected capacity change from 0 to 512 [ 268.119391][ T6050] EXT4-fs (loop0): invalid journal inode [ 269.121826][ T6050] EXT4-fs (loop0): can't get journal size [ 269.322149][ T6050] EXT4-fs (loop0): 1 truncate cleaned up [ 269.338327][ T6050] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 269.456410][ T6068] loop4: detected capacity change from 0 to 512 [ 269.524623][ T6068] EXT4-fs: Ignoring removed i_version option [ 269.541875][ T6068] EXT4-fs: Ignoring removed oldalloc option [ 269.605520][ T6068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 269.621154][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 270.517685][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 270.586857][ T6077] loop0: detected capacity change from 0 to 512 [ 270.639654][ T6077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.338467][ T6077] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 271.355611][ T6077] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.746620][ T6089] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 272.845707][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 272.876874][ T6079] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 275.000725][ T6117] loop2: detected capacity change from 0 to 128 [ 275.811575][ T6125] bio_check_eod: 20 callbacks suppressed [ 275.814691][ T6125] syz.2.455: attempt to access beyond end of device [ 275.814691][ T6125] loop2: rw=2049, sector=145, nr_sectors = 208 limit=128 [ 276.205905][ T6117] syz.2.455: attempt to access beyond end of device [ 276.205905][ T6117] loop2: rw=524288, sector=145, nr_sectors = 208 limit=128 [ 277.085015][ T6117] syz.2.455: attempt to access beyond end of device [ 277.085015][ T6117] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 277.112419][ T6117] syz.2.455: attempt to access beyond end of device [ 277.112419][ T6117] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 277.160872][ T6121] syz.2.455: attempt to access beyond end of device [ 277.160872][ T6121] loop2: rw=0, sector=150, nr_sectors = 1 limit=128 [ 277.214312][ T6116] syz.2.455: attempt to access beyond end of device [ 277.214312][ T6116] loop2: rw=0, sector=169, nr_sectors = 8 limit=128 [ 277.408587][ T6117] syz.2.455: attempt to access beyond end of device [ 277.408587][ T6117] loop2: rw=0, sector=145, nr_sectors = 1 limit=128 [ 277.422565][ T6116] syz.2.455: attempt to access beyond end of device [ 277.422565][ T6116] loop2: rw=0, sector=169, nr_sectors = 8 limit=128 [ 277.494965][ T6117] Buffer I/O error on dev loop2, logical block 145, async page read [ 277.498591][ T6116] syz.2.455: attempt to access beyond end of device [ 277.498591][ T6116] loop2: rw=0, sector=169, nr_sectors = 8 limit=128 [ 278.210585][ T6117] syz.2.455: attempt to access beyond end of device [ 278.210585][ T6117] loop2: rw=0, sector=146, nr_sectors = 1 limit=128 [ 278.268484][ T6117] Buffer I/O error on dev loop2, logical block 146, async page read [ 279.820481][ T6117] Buffer I/O error on dev loop2, logical block 147, async page read [ 279.850582][ T6117] Buffer I/O error on dev loop2, logical block 148, async page read [ 279.923591][ T6117] Buffer I/O error on dev loop2, logical block 149, async page read [ 280.871189][ T6117] bio_check_eod: 14 callbacks suppressed [ 280.871211][ T6117] syz.2.455: attempt to access beyond end of device [ 280.871211][ T6117] loop2: rw=0, sector=150, nr_sectors = 1 limit=128 [ 280.940639][ T6117] Buffer I/O error on dev loop2, logical block 150, async page read [ 281.011766][ T6117] syz.2.455: attempt to access beyond end of device [ 281.011766][ T6117] loop2: rw=0, sector=151, nr_sectors = 1 limit=128 [ 281.084336][ T6117] Buffer I/O error on dev loop2, logical block 151, async page read [ 281.205129][ T6117] syz.2.455: attempt to access beyond end of device [ 281.205129][ T6117] loop2: rw=0, sector=152, nr_sectors = 1 limit=128 [ 281.436033][ T6117] Buffer I/O error on dev loop2, logical block 152, async page read [ 284.570043][ T6184] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 285.025447][ T6200] loop0: detected capacity change from 0 to 512 [ 285.780612][ T6200] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 285.861990][ T6204] MTD: Couldn't look up './dev/mtdblock0': -2 [ 286.060700][ T6215] capability: warning: `syz.1.470' uses 32-bit capabilities (legacy support in use) [ 286.335614][ T6221] syz.4.474 sent an empty control message without MSG_MORE. [ 286.634949][ T6223] sctp: [Deprecated]: syz.2.475 (pid 6223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.634949][ T6223] Use struct sctp_sack_info instead [ 286.945057][ T6225] syz.4.477 uses obsolete (PF_INET,SOCK_PACKET) [ 286.954091][ T6200] EXT4-fs (loop0): 1 truncate cleaned up [ 286.959806][ T6200] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 287.098821][ T6195] sctp: failed to load transform for md5: -4 [ 287.110837][ T6215] sctp: failed to load transform for md5: -4 [ 287.130696][ T6213] sctp: failed to load transform for md5: -4 [ 287.861312][ T26] audit: type=1800 audit(1791446712.166:48): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.472" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 287.884695][ T6201] sctp: failed to load transform for md5: -4 [ 288.058404][ T6240] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.472: invalid indirect mapped block 4294967295 (level 1) [ 288.061119][ T6210] sctp: failed to load transform for md5: -2 [ 288.081699][ T6240] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.472: invalid indirect mapped block 65535 (level 2) [ 289.444209][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 293.202128][ T6283] tipc: Enabled bearer , priority 0 [ 293.245082][ T6283] tipc: Resetting bearer [ 293.917369][ T6282] tipc: Disabling bearer [ 295.966416][ T6308] netlink: 'syz.0.494': attribute type 4 has an invalid length. [ 297.104165][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 297.114518][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 308.986819][ T6420] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 310.323507][ C1] ------------[ cut here ]------------ [ 310.329524][ C1] WARNING: CPU: 1 PID: 4272 at net/core/flow_dissector.c:1027 __skb_flow_dissect+0xade/0x6d50 [ 310.339930][ C1] Modules linked in: [ 310.343970][ C1] CPU: 1 PID: 4272 Comm: syz-executor Not tainted syzkaller #0 [ 310.351641][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 310.361819][ C1] RIP: 0010:__skb_flow_dissect+0xade/0x6d50 [ 310.367782][ C1] Code: c6 e8 36 27 4d f9 85 db 0f 84 5b 06 00 00 80 3d f8 32 b7 06 01 0f 85 81 06 00 00 e8 bc 23 4d f9 e9 e7 f9 ff ff e8 b2 23 4d f9 <0f> 0b e8 cb bc fe 01 89 c3 31 ff 89 c6 e8 00 27 4d f9 85 db 74 18 [ 310.387551][ C1] RSP: 0000:ffffc900001df800 EFLAGS: 00010246 [ 310.393698][ C1] RAX: ffffffff883522ce RBX: 0000000000000000 RCX: ffff888026ba0000 [ 310.401831][ C1] RDX: 0000000000000100 RSI: ffffffff8adf7180 RDI: ffffffff8adf7140 [ 310.409884][ C1] RBP: ffffc900001dfdc8 R08: dffffc0000000000 R09: 1ffffffff2326848 [ 310.418037][ C1] R10: dffffc0000000000 R11: fffffbfff2326849 R12: ffffffff8f01437c [ 310.426147][ C1] R13: 1ffffffff1e02870 R14: ffffffff8f014382 R15: dffffc0000000000 [ 310.434315][ C1] FS: 0000555563108500(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 310.443418][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.450092][ C1] CR2: 0000200000000040 CR3: 000000005b5e4000 CR4: 00000000003506e0 [ 310.458252][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.466337][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.474465][ C1] Call Trace: [ 310.477823][ C1] [ 310.480788][ C1] ? __skb_flow_dissect+0x407/0x6d50 [ 310.486197][ C1] ? lockdep_lock+0x1f0/0x1f0 [ 310.491031][ C1] ? verify_lock_unused+0x140/0x140 [ 310.496306][ C1] ? bpf_flow_dissect+0x3f0/0x3f0 [ 310.501431][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 310.506706][ C1] ? rcu_read_lock_sched_held+0x86/0x110 [ 310.512464][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 310.518476][ C1] ? rcu_is_watching+0x11/0xa0 [ 310.523285][ C1] ? __update_load_avg_cfs_rq+0x745/0xb70 [ 310.529015][ C1] ? cpufreq_update_util+0x91/0x230 [ 310.534265][ C1] ? try_to_wake_up+0x660/0x10b0 [ 310.539222][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 310.544302][ C1] ? __queue_work+0xb00/0xee0 [ 310.549014][ C1] ? mark_lock+0x94/0x320 [ 310.553454][ C1] ___skb_get_hash+0x55/0x6e0 [ 310.558156][ C1] __skb_get_hash+0xd2/0x270 [ 310.562807][ C1] ? queue_work_on+0x10c/0x1f0 [ 310.567610][ C1] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 310.573372][ C1] ? queue_work_on+0x196/0x1f0 [ 310.578153][ C1] ? once_disable_jump+0x150/0x1a0 [ 310.583310][ C1] nft_trace_init+0x1e0/0x430 [ 310.588005][ C1] ? nf_trace_fill_pkt_info+0x870/0x870 [ 310.593602][ C1] nft_do_chain+0x1612/0x16d0 [ 310.598316][ C1] ? mark_lock+0x94/0x320 [ 310.602718][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 310.608626][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 310.614691][ C1] ? tcp_timeout_obj_to_nlattr+0x7c0/0x7c0 [ 310.620605][ C1] ? nf_nat_inet_fn+0x5fa/0xb30 [ 310.630663][ C1] ? nf_nat_packet+0xf0/0xf0 [ 310.635279][ C1] ? ipt_alloc_initial_table+0x610/0x610 [ 310.640971][ C1] nft_do_chain_ipv4+0x156/0x220 [ 310.645932][ C1] ? nf_tables_netdev_event+0x9c0/0x9c0 [ 310.651542][ C1] ? nf_nat_ipv4_local_fn+0x40d/0x560 [ 310.656935][ C1] ? nf_tables_netdev_event+0x9c0/0x9c0 [ 310.662517][ C1] nf_hook_slow+0xb9/0x200 [ 310.666957][ C1] ? nf_hook+0x390/0x390 [ 310.671239][ C1] nf_hook+0x224/0x390 [ 310.675331][ C1] ? nf_hook+0x9e/0x390 [ 310.679521][ C1] ? __ip_local_out+0x5d0/0x5d0 [ 310.684479][ C1] ? nf_hook+0x390/0x390 [ 310.688756][ C1] ? ip_fast_csum+0x1ea/0x2b0 [ 310.693494][ C1] __ip_local_out+0x49c/0x5d0 [ 310.698191][ C1] ? nf_hook+0x390/0x390 [ 310.702491][ C1] ip_local_out+0x26/0x120 [ 310.706928][ C1] iptunnel_xmit+0x4a1/0x880 [ 310.711582][ C1] udp_tunnel_xmit_skb+0x22b/0x380 [ 310.716731][ C1] tipc_udp_xmit+0x85d/0xb40 [ 310.721398][ C1] ? tipc_udp_xmit+0xb3/0xb40 [ 310.726130][ C1] ? __pskb_copy_fclone+0xaa/0x1130 [ 310.731416][ C1] ? tipc_udp_msg2addr+0x1c0/0x1c0 [ 310.736541][ C1] ? __pskb_copy_fclone+0xaa/0x1130 [ 310.741796][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 310.746947][ C1] ? memcpy+0x3c/0x60 [ 310.751022][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 310.756153][ C1] ? __pskb_copy_fclone+0xadb/0x1130 [ 310.761494][ C1] tipc_udp_send_msg+0x27a/0x3e0 [ 310.766482][ C1] tipc_bearer_xmit_skb+0x2a9/0x3f0 [ 310.771757][ C1] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 310.777091][ C1] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 310.782465][ C1] tipc_disc_timeout+0x5e1/0x740 [ 310.787427][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 310.792688][ C1] call_timer_fn+0x1ac/0x670 [ 310.797296][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 310.802541][ C1] ? call_timer_fn+0xcf/0x670 [ 310.807232][ C1] ? __run_timers+0x810/0x810 [ 310.811967][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 310.817191][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 310.822448][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 310.827657][ C1] __run_timers+0x56c/0x810 [ 310.832216][ C1] ? detach_timer+0x350/0x350 [ 310.836922][ C1] ? lock_chain_count+0x20/0x20 [ 310.842359][ C1] run_timer_softirq+0x63/0xf0 [ 310.847147][ C1] handle_softirqs+0x291/0x910 [ 310.851969][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 310.856841][ C1] ? do_softirq+0x210/0x210 [ 310.861415][ C1] ? hrtimer_interrupt+0x775/0x980 [ 310.866558][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 310.871823][ C1] __irq_exit_rcu+0x13b/0x230 [ 310.876527][ C1] ? irq_exit_rcu+0x20/0x20 [ 310.881086][ C1] irq_exit_rcu+0x5/0x20 [ 310.885343][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 310.891086][ C1] [ 310.894052][ C1] [ 310.896999][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 310.903045][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 310.908867][ C1] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ae 8b 26 f7 48 89 df e8 16 5e 27 f7 e8 71 b7 4a f7 fb bf 01 00 00 00 76 c7 1a f7 65 8b 05 37 77 c4 75 85 c0 74 02 5b c3 e8 44 8b c2 [ 310.928521][ C1] RSP: 0000:ffffc90003d978d8 EFLAGS: 00000286 [ 310.934638][ C1] RAX: 21f610ef0bc49400 RBX: ffff88804e98a300 RCX: 21f610ef0bc49400 [ 310.942652][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 0000000000000001 [ 310.950674][ C1] RBP: ffffc90003d97b90 R08: ffffffff9193424f R09: 1ffffffff2326849 [ 310.958680][ C1] R10: dffffc0000000000 R11: fffffbfff232684a R12: dffffc0000000000 [ 310.966832][ C1] R13: 1ffff11009d3145f R14: ffff88804e98a2f8 R15: ffff88804e98a300 [ 310.974955][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 310.980238][ C1] filemap_remove_folio+0xf5/0x2c0 [ 310.985523][ C1] truncate_inode_folio+0x59/0x70 [ 310.998405][ C1] shmem_undo_range+0x554/0x21d0 [ 311.003521][ C1] ? verify_lock_unused+0x140/0x140 [ 311.008810][ C1] ? shmem_truncate_range+0xb0/0xb0 [ 311.014171][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 311.019285][ C1] ? __rwlock_init+0x140/0x140 [ 311.024166][ C1] shmem_evict_inode+0x225/0x9f0 [ 311.029209][ C1] ? _raw_spin_unlock+0x24/0x40 [ 311.034190][ C1] ? inode_wait_for_writeback+0x1df/0x220 [ 311.039982][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 311.045687][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 311.050871][ C1] ? bit_waitqueue+0x30/0x30 [ 311.055539][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 311.060898][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 311.066526][ C1] evict+0x4b6/0x8b0 [ 311.070615][ C1] ? proc_nr_inodes+0x2f0/0x2f0 [ 311.075556][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 311.080904][ C1] ? _raw_spin_unlock+0x24/0x40 [ 311.085861][ C1] ? iput+0x79f/0x9c0 [ 311.089914][ C1] do_unlinkat+0x388/0x580 [ 311.094623][ C1] ? fsnotify_link_count+0xf0/0xf0 [ 311.099839][ C1] ? getname_flags+0x206/0x500 [ 311.104754][ C1] __x64_sys_unlink+0x45/0x50 [ 311.109524][ C1] do_syscall_64+0x4c/0xa0 [ 311.114094][ C1] ? clear_bhb_loop+0x60/0xb0 [ 311.118848][ C1] ? clear_bhb_loop+0x60/0xb0 [ 311.123673][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.129681][ C1] RIP: 0033:0x7fc640f9d287 [ 311.134288][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 311.153950][ C1] RSP: 002b:00007ffde90c5e58 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 311.162425][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc640f9d287 [ 311.170458][ C1] RDX: 00007ffde90c5e80 RSI: 00007ffde90c5f10 RDI: 00007ffde90c5f10 [ 311.178457][ C1] RBP: 00007ffde90c5f10 R08: 00007ffde90c6f10 R09: 00000000ffffffff [ 311.186480][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffde90c6fa0 [ 311.194497][ C1] R13: 00007fc641034ccb R14: 000000000004a665 R15: 00007ffde90c6fe0 [ 311.202525][ C1] [ 311.205572][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 311.212856][ C1] CPU: 1 PID: 4272 Comm: syz-executor Not tainted syzkaller #0 [ 311.220415][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.230500][ C1] Call Trace: [ 311.234326][ C1] [ 311.237182][ C1] dump_stack_lvl+0x188/0x24e [ 311.241885][ C1] ? memcpy+0x3c/0x60 [ 311.245878][ C1] ? show_regs_print_info+0x12/0x12 [ 311.251097][ C1] ? load_image+0x410/0x410 [ 311.255618][ C1] panic+0x2d3/0x710 [ 311.259556][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 311.264088][ C1] __warn+0x2f8/0x4f0 [ 311.268091][ C1] ? __skb_flow_dissect+0xade/0x6d50 [ 311.273396][ C1] ? __skb_flow_dissect+0xade/0x6d50 [ 311.278695][ C1] report_bug+0x2ba/0x4f0 [ 311.283053][ C1] ? __skb_flow_dissect+0xade/0x6d50 [ 311.288359][ C1] handle_bug+0x3a/0x70 [ 311.292538][ C1] exc_invalid_op+0x16/0x40 [ 311.297057][ C1] asm_exc_invalid_op+0x16/0x20 [ 311.301941][ C1] RIP: 0010:__skb_flow_dissect+0xade/0x6d50 [ 311.307849][ C1] Code: c6 e8 36 27 4d f9 85 db 0f 84 5b 06 00 00 80 3d f8 32 b7 06 01 0f 85 81 06 00 00 e8 bc 23 4d f9 e9 e7 f9 ff ff e8 b2 23 4d f9 <0f> 0b e8 cb bc fe 01 89 c3 31 ff 89 c6 e8 00 27 4d f9 85 db 74 18 [ 311.327488][ C1] RSP: 0000:ffffc900001df800 EFLAGS: 00010246 [ 311.333567][ C1] RAX: ffffffff883522ce RBX: 0000000000000000 RCX: ffff888026ba0000 [ 311.341560][ C1] RDX: 0000000000000100 RSI: ffffffff8adf7180 RDI: ffffffff8adf7140 [ 311.349544][ C1] RBP: ffffc900001dfdc8 R08: dffffc0000000000 R09: 1ffffffff2326848 [ 311.357547][ C1] R10: dffffc0000000000 R11: fffffbfff2326849 R12: ffffffff8f01437c [ 311.365549][ C1] R13: 1ffffffff1e02870 R14: ffffffff8f014382 R15: dffffc0000000000 [ 311.373535][ C1] ? __skb_flow_dissect+0xade/0x6d50 [ 311.378861][ C1] ? __skb_flow_dissect+0x407/0x6d50 [ 311.384167][ C1] ? lockdep_lock+0x1f0/0x1f0 [ 311.388864][ C1] ? verify_lock_unused+0x140/0x140 [ 311.394082][ C1] ? bpf_flow_dissect+0x3f0/0x3f0 [ 311.399125][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 311.404345][ C1] ? rcu_read_lock_sched_held+0x86/0x110 [ 311.409987][ C1] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 311.415975][ C1] ? rcu_is_watching+0x11/0xa0 [ 311.420756][ C1] ? __update_load_avg_cfs_rq+0x745/0xb70 [ 311.426488][ C1] ? cpufreq_update_util+0x91/0x230 [ 311.431710][ C1] ? try_to_wake_up+0x660/0x10b0 [ 311.436662][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 311.441716][ C1] ? __queue_work+0xb00/0xee0 [ 311.446432][ C1] ? mark_lock+0x94/0x320 [ 311.450778][ C1] ___skb_get_hash+0x55/0x6e0 [ 311.455479][ C1] __skb_get_hash+0xd2/0x270 [ 311.460079][ C1] ? queue_work_on+0x10c/0x1f0 [ 311.464850][ C1] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 311.470593][ C1] ? queue_work_on+0x196/0x1f0 [ 311.475377][ C1] ? once_disable_jump+0x150/0x1a0 [ 311.480518][ C1] nft_trace_init+0x1e0/0x430 [ 311.485225][ C1] ? nf_trace_fill_pkt_info+0x870/0x870 [ 311.490807][ C1] nft_do_chain+0x1612/0x16d0 [ 311.495510][ C1] ? mark_lock+0x94/0x320 [ 311.499857][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 311.505763][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 311.511771][ C1] ? tcp_timeout_obj_to_nlattr+0x7c0/0x7c0 [ 311.517626][ C1] ? nf_nat_inet_fn+0x5fa/0xb30 [ 311.522515][ C1] ? nf_nat_packet+0xf0/0xf0 [ 311.527148][ C1] ? ipt_alloc_initial_table+0x610/0x610 [ 311.532822][ C1] nft_do_chain_ipv4+0x156/0x220 [ 311.537775][ C1] ? nf_tables_netdev_event+0x9c0/0x9c0 [ 311.543348][ C1] ? nf_nat_ipv4_local_fn+0x40d/0x560 [ 311.548732][ C1] ? nf_tables_netdev_event+0x9c0/0x9c0 [ 311.554317][ C1] nf_hook_slow+0xb9/0x200 [ 311.558844][ C1] ? nf_hook+0x390/0x390 [ 311.563134][ C1] nf_hook+0x224/0x390 [ 311.567249][ C1] ? nf_hook+0x9e/0x390 [ 311.571554][ C1] ? __ip_local_out+0x5d0/0x5d0 [ 311.576628][ C1] ? nf_hook+0x390/0x390 [ 311.580925][ C1] ? ip_fast_csum+0x1ea/0x2b0 [ 311.585664][ C1] __ip_local_out+0x49c/0x5d0 [ 311.590451][ C1] ? nf_hook+0x390/0x390 [ 311.594774][ C1] ip_local_out+0x26/0x120 [ 311.599266][ C1] iptunnel_xmit+0x4a1/0x880 [ 311.603930][ C1] udp_tunnel_xmit_skb+0x22b/0x380 [ 311.609107][ C1] tipc_udp_xmit+0x85d/0xb40 [ 311.613798][ C1] ? tipc_udp_xmit+0xb3/0xb40 [ 311.618526][ C1] ? __pskb_copy_fclone+0xaa/0x1130 [ 311.623786][ C1] ? tipc_udp_msg2addr+0x1c0/0x1c0 [ 311.628972][ C1] ? __pskb_copy_fclone+0xaa/0x1130 [ 311.634254][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 311.639412][ C1] ? memcpy+0x3c/0x60 [ 311.643427][ C1] ? __copy_skb_header+0x3ba/0x4f0 [ 311.648587][ C1] ? __pskb_copy_fclone+0xadb/0x1130 [ 311.653974][ C1] tipc_udp_send_msg+0x27a/0x3e0 [ 311.658975][ C1] tipc_bearer_xmit_skb+0x2a9/0x3f0 [ 311.664358][ C1] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 311.669709][ C1] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 311.675075][ C1] tipc_disc_timeout+0x5e1/0x740 [ 311.680080][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 311.685373][ C1] call_timer_fn+0x1ac/0x670 [ 311.690048][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 311.695300][ C1] ? call_timer_fn+0xcf/0x670 [ 311.700029][ C1] ? __run_timers+0x810/0x810 [ 311.704768][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 311.710025][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 311.715292][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 311.720580][ C1] __run_timers+0x56c/0x810 [ 311.725189][ C1] ? detach_timer+0x350/0x350 [ 311.729926][ C1] ? lock_chain_count+0x20/0x20 [ 311.734858][ C1] run_timer_softirq+0x63/0xf0 [ 311.739720][ C1] handle_softirqs+0x291/0x910 [ 311.744563][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 311.749452][ C1] ? do_softirq+0x210/0x210 [ 311.753960][ C1] ? hrtimer_interrupt+0x775/0x980 [ 311.759084][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 311.764296][ C1] __irq_exit_rcu+0x13b/0x230 [ 311.769013][ C1] ? irq_exit_rcu+0x20/0x20 [ 311.773536][ C1] irq_exit_rcu+0x5/0x20 [ 311.777795][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 311.783456][ C1] [ 311.786391][ C1] [ 311.789348][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 311.795376][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 311.801227][ C1] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ae 8b 26 f7 48 89 df e8 16 5e 27 f7 e8 71 b7 4a f7 fb bf 01 00 00 00 76 c7 1a f7 65 8b 05 37 77 c4 75 85 c0 74 02 5b c3 e8 44 8b c2 [ 311.820849][ C1] RSP: 0000:ffffc90003d978d8 EFLAGS: 00000286 [ 311.826928][ C1] RAX: 21f610ef0bc49400 RBX: ffff88804e98a300 RCX: 21f610ef0bc49400 [ 311.834916][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 0000000000000001 [ 311.842915][ C1] RBP: ffffc90003d97b90 R08: ffffffff9193424f R09: 1ffffffff2326849 [ 311.850928][ C1] R10: dffffc0000000000 R11: fffffbfff232684a R12: dffffc0000000000 [ 311.858927][ C1] R13: 1ffff11009d3145f R14: ffff88804e98a2f8 R15: ffff88804e98a300 [ 311.866932][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 311.872147][ C1] filemap_remove_folio+0xf5/0x2c0 [ 311.877292][ C1] truncate_inode_folio+0x59/0x70 [ 311.882334][ C1] shmem_undo_range+0x554/0x21d0 [ 311.887293][ C1] ? verify_lock_unused+0x140/0x140 [ 311.892520][ C1] ? shmem_truncate_range+0xb0/0xb0 [ 311.897785][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 311.902839][ C1] ? __rwlock_init+0x140/0x140 [ 311.907633][ C1] shmem_evict_inode+0x225/0x9f0 [ 311.912600][ C1] ? _raw_spin_unlock+0x24/0x40 [ 311.917490][ C1] ? inode_wait_for_writeback+0x1df/0x220 [ 311.923246][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 311.928831][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 311.933865][ C1] ? bit_waitqueue+0x30/0x30 [ 311.938492][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 311.943702][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 311.949282][ C1] evict+0x4b6/0x8b0 [ 311.953196][ C1] ? proc_nr_inodes+0x2f0/0x2f0 [ 311.958060][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 311.963289][ C1] ? _raw_spin_unlock+0x24/0x40 [ 311.968168][ C1] ? iput+0x79f/0x9c0 [ 311.972168][ C1] do_unlinkat+0x388/0x580 [ 311.976599][ C1] ? fsnotify_link_count+0xf0/0xf0 [ 311.981749][ C1] ? getname_flags+0x206/0x500 [ 311.986533][ C1] __x64_sys_unlink+0x45/0x50 [ 311.991223][ C1] do_syscall_64+0x4c/0xa0 [ 311.995676][ C1] ? clear_bhb_loop+0x60/0xb0 [ 312.000382][ C1] ? clear_bhb_loop+0x60/0xb0 [ 312.005108][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.011018][ C1] RIP: 0033:0x7fc640f9d287 [ 312.015445][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 312.035083][ C1] RSP: 002b:00007ffde90c5e58 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 312.043512][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc640f9d287 [ 312.051495][ C1] RDX: 00007ffde90c5e80 RSI: 00007ffde90c5f10 RDI: 00007ffde90c5f10 [ 312.059496][ C1] RBP: 00007ffde90c5f10 R08: 00007ffde90c6f10 R09: 00000000ffffffff [ 312.067476][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffde90c6fa0 [ 312.075458][ C1] R13: 00007fc641034ccb R14: 000000000004a665 R15: 00007ffde90c6fe0 [ 312.083454][ C1] [ 312.086672][ C1] Kernel Offset: disabled [ 312.091123][ C1] Rebooting in 86400 seconds..